+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Cerberus Tut [(NOOB Friendly)] (/showthread.php?tid=201519)
Pages: Pages
1
2
Cerberus Tut [(NOOB Friendly)] - screws - Dec 9, 2009
Hi Guys I am not responsible for this guide it is taken from the official Cerberus forums, Many people are asking for help but I cant find any TUTs
sorry for my bad English not the best at it but here we go...
sorry all the pictures arnt there but i am only alowed to uplaod 10 and theres a total of 15
Tut taken from "http://se.curity.org/showthread.php?t=32383"
with few edits by me "screws"
Ok first of all we will have to download Cerberus
from either ( latest version ) ( still in BETA )
http://se.curity.org/showthread.php?t=32759
or
http://www.multiupload.com/GTVD40OX8S
First, we want to have a dyndns account. Go to http://www.dyndns.com/ and register yourself (Yes i know people often use no-ip instead, but i like DD better )
When you have registered yourself and logged in, we need to go to services and add host
[IMG]http://i801.photobucket.com/albums/yy300/carniviaa2/myhosty.jpg[/IMG]
Here you just need to fill in your hostname of your choice (what the url is gonna be), Choose Host with IP address, fill inn your IP address, and press add to cart.
This feature is free, so just press NEXT and press Activate Services on the next page.
So now you have your own free domain!
Next is you need to forward your port (if you are behind a router)
Go to www.portforward.com and check out the guide for your router!, we also have other sticky threads about just this.
We are going to use port 13243 in this guide, but it is up to you what port you want to use. The reason i choose a portnumber so high is that other programs normaly don't use this.
Okai, now we are done with everything we need to do before setting up cerberus, i would also recommend turning of both firewall and antivirus while doing this so you don't get any interuptions etc.
let's open cerberus and get started.
[IMG]http://i801.photobucket.com/albums/yy300/carniviaa2/cerbp.jpg[/IMG]
Here we start with
Basic Options
[IMG]http://i801.photobucket.com/albums/yy300/carniviaa2/basick.jpg[/IMG]
Here you fill out the hostname you choosed at dyndns.org, your password that you want your server to use and a name (ID). Also remember to change the port like in this picture. That is very important! ^^
Next up is the
server installation
[IMG]http://i801.photobucket.com/albums/yy300/carniviaa2/serverinst.jpg[/IMG]
Here you will tell cerberus where to install itself and its name, you can ofcourse choose whatever you want on these settings, but i like to install it in the windows directory.
Next up is the
Boot methord
[IMG]http://i801.photobucket.com/albums/yy300/carniviaa2/bootg.jpg[/IMG]
Here i am telling cerberus to start up in registry, this is an easy way to make cerberus start up after the computer that the server is installed on reboot's. I also choosed Active Setup to bypass some AV's
Add file
[IMG]http://i801.photobucket.com/albums/yy300/carniviaa2/addfile.jpg[/IMG]
Since this is a beginner set up i am going to leave this blank for now. But if you want to add your own files that also is going to start with cerberus, this is the place to go, but lets leave this blank for now
anti debug
Here i am leaving this blank for now, since i am testing on a VMware later on. But normaly you would want to check all of this, so it wont get detected by sandboxes etc
misc options
Here i turned on keylogging and configured it to log everything to "database.dat"
I also choosed some stealth options to keep the files hidden, but most important i changed the process i wanted cerberus to inject into, since i think IE process is crashing to much and that is something we don't want ^^
Display a message
If you want cerberus to display any error messages this is the place to configure it, and i think most of these things describe itself I will leave this alone as i want cerberus to just run in the background.
Black list
Here you can choose what processes you want cerberus to try to kill when it gets executed, like antivirus processes or special programs. I haven't tested this myself so use it at your own risk .
create server
Here you will choose the name of the file and what type of file it will be.
I also set it up to run in visible mode, so the user KNOW that cerberus runs on the computer. Normal AntiVirus'es also sees files compressed with UPX as suspicious, so i rather not use it.
When you have choosed all you want to use, press CREATE SERVER.
Then your server will appear in your cerberus folder. If you want now, you can doubleclick it to see if it works.
Thats all for now, if you have any problems on connection, check the two other stickies in this category
once again a little of this is mine but mainly taken from
http://se.curity.org/showthread.php?t=32383
screws ! 👍🎉🤝🤩
* - ProductOfIsolation - Dec 9, 2009
Hey Screws, under the Options > Extras...
We set up dyndns, which is there. In that one I input gmail/gmail password, and the domain we made with dyndns.
If we have that, is it neccisary to do No-IP? Thanks..
* - screws - Dec 10, 2009
hi mate you can do either dydns or no-ip i pefer dydns but no-ip in some cases is easyer to use i guess
* - aslantic - Dec 10, 2009
u torrent isnt working with it what did u use?
* - screws - Dec 10, 2009
which port did i use ?
if you mean that i used one between 7000-9000
you can use any
pm me in you need help operning ports
* - taren113 - Dec 10, 2009
I dunno if mine is working =O?
* - screws - Dec 11, 2009
test it on yourself
message too short
* - WetRain - Dec 11, 2009
(Dec 11, 2009 08:30 AM)screws Wrote: test it on yourself
*message too short*
could you please Teamview me and see what i do wrong?
* - screws - Dec 11, 2009
ok whats ur msn ?
message too short
* - rowey-2k9 - Dec 11, 2009
wot file do i send to people ?
* - Twenty - Dec 11, 2009
(Dec 11, 2009 04:52 PM)rowey-2k9 Wrote: wot file do i send to people ?
The file that Cerberus produces. Eg, Server.exe
* - Echo1337 - Dec 12, 2009
tested it on myself, but its not working :S
* - rowey-2k9 - Dec 12, 2009
(Dec 12, 2009 03:59 AM)Echo1337 Wrote: tested it on myself, but its not working :S
* - BeNoM - Dec 12, 2009
Make sure AV's disabled COMPLETELY. Try on sandbox and if it connects the next step is to crypt your server.
Also make sure your forwarded ports are consistent with the ports your cerberus is listening to.
* - Hypnôse - Dec 12, 2009
Same with me, i cant get it working tried on myself and sending people it but nothing comes up on the rat for me when they open it.
If anyone could help me add my msn: [email protected]