+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Tutorial: Use RAT Slaves As Proxies (/showthread.php?tid=2182016)
Tutorial: Use RAT Slaves As Proxies - Le Spy - Feb 5, 2012
I highly recommend you use Netwire RAT because of its stability, cross-platform functionality, and because it has NO dependencies.
What you need
- An idle slave
- Teamviewer, MSRA, RDC, or VNC.
- Remote Administration Enabled In The Remote Router (Achievable using Remote Desktop, etc)
First wait until the slave is idle/afk. Some RAT's have a function to show how long the computer has been idle, some others do not. If your RAT doesn't have an idle function then wait until the active window is blank, or says Start or Program Manager. Idk why, but some slaves show "Program Manager" as the active window when they are idle.
Once you have a idle slave, you will need to run a VNC server on their machine. I like to use MSRA (Microsoft Remote Assistance) because all you have to do is goto start, type MSRA and push enter.
Once your in their MSRA click "Invite someone you trust to help you" as show in the spoiler below
Spoiler (Click to View)
Now click "Save this invitation as file" as show in the spoiler below.
Spoiler (Click to View)
Save the invitation to the victims desktop or documents (documents is more discreet, as its not in plain view.) We will remove the invitation from the victims machine later
If the person is using Windows XP, you will be asked to enter a password (or use no password) before saving the invitation file.
Once you have saved the invitation file, use your RATs file manager to download it to your computer & execute it.
If you set a password you will be asked to enter it.
Now you will need to "Request Control" request it and accept it with your RAT.
Good job! Your now controlling their machine.
The procedure above was for a faster connection.
Now open their router. The IP should be something like 192.168.1.1.
Try some default logins. Here are a few.
- admin:admin
- admin:password
- BLANK:password
- BLANK:admin
If these don't work, google the default username and password for the router your trying to login too.
Once in their router, enable remote administration like so.
Spoiler (Click to View)
ENABLE remote administration and make sure you remember the port you used.
THIS IS IMPORTANT:
If your victim has a netgear router, go down to the bottom left and click "Logout". Its not that hard, so there is no need for a screenshot.
There. You now have remote access to their router, simple, eh?
Just type their IP followed by the port into your web browser.
Like this IP:PORT. You will be prompted to login, use the same details as you did with Teamviewer, RDC, MSRA, or VNC.
Don't close Teamviewer, RDC, MSRA, or VNC Yet!
We are not done! Make sure that the victims firewall is disabled, else this will not work at all.
If you are 100% sure that their firewall is disabled, close all the windows you have opened on their machine and exit Teamviewer, RDC, MSRA, or VNC.
Now login to their router using your web browser and create a portforward.
Spoiler (Click to View)
Just add a portforward for any port and make sure it goes to the victims LAN IP. This can be found in your RAT and will often begin with a prefix like 192.168.1.***
Your almost done!
Open your RAT, then open the socks4 proxy on the victim
For BlackShades, right click on the slave and goto Network > Proxy Manager. Then right click and hit "start socks" and enter the port you forwarded earlier. Done! Just use the victims IP and port as a socks proxy :)
DarkComet RAT also has this feature, and I believe Cybergate does too.
Tip
If you don't want to wait until they are afk, use your RATs chat feature to chat with them. Here is an example of what I said to some kid last night.
Me: "Your system has been compromised. Do not power off your computer nor disconnect from the internet or I will render your computer inoperable. This will only take a moment, I need access to your router."
Him: "Who are you?!"
Me: "I just need into your router"
say something like that, then let them watch as you Teamview, RDC, MSRA, or VNC. From there just do the same thing as you would do if they were away from keyboard.
Configuration may be different for some other routers, I know. Just figure out how to portforward using your victims router model. For Linksys (a popular router) goto Applications & Gaming > Port forwarding. The Teamviewing part of this tutorial is not necessary, I just believe it is faster than using your RATs remote desktop/screenshot function.
Hope you enjoyed this tutorial
Hope you enjoyed this tutorial
* - Hookah - Feb 5, 2012
Nice job Geekafide.
Very nice guide.
* - Le Spy - Feb 5, 2012
(Feb 5, 2012 01:19 AM)Hookah Wrote: Nice job Geekafide.Thanks for the positive reply, I appreciate it Hookah. Glad you like my tutorial 👍
Very nice guide.
* - Old Days - Feb 5, 2012
Good post and share, but slaves can be used as proxy by using sock5 in DC more easily.
* - Le Spy - Feb 5, 2012
(Feb 5, 2012 01:39 AM)Old Days Wrote: Good post and share, but slaves can be used as proxy by using sock5 in DC more easily.Yes I know, this was a tutorial on doing that.. even if they are not directly connected to their modem 🤣
Thanks for the feedback :)
* - xQQ - Feb 5, 2012
Very nice Share mate, thank you. :3
* - Lyners - Feb 5, 2012
Added to my bookmarks, this is great. Exactly one of the thing I have been looking for.
If I was l33t I would give you + rep right now.
* - Le Spy - Feb 5, 2012
(Feb 5, 2012 04:24 AM)xQQ Wrote: Very nice Share mate, thank you. :3
Your welcome! :)
(Feb 5, 2012 06:53 AM)Lyners Wrote: Added to my bookmarks, this is great. Exactly one of the thing I have been looking for.Thanks. I made this because someone pm'ed me needing help with it, so I thought eh why not make a tut ;)
If I was l33t I would give you + rep right now.
Doing a Join.me for this. https://join.me/765-433-042
Join if you'd like :)
* - Rock3r™ - Feb 5, 2012
Keep up the good work buddy well written :)
* - m4dh4ck3r - Feb 5, 2012
I din't read fully but good work buddy , nice and detailed :).
* - Le Spy - Feb 5, 2012
(Feb 5, 2012 12:41 PM)gwthm69 Wrote: Keep up the good work buddy well written :)Thank you very much. All of these nice comments are really motivating me to write more tutorials :)
(Feb 5, 2012 12:49 PM)m4dh4ck3r Wrote: I din't read fully but good work buddy , nice and detailed :).Thanks! I really appreciate the nice comments.
I'm doing a join.me to show a demonstration on how to do this.
Anyone who would like to join can with this link: https://join.me/909-268-897
* - Nas - Feb 6, 2012
Heck yes man, thank you for this!!
toooshort :[
* - VenomBite - Mar 11, 2012
do you need to have firefox setup any specific way?
* - Natas - Mar 11, 2012
Nice tut man ! but im going to stick to useing a vpn this is a lot of work but its pretty neat thinks
* - Le Spy - Mar 12, 2012
Bump. The tutorial is still here, and users in the RAT section often ask how to use RAT slaves as proxies.