+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: {MEGA THREAD}RATing MEGA Thread! Everything you need to know! (/showthread.php?tid=2262531)
Pages: Pages
1
2
{MEGA THREAD}RATing MEGA Thread! Everything you need to know! - Scott Otis - Mar 1, 2012
Introduction
What is a RAT?
RAT stands for: Remote Administration Tool. It is used to access your computer, your desktop, your files, anything.
Where can I get one?
There are many different places to download a RAT, but i recommend going to the marketplace here on HackForums and buy one, dont get me wrong, there are some GREAT free RATs but the best ones are paid IMO.
What is the BEST RAT?
Ah yes, finally, the golden question that everyone seems to be asking, instead of just telling you what RAT is the best, here are some different RATs to choose from.
- BlackShades
Pros: VERY stable, nice GUI, Great support, most things actually work, can sell bots right in the program, live keylogger which is VERY nice
Cons: Not very many updates, there are some features that dont work, audio capture is not the best (listen to 10seconds of audio, then wait 10seconds)
Website/Download link: http://bshades.eu
Forums Page:https://hackforums.net/showthread.php?tid=1701017
Price: $40
- DarkComet
Pros:Stable, nice GUI, easy to setup, nice features that nearly all work, all around good RAT, FREE
Cons: Desktop Capture is slow and laggy, not very much support from creator (most support comes from people here)
Website/Download link:http://www.darkcomet-rat.com/
Forums Page: None!
Price: FREE!
- CyberGate
Pros:Good GUI, good features, easy to setup
Cons:Not very stable, Not much support, kind of becoming obsolete in my opinion, not updated much, keylogger very laggy
Website/Download Link:http://releases.cybergate-rat.org/files/CyberGate%20v1.07.5.zip
Forums Page: https://hackforums.net/forumdisplay.php?fid=166
Price: FREE!
- Paradox
Pros: Very nice GUI, new(can be good or bad), very smooth, nice features
Cons: New (don't know if it will be around a while), haven't used personally but i heard it can be slow at times and some features don't work, poor support
Website/Download Link:http://www.paradoxcoding.com/
Forums Page:https://hackforums.net/showthread.php?tid=1847883
Price: $30
- SpyNet
Pros: Used to be the most used RAT on HF
Cons: Not very many users, obsolete, slow, freezes, not stable,knock off of CyberGate, crappy GUI, NOT RECOMMENDED
Website/Download Link: Couldn't find official one
Forums Page: there isn't one, just community here at HF
Price: Free
- Lynx
Pros: Looks like it has a nice GUI, nice features, no port forwarding, PHP
Cons: Not yet available
Forums Page: https://hackforums.net/showthread.php?tid=1840317&highlight=RAT
Price: FREE!
- Imperium Metamorpher
Pros: Nice looking GUI, decent features, stable
Cons: Not that many features, need a survey to download it
Website/Download Link: http://fileups.net/0M9rV
Forums Page: https://hackforums.net/showthread.php?tid=2197614&highlight=RAT
Price: FREE! But you have to do a survey
- ClientMesh
Pros: One of the best new RATs on the market, sexy GUI, many settings, nice support, comes with crypter,
Cons: same with paradox we dont know if its going to be around a while, price
Website/Download Link: http://www.clientmesh.com/
Forum Page: https://hackforums.net/showthread.php?tid=2235212&highlight=clientmesh
Price: $50 (currently 20% off with the coupon code "TWENTYOFF"
Port Forwarding
Port Forwarding is the most common reason that a RAT doesnt work right.
Set-Up
Method Number 1: Router
Okay so the most common method is to use a router
Step 1: Go to start->run->cmd. Then type in "ipconfig" (without the quotes) and you should get something like this(where the arrow is it should say "DNS" that is the number you need):Spoiler (Click to View)
Step 1: Go to start->run->cmd. Then type in "ipconfig" (without the quotes) and you should get something like this(where the arrow is it should say "DNS" that is the number you need):Spoiler (Click to View)
Step 2: Type that number into the status bar of your browser. Then you have to enter in your router username/password. After that you should be at your router configuration page, like this: Spoiler (Click to View)
Step 3: Find your port settings, for me its "Applications and Gaming" thats if you are using a Linksys router
Step 4: Enter the port you wish to forward, for UPD/TCP put UPD for one and make another one using the same port for TCP. Then when it askes you, enter the digits after the last "." in your LAN IP address in the box, then press submit
Step 5: You can check if your port is correctly forwarded or not by listening to your port in your RAT and then going to http://www.canyouseeme.org. Then type in your port number, if it says "connection timed out" then you did it wrong. If it says "Connection Refused" then you did it right but your not listening to it.
Method Number 2: uTorrent
[img]http://sparklingspur.com/wp-content/uploads/2011/03/utorrentlogounofficial.jpg[/img]
This method is only used to forward ONE port at a time. That means that this method CANNOT be used with BlackShades
Step 1: Open up uTorrent. Then click "Options" and then "Preferences"
Step 2: There should be a button called "Random Port". To the left of that button is where you will enter in the port that you want to forward
Step 3: Make sure that the box labeled "randomize each port at startup" is NOT checked
Step 4: Click "apply" and then "Ok"
Step 2: There should be a button called "Random Port". To the left of that button is where you will enter in the port that you want to forward
Step 3: Make sure that the box labeled "randomize each port at startup" is NOT checked
Step 4: Click "apply" and then "Ok"
Step 5: Your port should now be open! yay!
Spreading
Youtube
[img]http://prop69.com/images/social/yt.png[/img]
One of the most popular methods of spreading a RAT is through YouTube
Step 1: Find a video that you want to use to attract people to your RAT. It can be anything from an Adobe Photoshop Crack to a fake RS gold generator, after you find the video you want to copy, you add "keep" in front of youtube. Like this for example: http://www.youtube.com/watch?v=EeAi_WHS1u4&feature=fvst would turn into: http://www.keepyoutube.com/watch?v=EeAi_WHS1u4&feature=fvst
Step 1: Find a video that you want to use to attract people to your RAT. It can be anything from an Adobe Photoshop Crack to a fake RS gold generator, after you find the video you want to copy, you add "keep" in front of youtube. Like this for example: http://www.youtube.com/watch?v=EeAi_WHS1u4&feature=fvst would turn into: http://www.keepyoutube.com/watch?v=EeAi_WHS1u4&feature=fvst
Step 2: Now you want to make your server and crypt it so that its FUD or even UD, for an added affect you can even bind your server to a real crack or gold generator or whatever you want
Step 3: Then you need to upload your server to a file-sharing site, i recommend either http://downloadexecute.com or a direct download link from DropBox
Step 4: Finally you need to upload your video to YouTube and spread the word!
Step 4: Finally you need to upload your video to YouTube and spread the word!
Java Drive-By
[img]http://www.maventeqsystems.com/web/images/logos/javaTransparent.png[/img]
A Java-Drive By is a great method of spreading your virus to other people. How it works is that when someone goes to your Java Drive-By site they are asked if they want to use Java, the person will say yes and then BOOM! They are now infected :)
There are just normal FUD Drive By's that are anywhere from $10-$200 and then there are the really GREAT ones that cost anywhere from $1000-$2000. These are called SJDB or Silent Java Drive By. This doesnt even ask the person anything, just as soon as they click the link there infected, pretty cool huh?
There are just normal FUD Drive By's that are anywhere from $10-$200 and then there are the really GREAT ones that cost anywhere from $1000-$2000. These are called SJDB or Silent Java Drive By. This doesnt even ask the person anything, just as soon as they click the link there infected, pretty cool huh?
Crypting
What is Crypting?
Crypting is a funny word that means to make your server undetecable by anti-virus software and firewalls
Here are some crypters that i recommend
https://hackforums.net/showthread.php?tid=2162662 (Advanced) https://hackforums.net/showthread.php?tid=1819598 (Lite)
Infinity Crypter
Chronic Crypter
Dark eYe Crypter
Those are just SOME crypters that are available, there are a TON more just look here: Premium Sellers Section until you find one that you like!
Terms
RAT: Remote Administration Tool
Server: "Virus"
Crypter: Makes your virus undetectable by anti virus software
Port Fowarding: Opens up ports on your PC for certain applications to use
Server: "Virus"
Crypter: Makes your virus undetectable by anti virus software
Port Fowarding: Opens up ports on your PC for certain applications to use
Credits!
This has been created 100% by ME and ME ONLY! Except for of course the people who made the crypters and rats, in that case the credit goes to them for taking the time of making them
I have put a LOT of work into the guide and it has taken me a good 2-3hours to put together and finish, so thanks guys and remember to post below anything you think i should add and i will within 10 hours! Enjoy RATing!🤗🤗
I have put a LOT of work into the guide and it has taken me a good 2-3hours to put together and finish, so thanks guys and remember to post below anything you think i should add and i will within 10 hours! Enjoy RATing!🤗🤗
* - Thunder50275 - Mar 1, 2012
Nice thread, well as we can see you putted alot of work in it great job.
* - KingJohn - Mar 1, 2012
Nice thread. Very thorough and complete.
* - TheFeed - Mar 1, 2012
Nice thread ... 👍
You should add info on ClientMesh to your RAT list ... v5 was just released
* - Scott Otis - Mar 1, 2012
(Mar 1, 2012 05:22 PM)TheFeed Wrote: Nice thread ... 👍
You should add info on ClientMesh to your RAT list ... v5 was just released
adding right now :) thanks everyone for the positive comments :p
* - Cubase - Mar 1, 2012
Great thread, very informative and professional.
* - Scott Otis - Mar 1, 2012
ClientMesh added! hope i helping a lot of people :)
* - Scott Otis - Mar 3, 2012
bumb! anything else you guys think i should add? and also is this good for my first time ever doing a guide lol
* - iearnick - Mar 3, 2012
Very nice hq thread good job!!
Keep up the good work!
* - reyo47 - Mar 3, 2012
hey i need help
i test my server on my computer ànd it work
my port àre oppen i test it with cànyouseeme.org
but when i send it to ) friend telling him to oppen it àfter delete firewàll ànd av nothin hàppin
Plz pm me if you càn solve this probleme for me
Or connect me on skype bro : reyo47
wish you help
* - Scott Otis - Mar 3, 2012
i added you but you never accepted, thanks for the positive comments people :)
* - T00N3M0N - Mar 3, 2012
Nice work valker.
Try to get a nice thread template and some more pictures to make it more attractive and i'm sure alot of people would visit it ;)
* - mcblitz - Mar 3, 2012
I like blackshades but like he said it is crappy support but I will try client mesh.
* - InfectedWorld - Mar 3, 2012
Vouch for this guy setted up a free javadriveby for me !
* - Scott Otis - Mar 3, 2012
np! im not setting up JDB's for $5 a setup!
so new people can see it and stop making threads about the SAME THING :)