+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TUT] DarkComet Setup With Crypter and VPN (/showthread.php?tid=3288797)
Pages: Pages
1
2
[TUT] DarkComet Setup With Crypter and VPN - Ray Reddington - Feb 26, 2013
In this tut, I will walk you through setting up your RAT (DarkComet) and other things like a Crypter and VPN.
1st: Setting up your NoIp.com account:
Go to http://www.noip.com/ and click ‘Sign Up ’
Follow the steps on the website to make your account
Verify your account by logging in to your email and pressing the link they sent you
When you have logged in, go to ‘Manage Hosts’ Then ‘Add Host’
For the host name you can put anything. But make sure, after, you choose the ‘no-ip.org’ option
Your IP Address should be entered by itself.
Leave everything else how it is and press ‘Update Host’
Follow the steps on the website to make your account
Verify your account by logging in to your email and pressing the link they sent you
When you have logged in, go to ‘Manage Hosts’ Then ‘Add Host’
For the host name you can put anything. But make sure, after, you choose the ‘no-ip.org’ option
Your IP Address should be entered by itself.
Leave everything else how it is and press ‘Update Host’
2nd: Downloading the DUC No-IP Client:
DUC download links:
Windows - https://www.noip.com/downloads.php?page=win
Once downloaded, extract, and log in to your No-IP Account.
When you log in, go to ‘Edit Hosts’
“Check” the host you made and click save.
Press ‘Refresh’ and you are set.
Windows - https://www.noip.com/downloads.php?page=win
Once downloaded, extract, and log in to your No-IP Account.
When you log in, go to ‘Edit Hosts’
“Check” the host you made and click save.
Press ‘Refresh’ and you are set.
3rd: Port forwarding
Since Port Forwarding is a very common issue for people who try to set up their RAT, I have provided a link that guides you through it. All you need to know is some information about your router (Usually the black and white sticker with a bunch of numbers on it LOL) If you still do not understand how to port forward, look through HF and I’m sure you’ll find a great guide.
http://portforward.com/english/routers/port_forwarding/routerindex.htm
If you know how to port forward, in this TUT, I will be using port 200.
http://portforward.com/english/routers/port_forwarding/routerindex.htm
If you know how to port forward, in this TUT, I will be using port 200.
4th: Setting up your DarkComet RAT
Downloading your DarkComet Rat.
MAKE SURE YOU DO NOT DOWNLOAD DARKCOMET VERSION 5.4
IT DOES NOT HAVE A SERVER FOR YOU TO BUILD.
I have provided safe download links for versions 4 – 5.3.1
(I suggest version 5.3 or 5.3.1)
https://hackforums.net/showthread.php?tid=2632776
Before you download, you might have to disable your AV and/or your Firewall. This is because it will detect the RAT as a virus. The links are safe so don’t be afraid to download them.
Now, once you have disabled your AV/ Firewall, proceed with downloading the DarkComet.
Once downloaded, extract it. (I recommend to your Desktop for easy access but whatever you like, as long as it’s in one folder)
Run DarkComet and Accept the Rights (At least skim through it * Haha okay*)
Once you have DarkComet open, head over to “Socket/Net” (Top right hand corner)
Right click on DarkComet and press “Add Port to Listen”
(Since I said I was using port 200, I will enter 200)
It should say “Listening”
(To check if you have done this correctly, head over to http://www.canyouseeme.org/ and type in the port you used, I used 200) (If you get the message: Success: I can see your service on XXX.XX.XXX.XXX [X= my IP] on port (200) Your ISP is not blocking port 200.
Then it works. If not, it has failed and you need to look up how to Port Forward.
Now press in the top left corner “ DarkComet – RAT”
Press “Client Settings” then go to “NO-IP Updater”
Fill the first line with the host you made (example.no-ip.org)
And the next two with your login info for No-IP
Press Update.
MAKE SURE YOU DO NOT DOWNLOAD DARKCOMET VERSION 5.4
IT DOES NOT HAVE A SERVER FOR YOU TO BUILD.
I have provided safe download links for versions 4 – 5.3.1
(I suggest version 5.3 or 5.3.1)
https://hackforums.net/showthread.php?tid=2632776
Before you download, you might have to disable your AV and/or your Firewall. This is because it will detect the RAT as a virus. The links are safe so don’t be afraid to download them.
Now, once you have disabled your AV/ Firewall, proceed with downloading the DarkComet.
Once downloaded, extract it. (I recommend to your Desktop for easy access but whatever you like, as long as it’s in one folder)
Run DarkComet and Accept the Rights (At least skim through it * Haha okay*)
Once you have DarkComet open, head over to “Socket/Net” (Top right hand corner)
Right click on DarkComet and press “Add Port to Listen”
(Since I said I was using port 200, I will enter 200)
It should say “Listening”
(To check if you have done this correctly, head over to http://www.canyouseeme.org/ and type in the port you used, I used 200) (If you get the message: Success: I can see your service on XXX.XX.XXX.XXX [X= my IP] on port (200) Your ISP is not blocking port 200.
Then it works. If not, it has failed and you need to look up how to Port Forward.
Now press in the top left corner “ DarkComet – RAT”
Press “Client Settings” then go to “NO-IP Updater”
Fill the first line with the host you made (example.no-ip.org)
And the next two with your login info for No-IP
Press Update.
5th: Building the Server:
Press DarkComet-RAT -> Server Module -> then Full Editor (Expert)
On Process Mutex, press Random a few times
Network Settings; Where it says “IP/DNS”, put in your NO-IP Host name!
For the port, type in the port you port forwarded (in this case, I would type in 200)
Stub Finalization; Check “No compression” and “Save the Profile”
Press “Build the Stub” and save it.
Server is now built.
On Process Mutex, press Random a few times
Network Settings; Where it says “IP/DNS”, put in your NO-IP Host name!
For the port, type in the port you port forwarded (in this case, I would type in 200)
Stub Finalization; Check “No compression” and “Save the Profile”
Press “Build the Stub” and save it.
Server is now built.
6th: Crypter/Binder:
To make your server FUD, you WILL need a crypter.
The one I use is FileProtector and it is great. Great price, great options for the crypter, and it is FUD in most cases.
Link to the thread: https://hackforums.net/showthread.php?tid=3203361&highlight=fileprotector
Or the actual website: http://fileprotector.net/
$20/1 Month; $35/ 3 months; $50 / 1 full year
The one I use is FileProtector and it is great. Great price, great options for the crypter, and it is FUD in most cases.
Link to the thread: https://hackforums.net/showthread.php?tid=3203361&highlight=fileprotector
Or the actual website: http://fileprotector.net/
$20/1 Month; $35/ 3 months; $50 / 1 full year
7th: VPN:
Last but not least, the VPN.
This step is not mandatory. Your RAT will work without it.
The reason behind a VPN for your RAT is if you are going to do “badass things” and want to be safe.
The VPN I use and I recommend is nVpn.
http://nvpn.net/order.php
This VPN allows you to open ports manually (you yourself) and it does not keep logs. This will keep you safe if you steal PayPal accounts, Steam accounts, and whatever else you may do. I suggest if you do things like this, uninstall the server from your slave so you can be sure you are safe.
To set up nVpn with DarkComet, you can refer to here for a great guide:
https://hackforums.net/archive/index.php/thread-3060440.html
This step is not mandatory. Your RAT will work without it.
The reason behind a VPN for your RAT is if you are going to do “badass things” and want to be safe.
The VPN I use and I recommend is nVpn.
http://nvpn.net/order.php
This VPN allows you to open ports manually (you yourself) and it does not keep logs. This will keep you safe if you steal PayPal accounts, Steam accounts, and whatever else you may do. I suggest if you do things like this, uninstall the server from your slave so you can be sure you are safe.
To set up nVpn with DarkComet, you can refer to here for a great guide:
https://hackforums.net/archive/index.php/thread-3060440.html
Hope this helped guys 😉 . Enjoy!
This is my first tutorial so sorry if i messed up on a few things. LMK if you want me to fix anything! Thanks 👍
[/b]
* - xx_redgh0st_xx - Feb 26, 2013
you didn't go over the crypting side... Google Chrome free n stable
* - willybobsta - Feb 26, 2013
No-IP IS NOT NECCESARY!
I have tested it and it is not neccesary!
* - EpicAndrew - Feb 26, 2013
An automatic DNS update service is necessary and without it you would probably lose your slaves in an instant when your IP changes.
* - #Skyline - Feb 26, 2013
(Feb 26, 2013 10:34 PM)willybobsta Wrote: No-IP IS NOT NECCESARY!
I have tested it and it is not neccesary!
You're a idoit. It is necessary.
Then if it's not I'm going to ask you this question.
How the fuck does incoming ports to your router connect to your remote administration tool?
It's because it is necessary duh.
* - Ray Reddington - Feb 28, 2013
(Feb 26, 2013 10:32 PM)xx_redgh0st_xx Wrote: you didn't go over the crypting side... Google Chrome free n stable
I will make a tutorial on how to use FileProtector soon :)
(Feb 26, 2013 10:34 PM)willybobsta Wrote: No-IP IS NOT NECCESARY!
I have tested it and it is not neccesary!
Actually, No-IP is necessary since it is your host. Depending on what kind of IP address you have but at most times, you will need it.
* - I R Anonymoose - Feb 28, 2013
Is there a VPN that has open ports & doesn't have to be paid for? I already paid for [censored] but it doesn't open ports..
* - Ray Reddington - Feb 28, 2013
(Feb 28, 2013 08:45 PM)Unbоund Wrote: Is there a VPN that has open ports & doesn't have to be paid for? I already paid for [censored] but it doesn't open ports..
I don't believe so. You can keep searching. You might find something but sometimes, paid things are the best. Though, considering nVpn is only $6/month, it's a great price and works very well.
* - Ray Reddington - Mar 3, 2013
(Feb 26, 2013 10:32 PM)xx_redgh0st_xx Wrote: you didn't go over the crypting side... Google Chrome free n stable
If you are going to be RATing on a normal basis, use FileProtector bc it lasts longer.
* - idealpoolsconst - Mar 3, 2013
Thank you ..
this was very helpful!!!
* - Ray Reddington - Mar 3, 2013
(Mar 3, 2013 08:15 PM)idealpoolsconst Wrote: Thank you ..no problem. if you are still having trouble, feel free to pm me 😉
this was very helpful!!!
* - Ray Reddington - Mar 6, 2013
(Feb 26, 2013 10:32 PM)xx_redgh0st_xx Wrote: you didn't go over the crypting side... Google Chrome free n stable
I did go over it. What specifically are you talking about. Do you mean the options for FileProtector?
* - Jeryab - May 8, 2013
very useful article, I just had trouble getting through vpn.
Who knows vpn with port forwarding, except nvpn?
* - UberNuberNEW - May 8, 2013
Nice tutorial good luck
35chrctrssss..
* - MaikenBaiken32 - May 8, 2013
Excellent tutorial! Keep up the good work man, I hope to see you will make other tutorials ;-)
You should get +1 from me :=)