+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: [TuT] How to spread your RAT/Keylogger [Pictures Included] (/showthread.php?tid=3329958)
[TuT] How to spread your RAT/Keylogger [Pictures Included] - Λlex - Mar 15, 2013
Okay, I decided to share my way to spread a RAT/Keylogger.
For my first method, I'll use Facebook/Omegle/Chatroulette.
IMPORTANT: Make sure your crypter is FUD or 1/35 else you'll be caught!
1. Extension Spoofer
In this case, I'll be using the Dark Comet built-in extension spoofer.
-Open up the spoofer and select your file:
[img]http://img443.imageshack.us/img443/786/91070368.png[/img]
My new file: Sexe.jpg
I have chosen S as a filename because it's less obvious. You can choose any name.
What we want to do now, is, we should change the icon.
If you're using a good crypter, there's an Icon Changer feature built-in there.
In my case, I've crypted my file with my newest W.I.P Crypter. ACrypter.
So, my final file:
[img]http://img248.imageshack.us/img248/175/sdsdsun.png[/img]
Now, the spreading part.
Head over Chatroulette.com/Omegle.com and/or Facebook.com
and act like a 16 years old horny teenager.
"Hey, I'm a 16 years old female from the US, wanna see me horny"?
Or, something like that, I'm sure you can come up with something better.
I've got 5+ slaves in less than 20 minutes.
2. Youtube
You can also use this method on Youtube.
1. Make a fake youtube account.
2. Post a Justin Biebs song.
3. Spoof the extension to .mp3
4. Choose a good name, so they won't notice it.
5. Put a download link saying that that's the song included in the video.
Example:
[img]http://img692.imageshack.us/img692/4409/justp.png[/img]
NOTE: I haven't tried this method yet.
3. Forums
Let's make it clear, by forums, I don't mean spreading your RAT on Hackforums.
Head over some popular forums like:
http://hardforum.com/
http://forums.somethingawful.com
I don't remember any more popular forums, feel free to search yourself.
So, once you get a decent forum, start a new thread saying that you're giving away your GAMEHERE Generator for free. I'm sure many kids will fall for this, as I used to do, when I first started this.
4. uTorrent
This might be the best method since you can get a lot of installs per day.
-How to make a torrent?
Open up your Torrent client and go to> File> Create Torrent;
That’s all? Well almost. All you need to do now is put in the tracker info and tick some boxes. This can differ somewhat from client to client but it all comes down to the same thing.
Trackers: This is probably the hard part for most people. But it’s pretty easy, just put in one of the popular public trackers. You can use one or more trackers, but in general one is enough.
Put one of these in the trackers box.
http://open.tracker.#.org/announce
http://www.torrentdownloads.to:2710/announce
http://denis.stalker.h3q.com:6969/announce
udp://denis.stalker.h3q.com:6969/announce
http://www.sumotracker.com/announce
Note: Don't check "Private".
Done. Share it with your friend and/or upload your torrent on any torrent site. Name it something like:
PayPal Money Generator 2013 Working/Fixed
5. Facebook
This is not a guaranted way, but will work if you have some fool friends.
Make sure your file is crypted very well, and send them this message:
"Hello, Mark Zuckerberg is going to deactivate the inactive accounts, to prevent this, please download the Facebook Activator. [URL HERE]
I suggest you to upload your files to virushost.ws
And shorten them with gg.gg.
I've got some slaves with this method.
Anyway, this is a basic example:
[img]http://img585.imageshack.us/img585/7743/72616149.png[/img]
There are a lot of tutorials on how to spread your virus.
I hope you like mine.
If you have some aditional questions or need some help, feel free to PM me. 🎉
For my first method, I'll use Facebook/Omegle/Chatroulette.
IMPORTANT: Make sure your crypter is FUD or 1/35 else you'll be caught!
1. Extension Spoofer
In this case, I'll be using the Dark Comet built-in extension spoofer.
-Open up the spoofer and select your file:
[img]http://img443.imageshack.us/img443/786/91070368.png[/img]
My new file: Sexe.jpg
I have chosen S as a filename because it's less obvious. You can choose any name.
What we want to do now, is, we should change the icon.
If you're using a good crypter, there's an Icon Changer feature built-in there.
In my case, I've crypted my file with my newest W.I.P Crypter. ACrypter.
So, my final file:
[img]http://img248.imageshack.us/img248/175/sdsdsun.png[/img]
Now, the spreading part.
Head over Chatroulette.com/Omegle.com and/or Facebook.com
and act like a 16 years old horny teenager.
"Hey, I'm a 16 years old female from the US, wanna see me horny"?
Or, something like that, I'm sure you can come up with something better.
I've got 5+ slaves in less than 20 minutes.
2. Youtube
You can also use this method on Youtube.
1. Make a fake youtube account.
2. Post a Justin Biebs song.
3. Spoof the extension to .mp3
4. Choose a good name, so they won't notice it.
5. Put a download link saying that that's the song included in the video.
Example:
[img]http://img692.imageshack.us/img692/4409/justp.png[/img]
NOTE: I haven't tried this method yet.
3. Forums
Let's make it clear, by forums, I don't mean spreading your RAT on Hackforums.
Head over some popular forums like:
http://hardforum.com/
http://forums.somethingawful.com
I don't remember any more popular forums, feel free to search yourself.
So, once you get a decent forum, start a new thread saying that you're giving away your GAMEHERE Generator for free. I'm sure many kids will fall for this, as I used to do, when I first started this.
4. uTorrent
This might be the best method since you can get a lot of installs per day.
-How to make a torrent?
Open up your Torrent client and go to> File> Create Torrent;
That’s all? Well almost. All you need to do now is put in the tracker info and tick some boxes. This can differ somewhat from client to client but it all comes down to the same thing.
Trackers: This is probably the hard part for most people. But it’s pretty easy, just put in one of the popular public trackers. You can use one or more trackers, but in general one is enough.
Put one of these in the trackers box.
http://open.tracker.#.org/announce
http://www.torrentdownloads.to:2710/announce
http://denis.stalker.h3q.com:6969/announce
udp://denis.stalker.h3q.com:6969/announce
http://www.sumotracker.com/announce
Note: Don't check "Private".
Done. Share it with your friend and/or upload your torrent on any torrent site. Name it something like:
PayPal Money Generator 2013 Working/Fixed
5. Facebook
This is not a guaranted way, but will work if you have some fool friends.
Make sure your file is crypted very well, and send them this message:
"Hello, Mark Zuckerberg is going to deactivate the inactive accounts, to prevent this, please download the Facebook Activator. [URL HERE]
I suggest you to upload your files to virushost.ws
And shorten them with gg.gg.
I've got some slaves with this method.
Anyway, this is a basic example:
[img]http://img585.imageshack.us/img585/7743/72616149.png[/img]
There are a lot of tutorials on how to spread your virus.
I hope you like mine.
If you have some aditional questions or need some help, feel free to PM me. 🎉
* - Revcode - Mar 15, 2013
Nice tutorial. But why Mediafire? Not recommended.
* - Λlex - Mar 15, 2013
This is just an example, I don't own that picture or song.
I suggest uploading on virushost.ws and shorten it with http://gg.gg
* - Revcode - Mar 15, 2013
(Mar 15, 2013 01:25 PM)Alexinjo Wrote: This is just an example, I don't own that picture or song.
I suggest uploading on virushost.ws and shorten it with http://gg.gg
Okay, my bad. Nice methods.
- Cheers!
* - Tutelary - Mar 15, 2013
Great tutorial, though I don't agree with extension spoofing. It just makes it look more suspicious imho.
* - Λlex - Mar 15, 2013
(Mar 15, 2013 01:34 PM)Łakai™ Wrote: Great tutorial, though I don't agree with extension spoofing. It just makes it look more suspicious imho.
The only bad thing is the "exe" in the filename, that's why I suggested using the word "S", if you know what I mean. 😉 😊
Happy Hacking. 🤝
* - ๖ۣۜSchock - Mar 15, 2013
cool tutorial it might be helpfull :p
* - Joseph Ducreux - Mar 15, 2013
Don't upload on mediafire, unless you have it zipped. Try ge.tt instead, then I shorten it with goo.gl.
* - yo9517 - Apr 4, 2013
Got a good direct link hoster for you guys :P
http://www.webgel.net/bb/
* - Atharva - Apr 4, 2013
Simple but good tutorial.
Thank you !
* - 89dogg - Apr 4, 2013
nice tut. thx for this spreading methods...
* - Λlex - Apr 28, 2013
Thank you for your kindness, I'll write a better tutorial soon.
* - Business - Apr 28, 2013
(Mar 15, 2013 01:34 PM)Łakai™ Wrote: Great tutorial, though I don't agree with extension spoofing. It just makes it look more suspicious imho.
Agreed. If you are good at making your S.E convincing enough for them to download, who cares what they think it is.
* - Erin - Aug 10, 2013
The extension spoofing worked great for me. couple of kiddie gamers on skype, told them to pass it wround, but the "sexe.jpg" was too tempting and they opened it. haha great tut.
* - jamesmartin1879 - Aug 11, 2013
Thanks for this, im new to all this so will help me a lot! Thanks mate!