+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: DARKCOMET SHOWING"RUN" (/showthread.php?tid=4238950)
DARKCOMET SHOWING"RUN" - nemesisobaara - May 20, 2014
Help!!! I set up darkcomet and crypted it clean but when i send it thru mail as attachment and try to download and click it like the recipient will normally do,it shows run and not the normal silent way..what I mean is that wen I download it from the email attachment. And click on it,it pops up the RUN tab..what can I do to stop this?
* - bandors - May 20, 2014
Shoot me a PM with your skype, I can hop on skype/tv and poke around to fix it myself.
* - Pyrion Flax - May 20, 2014
You could try spoofing the file.
Also, I wouldn't use email attachments.
Upload it to Dropbox and send them the direct link.
Good luck!
* - bandors - May 20, 2014
(May 20, 2014 12:07 AM)Pyrion Flax Wrote: You could try spoofing the file.
Also, I wouldn't use email attachments.
Upload it to Dropbox and send them the direct link.
Good luck!
....Dropbox....
Serious? Use ge.tt OP, it's much nicer IMHO.
* - Mechas - May 20, 2014
(May 20, 2014 12:08 AM)Bandors Wrote: ....Dropbox....
Serious? Use ge.tt OP, it's much nicer IMHO.
ge.tt is down for some reason, so thats not a very good option atm
* - Anonmoosekaab - May 20, 2014
What do you mean? You can't do a silent launch unless you can digitally sign the program. It's due to something in windows called a zoneid. However once your file is launched once, most crypters will remove the zoneid so this dialog no longer appears.
* - HIGH PAID FELLA - May 20, 2014
(May 20, 2014 12:08 AM)Bandors Wrote: ....Dropbox....
Serious? Use ge.tt OP, it's much nicer IMHO.
...ge.tt....
Serious? Use an anonymous/not distributing file hosting such as www.rghost.com, it's much nicer IMHO.
* - Linkin™ - May 20, 2014
(May 20, 2014 11:54 AM)Asterea Wrote: ...ge.tt....
Serious? Use an anonymous/not distributing file hosting such as www.rghost.com, it's much nicer IMHO.
I also prefer rghost, because ge.tt just suspends your file straight away if it finds out it is infected. Annoying.
RE: DARKCOMET SHOWING"RUN" - iwork247hours - Dec 18, 2019
Hello I have dark comet and i have done all settings correctly but when i send to victims and they click on it
the slaves doesnt come to my pc list.
Please what may be the cause of this?
RE: DARKCOMET SHOWING"RUN" - Nachfolger - Dec 18, 2019
(Dec 18, 2019 02:05 PM)iwork247hours Wrote: Hello I have dark comet and i have done all settings correctly but when i send to victims and they click on itThe cause of it is that Darkcomet is a outdated rat that probably has infected source code. Congrats, you're offically retarded.
the slaves doesnt come to my pc list.
Please what may be the cause of this?
Thanks for bringing a 2014 thread back to life.
RE: DARKCOMET SHOWING"RUN" - iwork247hours - Dec 18, 2019
Okay thank you but what is the latest tool for setting up RAT like?
Something similar like darkcomet.
Thank you.