+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: |The Page Master| RAT HELP DESK | TEST INSTALLS | ASK ANY QUESTION ABOUT ANY RAT| (/showthread.php?tid=4336652)
|The Page Master| RAT HELP DESK | TEST INSTALLS | ASK ANY QUESTION ABOUT ANY RAT| - PageMaster - Jul 12, 2014
[img]http://i3.minus.com/ibzaKBrqS9B8O6.png[/img]
** If you are able to read this then my Paid Mentoring Thread is currently down. Add me on skype: v3n0m1t3s to discuss personal mentoring ****
** If you are able to read this then my Paid Mentoring Thread is currently down. Add me on skype: v3n0m1t3s to discuss personal mentoring ****
* - RᘻR - Jul 12, 2014
Okay so basicaly im using Razorcrypt 2.0 and Dark Comet. Recently I restarted my computer and for whatever reason windows defender deleted my DC and I lost my slaves.. I was told that there was a way to retrieve them but for the life of me I can't figure out how to do it. When I make a stub in DC and run it with sandboxie I pop up as a user... as soon as I go to encrypt it and run it with sandboxie nothing pops up, almost as if the crypter was corrupting my stub (Razor assures me that it isn't the case).. When I make the stub is use MINIMAL settings on the full editor, (only my DNS/port forwarding ) I've tried crypting in native and 2.0 and I tried with and without injection
here are my Crypter settings https://gyazo.com/253c568a414d355ccb9beb2a59e3cc4f
https://gyazo.com/79c1b748d07ec3e0ff9dbca6e9ca5897
https://gyazo.com/65355b989e67e345bc7e8ea860c06286
If someone could help me get my slaves back I'd be forever greatful.. ( and if your patient, next friday I'd be willing to send you 5$ via paypal)
this is what I used for my DNS
http://freedns.afraid.org/
* - 5 Cents - Jul 12, 2014
I was wondering if you'd be able to give me some test installs, and maybe a crypt aswell?
I have skype: fivecentshf
* - PageMaster - Jul 12, 2014
Augeson Add me on Skype V3n0m1t3s and send me a test stub. and we can trouble shoot from there.
5 Cents, Give me 5 minutes to review your account. If I add you on skype I will be doing a test install If not then It means i probably wont be, and you need to get your activity up, and start contributing some stuff to HF.
* - Bin4ry - Jul 14, 2014
I can vouch for this Service.
Regards,
Bin4ry
* - IFunBox - Jul 14, 2014
I would like a full set up please,my skype is Iloveboxes23 thanks. And am using a VPN and Have my port forward already.
* - Cerciz.Nder.Maja - Jul 14, 2014
My question is, can a RAT be bind to a song, for example: Tiesto - Adagio For Strings.mp3
and the file that is infect to look like that: Tiesto - Adagio For Strings.mp3
without any .exe in the file name
* - NestiALB - Jul 14, 2014
Port forward question
I am using proxpn VPN Whenn i try to see if they are opened in canyouseeme it keeps saying Error: I could not see your service on 173.0.8.104 on port (1604) ... That error is for all ports that i have tried . I have tried around 50 ports and for all keeps saying that. PLease i need help ?
https://i.imgur.com/6Evr93W.png <- IMAGE
* - LOLdropper - Jul 14, 2014
Seems many RAT Helpdesks Growing These Days.Anyways Good Luck With It OP.
* - roben81 - Jul 14, 2014
i have problem with portforward.
MY no-ip was disabled so i go here http://freedns.afraid.org/.
1)i run the bat file
2)i set the uncrypted server but it run only in msconfing not to the interface of the rat
3)i crypt the server and i try to run it but nothing show up.
What i am doing wrong?
port is open and firewall/av disabled
* - The Line of Death - Jul 14, 2014
(Jul 14, 2014 09:56 AM)roben81 Wrote: i have problem with portforward.
MY no-ip was disabled so i go here http://freedns.afraid.org/.
1)i run the bat file
2)i set the uncrypted server but it run only in msconfing not to the interface of the rat
3)i crypt the server and i try to run it but nothing show up.
What i am doing wrong?
port is open and firewall/av disabled
could be the dns provider.
It's proved to work with dyndns. however you will need to buy a dns solution. 20 dollar a year or something
* - PageMaster - Jul 14, 2014
(Jul 14, 2014 09:34 AM)Cerciz.Nder.Maja Wrote: My question is, can a RAT be bind to a song, for example: Tiesto - Adagio For Strings.mp3
and the file that is infect to look like that: Tiesto - Adagio For Strings.mp3
without any .exe in the file name
Yes a RAT could be binded to a Song, Ive seen them also binded to things like PNG's and GIF's. You just have to find a capable binder, and then hope that is compatible with your RAT of choice.
(Jul 14, 2014 09:38 AM)NestiALB Wrote: Port forward question
I am using proxpn VPN Whenn i try to see if they are opened in canyouseeme it keeps saying Error: I could not see your service on 173.0.8.104 on port (1604) ... That error is for all ports that i have tried . I have tried around 50 ports and for all keeps saying that. PLease i need help ?
https://i.imgur.com/6Evr93W.png <- IMAGE
Most Likely the Port is closed. try Whatsmyip.com and use their port scanner tool to ensure that the port is open.
The easiest VPN I ahve found for Ratting is ibVPN, its $3 a month and you are assigned a dynamic IP and It works with No-ip DUC, and DynDNs.
(Jul 14, 2014 10:24 AM)The Line of Death Wrote: could be the dns provider.
It's proved to work with dyndns. however you will need to buy a dns solution. 20 dollar a year or something
IT most likely is the DNS Provider, I checked it out, and it did not seem to be of too high quality. I second the reccomendation for dyndns.
Another Option would be ibVpn which gives you a dynamic IP and keeps no logs. You wouldnt have to worry about port forwarding, and its very easy to use! Or nVpn!
* - Prepertion - Jul 14, 2014
Vouch for this guy he is legitimate he helped me set up my rat and gave me some tips on spreading!
* - Cerciz.Nder.Maja - Jul 14, 2014
So there will not be at all a .exe in the title of the file?
i was told that even with binding the .exe will show on the tile
* - Llyn - Jul 14, 2014
(Jul 14, 2014 11:18 AM)Cerciz.Nder.Maja Wrote: So there will not be at all a .exe in the title of the file?
i was told that even with binding the .exe will show on the tile
Yes there will be an exe in the filename no matter what. Unless you have a file spoofer , however the filename would look like this " songnameexe.mp3" . Correct if I am wrong though.