+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: OBI'S RAT TUTORIAL (beginner friendly)... (/showthread.php?tid=4624546)
OBI'S RAT TUTORIAL (beginner friendly)... - Obimoto - Jan 7, 2015
IF THIS TUTORIAL HELPED YOU, SHARE THE LOVE AND LEAVE A COMMENT!
;D
So here's a basic RAT tutorial (I will be using njRAT and Windows)...
Firstly, Download a good RAT...
-njRAT
PORT FORWARDING
So you gotta port forward for most RATs...
To do this, the common way would be to type the default gateway IP into the url of your browser...
Spoiler (Click to View)
![[Image: nXjKCOA.png?1]](https://i.imgur.com/nXjKCOA.png?1)
Spoiler (Click to View)
![[Image: 8zSmn3K.png]](https://i.imgur.com/8zSmn3K.png)
You'll have to know your router's login information...
Spoiler (Click to View)
![[Image: 8WMCmGj.png]](https://i.imgur.com/8WMCmGj.png)
After you need to look around for the port forwarding settings...
Every ISP is different...
Select the port you want to forward (I suggest something over 1000)
Select both TCP and UDP (You may have to do this twice if there is no both option, although just TCP should be fine)
Test at http://www.canyouseeme.org/
(you must be listening to the port you are testing! You can do this by clicking START when you start up njrat)
If you cannot port forward, it may be your ISP. I know AT&T does this, but you can call and get them to set it up for you...
Alternatively, you can use a VPN, although you should ALWAYS use paid VPNs, and study their security and privacy policies well...
Make sure they allow port forwarding, although most paid VPNs do...
SETTING UP YOUR RAT
1. Download your rat to the Desktop
2. Click on the exe Spoiler (Click to View)
![[Image: KSH8puQ.png]](https://i.imgur.com/KSH8puQ.png)
3. Pick the port you are forwarding (I'm using 5687) Spoiler (Click to View)
![[Image: 8m5XIYp.png]](https://i.imgur.com/8m5XIYp.png)
4. Click the Builder Spoiler (Click to View)
![[Image: GALA55B.png?1]](https://i.imgur.com/GALA55B.png?1)
5. For now, we will use our IPv4 Spoiler (Click to View)
![[Image: oMRIeBZ.png]](https://i.imgur.com/oMRIeBZ.png)
6. Use whatever you want, but we will be testing this on our machine, so don't check BSOD, Copy To StartUp, or Registry StartUp
7. Click build, and save the file to the Desktop Spoiler (Click to View)
![[Image: mPa9tnU.png?1]](https://i.imgur.com/mPa9tnU.png?1)
Spoiler (Click to View)
![[Image: VGolPZC.png]](https://i.imgur.com/VGolPZC.png)
8. Double-click on the .exe and this should come up...
Spoiler (Click to View)
![[Image: lihelSe.png]](https://i.imgur.com/lihelSe.png)
NOW WITH DNS
1. Get a good DNS hosting service. I'm sorry, I have no suggestions at the moment except DON't USE no-ip...
2. Connect to your created DNS
3. Follow steps 2-4 of the setup
4. When going to the builder, change the IPv4 to your DNS address
5. Create the exe and you're done!
To test, you will need a VM or dummy computer to infect, instead of your own...
![[Image: 9ZS8wR0.gif]](https://i.imgur.com/9ZS8wR0.gif)
Almost forgot...
You'll want to look into a FUD crypter as well...
You can start by looking in the Cryptography, Encryption, and Decryption section...
IF YOU HAVE ANY SUGGESTIONS OR FIND ANYTHING WRONG WITH MY INFORMATION, FEEL FREE TO COMMENT...
HAPPY HACKING XD
* - tux1 - Jan 7, 2015
Nice tutorial, I can see you put a lot of work in to this.
* - Furious Yellow - Jan 7, 2015
Nice tut.. Thanks for writing this :-)
* - Internet Explorer. - Jan 7, 2015
Nice tutorial, writing to see tomorrow.
* - ledpen6 - Jan 7, 2015
One of the easiest tutorial to understand for a noob like myself, thanks mate! :D
* - KuKomPU - Jan 7, 2015
How do I enslave other systems tho? I'm just abit confused on that aspect? Do I need them to download that thing that that we built?
* - Obimoto - Jan 7, 2015
(Jan 7, 2015 04:15 PM)KuKomPU Wrote: How do I enslave other systems tho? I'm just abit confused on that aspect? Do I need them to download that thing that that we built?
Yes. If you look at step 7, the picture with the python image was my malicious.exe file. To work, the victim must open this file...
You can give them this file in a number of ways...
Try to look for spreading guides, If I see one that's good I will inform you...
The Coolest Users on HF Wrote:"Nice tutorial, I can see you put a lot of work in to this."
"Nice tut.. Thanks for writing this :-)"
"Nice tutorial, writing to see tomorrow."
"One of the easiest tutorial to understand for a noob like myself, thanks mate! :D"
Thank you all for the support! I'm glad it is helping XD
* - jazzahacks - Jan 7, 2015
dose that link have a rat or malware attched ?
* - Obimoto - Jan 7, 2015
(Jan 7, 2015 04:49 PM)jazzahacks Wrote: dose that link have a rat or malware attched ?
From my research, I could not find anything malicious, or anyone claiming it was malicious, and it comes from a trusted HF member...
He has not been accused of giving out infected programs...
There is always a chance of course, but I wouldn't put the link up if I felt if was malicious...
All hacking programs will come up as malware for AVs btw...
* - KuKomPU - Jan 7, 2015
(Jan 7, 2015 04:20 PM)Obimoto Wrote: Yes. If you look at step 7, the picture with the python image was my malicious.exe file. To work, the victim must open this file...
You can give them this file in a number of ways...
Try to look for spreading guides, If I see one that's good I will inform you...
Thank you all for the support! I'm glad it is helping XD
Ah okay, Thanks alot. Also, last question (maybe), could i just put the malicious.exe on a flash drive, bring it to another computer, and open it there?
Oh and the IP i need to put in is my IP or..? (for the host thing)
* - Obimoto - Jan 7, 2015
(Jan 7, 2015 05:49 PM)KuKomPU Wrote: Ah okay, Thanks alot. Also, last question (maybe), could i just put the malicious.exe on a flash drive, bring it to another computer, and open it there?
Oh and the IP i need to put in is my IP or..? (for the host thing)
Yes, you can just copy the file from the usb to the computer, execute it, then delete the file...
And your IPv4 only works on your network, so to infect someone who lives somewhere else you have to put in your DNS address...
Example:
Spoiler (Click to View)
![[Image: VgHX8fE.png]](https://i.imgur.com/VgHX8fE.png)
* - Credit Card. - Jan 9, 2015
Ok, so I am into my router/modem settings on my computer. How do you find what port number you have to setup port fowarding?
* - Obimoto - Jan 9, 2015
(Jan 9, 2015 02:50 AM)Credit Card. Wrote: Ok, so I am into my router/modem settings on my computer. How do you find what port number you have to setup port fowarding?
Ah, you can pick any port you want in existence...
Although it's recommended to use one over 1000 or so...
You're gonna find the setup for it somewhere under "Forward a Port" or something like it...
* - Credit Card. - Jan 9, 2015
(Jan 9, 2015 02:55 AM)Obimoto Wrote: Ah, you can pick any port you want in existence...
Although it's recommended to use one over 1000 or so...
You're gonna find the setup for it somewhere under "Forward a Port" or something like it...
So can I just type in any number over 1000?
I found where I can put a number in for "Starting Port" and "ending port"
* - Obimoto - Jan 9, 2015
(Jan 9, 2015 02:57 AM)Credit Card. Wrote: So can I just type in any number over 1000?
I found where I can put a number in for "Starting Port" and "ending port"
Pretty much, just not too far lol...
I think ports go up to like 65,000
Put the starting port and ending port as the same port...
I use 5687...
For internal IP put your IPv4...