Hack Forums
[Question]the Rat and my anonymity. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: [Question]the Rat and my anonymity. (/showthread.php?tid=5504258)



[Question]the Rat and my anonymity. - shytnik - Dec 25, 2016

Hi all. I use NjRat and VPN(nvpn.net). After a few distribution,I open their Desk and see a virtual machine or Windows server, there opened command prompt and in it something happens(know check my build) . What is this? Who are these people? I immediately removed. P. S. Sorry for my bad English.


* - Ainaj - Dec 25, 2016

You're about to get raided. Prepare your anus for jail.


* - Mitlar - Dec 25, 2016

Honeypot. What DNS are you using?


* - shytnik - Dec 25, 2016

(Dec 25, 2016 02:46 PM)CesarVB Wrote:  You're about to get raided. Prepare your anus for jail.

I have on my hard drive already all clear. I did a full format of your ssd drive.. No one that does not steal.


(Dec 25, 2016 02:48 PM)Lϻғϑλσ Wrote:  Honeypot. What DNS are you using?

I use nvpn.net with a dedicated IP. What is the bait? The first time I encountered such a strange user


* - Ainaj - Dec 25, 2016

(Dec 25, 2016 02:51 PM)shytnik Wrote:  I have on my hard drive already all clear. All cleaned and removed. No one that does not steal.

You were already caught. It's GG my friend.


* - shytnik - Dec 25, 2016

(Dec 25, 2016 02:55 PM)CesarVB Wrote:  You were already caught. It's GG my friend.

I can now pull out the ssd and put it in the trash. If I have a clean computer that can show me? sorry for bad English


* - Purple Kief - Dec 25, 2016

If you haven't stolen any money or done any very big harm you will be fine.
As for anonimity, a little HF VPN is not gonna keep your ass covered.


* - shytnik - Dec 25, 2016

(Dec 25, 2016 03:03 PM)Purple Kief Wrote:  If you haven't stolen any money or done any very big harm you will be fine.
As for anonimity, a little HF VPN is not gonna keep your ass covered.

Neither of which I did not do(did not steal the money, no harm done)


You advise me how best and most to be anonymous? buy VPS+VPN? On the forum probably there is a topic about anonymity, I just didn't find her.


* - JoshuTee - Dec 25, 2016

It's a honeypot. The server runs your RAT client to see what happens.


* - shytnik - Dec 25, 2016

(Dec 25, 2016 03:55 PM)JoshuTee Wrote:  It's a honeypot. The server runs your RAT client to see what happens.

thanks for the reply.


* - yotoprules - Dec 25, 2016

Nothing will happen, they're jjust examining the RAT inside a virtual environment. Just uninstall them and next time don't scan on virustotal, or if you didn't maybe someone else did, so next time use a downloader that doesn't run inside a VM or wireshark.


* - shytnik - Dec 25, 2016

(Dec 25, 2016 05:18 PM)yotoprules Wrote:  Nothing will happen, they're jjust examining the RAT inside a virtual environment. Just uninstall them and next time don't scan on virustotal, or if you didn't maybe someone else did, so next time use a downloader that doesn't run inside a VM or wireshark.

Thank you for the reply. I forgot the Cryptor to enable these settings. I will be careful and cautious next time.


* - KN. Strike - Dec 25, 2016

I'm truly sorry, but you sound like a retarded skiddo...
" run the command "ping" in the command line. What is this? Who are these people?"


* - shytnik - Dec 26, 2016

(Dec 25, 2016 11:34 PM)KN. Strike Wrote:  I'm truly sorry, but you sound like a retarded skiddo...
" run the command "ping" in the command line. What is this? Who are these people?"

It is not necessary insults. Perhaps I'm wrong, maybe this is some kind of software(the point of my post remains the same)


* - Saney - Dec 26, 2016

Yeh. If you upload your rat to scanning sites some of them might have a client(bot) that will show up in your rat and will run a command prompt to check your server then destroy itself -- which is called a honeypot.
Not dangerous