+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Weird Slave, Any rat expert here? (/showthread.php?tid=5594789)
Weird Slave, Any rat expert here? - iUpgrade - Apr 7, 2017
So i am using Quasar and few other rats, i have a windows 10 slave which disappears and reappears in every 2 days... I have added my file into exclusions of AV and this usually happens always, the slaves stay for few hours and then it disappears and reappears after 2 days.
The guy PC has 13 days uptime according to taskmanager so he doesn't turns off or logs off system im sure.
The weird thing is, his browser has a history of surfing those days when he's not shown on my rat but my rat keylogger doesn't logs it.
I thought it was fault of Quasar so i tried 2 more rats and it's still happening!
Is there anyone who can tell me what exactly happening here?
* - lynnex - Apr 7, 2017
Could you describe what he's browsing (if it's not anything normal)
Maybe there's a terrible connection to the client?
Maybe he has a shitty av?
I can't be for sure but it may be bad connection
* - ConcealSquad - Apr 7, 2017
Probably a ghost OP. Time to move to Mexico.
* - Armada - Apr 7, 2017
Sounds like the binary is crashing out and it is not restarting or does not have the proper check routine to see if the binary is still running (File protection, re-spawn etc)
* - EvilNerd - Apr 8, 2017
(Apr 7, 2017 08:08 PM)iUpgrade Wrote: So i am using Quasar and few other rats, i have a windows 10 slave which disappears and reappears in every 2 days...the term 'slave' is deprecated 😠
I thought it was fault of Quasar so i tried 2 more rats and it's still happening!
Is there anyone who can tell me what exactly happening here?
Since you got the problem with all programs. not just quasar the problem is bad connection or some windows10 problem.
* - iUpgrade - Apr 8, 2017
(Apr 7, 2017 11:28 PM)Armada Wrote: Sounds like the binary is crashing out and it is not restarting or does not have the proper check routine to see if the binary is still running (File protection, re-spawn etc)I've used multiple rats on it and it's not the problem with the rat, He has a power plan in which display turns off after 2 hours of idle time but the sleep/hibernate mode is set to never, I'm prettty sure it's not the system or user turning off but yeah the server goes off after 2-3 hours of idle time when he's off from work.
Let's say maybe it's the problem with the connection, but it should logs the keystrokes even when it's offline but it doesn't.
Yeah you're right probably the process of binary is somehow getting stuck/paused and restarts automatically after 2 days of interval but why it's happening with all the rats i've tried?