+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Remote Administration Tools: A Beginners Guide (/showthread.php?tid=5730278)
Remote Administration Tools: A Beginners Guide - Windows - Oct 3, 2017
Spoiler (Click to View)
Remote Admin Tools: A Beginners Guide
What are Remote Administration Tools?
Quote:A Remote Administration Tool (RAT for short) can be used for malicious purposes or legal purposes, some illegal purposes are controlling PC's, stealing victims data, deleting files. You can infect someone by sending them the stub you have created in your RAT.
How do they work?
Quote:The RAT is run on your computer, then you can create a stub file to infect clients. The stub will work in the background and will be hidden for the client. You can monitor the clients activity, manage files, install software, view passwords, turning on webcams and much more.
Do I have to portforward?
Quote:Yes! This is the most important part of setting up your rat. If you don't know how to port forward, I would suggest taking a look at this tutorial.
https://www.pcworld.com/article/244314/how_to_forward_ports_on_your_router.html
What is a Crypter?
Quote:Crypters are programs that are most of the time used to bypass antivirus detection of malware. Crypters are used to hide viruses, trojans, RATs, keyloggers into a new .exe file which antiviruses cannot detect.
Whats fully undetectable or undetectable?
Fully undetectable (FUD) means that your stub won't be detected by any antivirus.
Undetectable (UD) means that it will be detectable by a few antiviruses.
Runtime or Scantime?
Runtime: These crypters will make the stub remain undetected during the execution.
Scantime: These crypters will make the stub seem undetectable upon scanning, but when run in PC it will get detected by antivirus.
Which RAT should I use?
Free RATs to use:
- Quasar RAT
- Babylon
- NJRat
RATs to avoid:
- Darkcomet RAT
- Luminosity Link
- Blackshades RAT
- Nanocore RAT
Which crypter should I avoid?
Crypters to avoid:
- Cheap Crypters (May not be FUD for a while)
- Free Crypters (Will not be FUD)
Typical RAT Scenario
Spoiler (Click to View)
![[Image: qbkPMA6.png]](https://imgur.com/qbkPMA6.png)
Legal and Illegal uses of a RAT
A RAT can be used for illegal and legal purposes. Some legal purposes are using it to monitor your businesses computers, recover passwords that are forgotten, transfer files and many more. Some people use RATs for illegal purposes to steal accounts, bank or credit card information, or even mine cryptocurrency on the clients computer.
I do not condone using RATs for illegal purposes, if you are using it for legal purposes feel free.
![[Image: Y2VvR6T.png]](https://i.imgur.com/Y2VvR6T.png)
Android RATs
What are Android RATs?
Quote:Android RATs are developed to infect Android phones, some features in these rats are GPS locator, take pictures from the camera, SMS viewer, listen to microphone and much more.
How do they work?
Quote:The RAT is run on your computer, then you can create an .apk file to infect clients. The stub will work in the background and will be hidden for the client. You can monitor the clients activity, manage files, take pictures, view sms and much more.
Do I have to portforward?
Quote:Yes just like any RAT you need to portforward, here's a tutorial https://www.pcworld.com/article/244314/how_to_forward_ports_on_your_router.html
Do I need a Crypter?
Quote:No you don't need a crypter the reason why is because, not a lot of people have antiviruses on their phones so there really would be no point.
Going to be adding more info in the future, hopefully this will stop some low quality posts in the RAT section.
* - C3R0X - Oct 3, 2017
This is a very nice tutorial mate.Great Thanks.
Can You please share any link from where we can learn portforwarding.
Another simple question is - If I send the exe to victim and if he install the stub then he will be infected automatically or not.I am little bit confused that if i need to setup port then if I need the victim's pc in my hand or not :)
* - Windows - Oct 4, 2017
(Oct 3, 2017 11:55 PM)C3R0X Wrote: This is a very nice tutorial mate.Great Thanks.
Can You please share any link from where we can learn portforwarding.
Another simple question is - If I send the exe to victim and if he install the stub then he will be infected automatically or not.I am little bit confused that if i need to setup port then if I need the victim's pc in my hand or not :)
Thank you. So you have to set up the port and when building your stub put your ipv4 address and external ip in it and then send the victim the .exe
Here's a tutorial: https://www.pcworld.com/article/244314/how_to_forward_ports_on_your_router.html
Please let me know how it goes and if you need help, feel free to ask away!
* - Cannooo - Oct 4, 2017
Why to avoid using darkcomet? Just wondering.
Sure, it's not the most stable rat there is, but I'd say it's quite a decent one if you don't want to pay for one.
* - Riyu - Oct 4, 2017
(Oct 4, 2017 02:11 PM)Cannooo Wrote: Why to avoid using darkcomet? Just wondering.
It's outdated and has a shit ton of flaws.
* - Eleni - Oct 4, 2017
Which one is more stable Quasar or Babylon?
Also there is an option to transfer clients from one rat to another?
* - cephregada - Oct 4, 2017
Why don't you include a guide about mobile rats ? It's a pc inside our pockets, take a look at my thread
https://hackforums.net/showthread.php?tid=5730648
In my opinion we should concentrate more on mobile rats
* - Windows - Oct 4, 2017
(Oct 4, 2017 02:15 PM)Eleni Wrote: Which one is more stable Quasar or Babylon?
Also there is an option to transfer clients from one rat to another?
I have only used Quasar so i'm not too sure which one is more stable.
(Oct 4, 2017 02:19 PM)cephregada Wrote: Why don't you include a guide about mobile rats ? It's a pc inside our pockets, take a look at my thread
https://hackforums.net/showthread.php?tid=5730648
In my opinion we should concentrate more on mobile rats
I can add something about mobile rats later, not a ton of people use them though.
* - Eleni - Oct 4, 2017
(Oct 4, 2017 02:33 PM)Ɯιηɗσωѕ Wrote: I have only used Quasar so i'm not too sure which one is more stable.
Do you know where i can find a clean version of Quasar?
* - Windows - Oct 4, 2017
(Oct 4, 2017 02:34 PM)Eleni Wrote: Do you know where i can find a clean version of Quasar?
Yep! https://github.com/quasar/QuasarRAT/releases
If you need anymore help, don't hesitate to contact me.
* - Jake - Oct 4, 2017
This deserves a sticky bro. Good shit :D
* - #Skyline - Oct 4, 2017
I'd recommend you remove paid products from this thread. Legit or non legit, just free advertising for them. You should list free one's.
(Oct 4, 2017 02:41 PM)Disinterested Wrote: This deserves a sticky bro. Good shit :D
Needs way more information, and he should take my opinion into consideration, because Omni will never put a sticky in this section if it features paid products.
* - Windows - Oct 4, 2017
(Oct 4, 2017 02:45 PM)#Skyline Wrote: I'd recommend you remove paid products from this thread. Legit or non legit, just free advertising for them. You should list free one's.
Needs way more information, and he should take my opinion into consideration, because Omni will never put a sticky in this section if it features paid products.
Okay I will list the free ones.
Thanks for the info
* - oRequiem - Oct 4, 2017
This is a very well put tutorial for some new people into the scene!
Well done my friend.
* - CXGNAC - Oct 4, 2017
My man windows!
HQ Shit bro, keep it up!
Was a good Read and is a great Tutorial for Beginners!
Wheres the Anti-LQ Post Sticky when you need one?
Am I right? 🤣