+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: [FREE GUIDE] How to Set up Quasar RAT in 2024 (/showthread.php?tid=6268640)
Pages: Pages
1
2
[FREE GUIDE] How to Set up Quasar RAT in 2024 - Scrubspoof - Apr 15, 2024
Before you get your dick dirty get some protection. Buy a month of Mullvad VPN they do not keep logs.
https://mullvad.net/
Make sure you use crypto even though card payment is available.
Install mullvad on your PC
Once protected buy a bulletproof windows RDP from AnonRDP, they do not keep logs.
http://anonrdp.com/
You will also need a bulletproof domain for DNS. You can buy a .RU domain without KYC/ID from GreenBullet that can not be taken down and ignores spamhaus reports.
https://greenbullet.su/cart.php?a=add&domain=register
After your purchase open up Remote Desktop on your PC and log into your RDP using the information provided
Open windows firewall and disable it.
Open windows security center and add an exception to your downloads folder
Download Quasar on to your windows RDP and extract it to its own folder
https://github.com/quasar/Quasar/releases/tag/v1.4.1
Open Quasar RAT
![[Image: bymzub.png]](https://files.catbox.moe/bymzub.png)
Click "Create" inside the Certification Wizard. Click save. You only need to create a certificate once.
Click "Settings" at the top of Quasar and set your listening port. We are going to use port 2024 as an example. Click "Start Listening". Save.
![[Image: x8xm7d.png]](https://files.catbox.moe/x8xm7d.png)
Now the RAT is ready to accept new connections from clients.
Now we need to create a payload. Click "Builder" at the top of Quasar.
Leave Everything on Basic Settings tab as is.
Now go back to GreenBullet and create an "A record" to point your domain to the IP address of your VPS. This is in case your VPS IP changes, so you won't lose your clients you can update your IP again on GreenBullet in the future.
Now go back to Quasar on your RDP. Click "Connection Settings" Tab. Enter the domain you bought from GreenBullet into the IP/Domain box and set your port to what we set it to earlier (2024).
![[Image: po02u4.png]](https://files.catbox.moe/po02u4.png)
DO NOT TOUCH ANY OTHER BUILD SETTINGS.
Click "Build Client" at the bottom. Select the file name and save location for your uncrypted payload.
Now go to where you saved the payload and make a copy of that file. Run the copied file. You should get a connection (knock) from yourself inside the RAT!
![[Image: 37p763.png]](https://files.catbox.moe/37p763.png)
To remove yourself right click the connection and select Client Management -> Uninstall
Here is a scan of what your uncrypted payload will look like:
https://avcheck.net/id/QFDclb6pNCqm
18/26 detected..
Now you need to crypt your payload for spreading. Lets use ScrubCrypt.
You can buy a week here: https://scrubcrypt.su
You should get the download and product key in the email provided at purchase.
Download ScrubCrypt to your RDP.
Open Scrubcrypt. Enter your license key.
Click the three dots in the upper right hand corner of ScrubCrypt to navigate to your uncrypted Quasar Payload.
For settings: select Hidden, Startup, UAC Bypass, and WD Exclusion.
This will run with the CMD window hidden, adds your payload to startup, will auto escalate itself to administrator priv with UAC bypass, and then, as an administrator create a windows defender exclusion for every detected drive. The defender exclusion is very important because even though ScrubCrypt is FUD with this build eventually your payload will become detected over time and with the exclusion in place windows defender will never detect anything ever again.
Click Build, save your payload for use!
![[Image: lo41ic.png]](https://files.catbox.moe/lo41ic.png)
Here is a scan of our crypted payload:
https://avcheck.net/id/WmTacxqyQIEj
0/26
Runtime:
https://scanner.to/result/2jE8URusvueJ
3/21 (Bypass Defender)
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - slezer - Apr 15, 2024
Should've provided a runtime scan of your crypter instead of a scantime scan, would actually be useful :)
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - DynamicW - Apr 16, 2024
You should do runtime scan too yes.
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - josn - Apr 16, 2024
Please check my thread. Been using quasar for a long while and just ran into this problem.
hackforums.net/showthread.php?tid=6268731&pid=62338012#pid62338012
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - Henkpapels - Apr 17, 2024
thanks alot for this post!
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - Scrubspoof - Apr 17, 2024
(Apr 15, 2024 09:27 PM)slezer Wrote: Should've provided a runtime scan of your crypter instead of a scantime scan, would actually be useful :)
Thread updated with runtime scan:
Runtime:
https://scanner.to/result/2jE8URusvueJ
3/21 (Bypass Defender)
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - axsw - May 1, 2024
Would that work on virtual box instead rdp?
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - Scrubspoof - May 1, 2024
(May 1, 2024 09:48 AM)axsw Wrote: Would that work on virtual box instead rdp?
Only if you don't want anything to connect.
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - SHADE™ - May 2, 2024
Good thread, very smooth instructions.
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - Speaker - May 4, 2024
Thanks appreciate your efforts!
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - cYBEROPTICS - May 9, 2024
Thanks for the nice write up OP!
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - JoeRogan - May 16, 2024
i agree but i do not know if there are any better alternatives
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - Mlwelsh - Nov 23, 2024
Interesting. If connecting to another persons computer / network, do i still use my own IP address in the IP/Hostname builder.
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - pipoelamigo - Dec 6, 2024
thank you very much for that
RE: [FREE GUIDE] How to Set up Quasar RAT in 2024 - BPName - Dec 7, 2024
thanks alot for this post!