+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: RAT with a feature to infect another Windows on the same network (/showthread.php?tid=6284928)
RAT with a feature to infect another Windows on the same network - aerohacker - Nov 18, 2024
There's a RAT with this feature?!
From the infected bot I can scan other computers running Windows on the same network and infect them too?!
RE: RAT with a feature to infect another Windows on the same network - DramaKing - Nov 18, 2024
(Nov 18, 2024 02:26 PM)aerohacker Wrote: There's a RAT with this feature?!
From the infected bot I can scan other computers running Windows on the same network and infect them too?!
Uh, no. Pivoting is a thing, but your best option is to find a file server on the network and either recover the password or login anonymously, then upload your file where it's likely to be noticed.
Something I will say a lot to new hackers (although you seem like you've been around) is that hacking is about exploiting software bugs, and that bugs get patched. This is why WannaCry and Petya are barely a memory now.
RE: RAT with a feature to infect another Windows on the same network - PitbullT0r - Nov 19, 2024
You mean spread over NAT? I think AsyncRAT has that functions, but im not sure.
Take a look and let us know.
RE: RAT with a feature to infect another Windows on the same network - DramaKing - Nov 19, 2024
(Nov 19, 2024 04:22 AM)PitbullT0r Wrote: You mean spread over NAT? I think AsyncRAT has that functions, but im not sure.
Take a look and let us know.
I think that you need to relearn what NAT means.
RE: RAT with a feature to infect another Windows on the same network - Rzm64 - Dec 30, 2024
bro thats a worm malware
RE: RAT with a feature to infect another Windows on the same network - Slyn - Dec 30, 2024
That isnt possible without a zero day exploit, like the one that WannaCry used. You might be able to find a zero day for sale somewhere but it will be incredibly expensive if it even exists.
Basically - its impossible.
RE: RAT with a feature to infect another Windows on the same network - dell_support - Jan 5, 2025
(Nov 18, 2024 03:37 PM)DramaKing Wrote: Uh, no. Pivoting is a thing, but your best option is to find a file server on the network and either recover the password or login anonymously, then upload your file where it's likely to be noticed.
Something I will say a lot to new hackers (although you seem like you've been around) is that hacking is about exploiting software bugs, and that bugs get patched. This is why WannaCry and Petya are barely a memory now.
god what i wouldnt give to have another amazing thing like wannacry again lmaoo. fbi please do your thing
RE: RAT with a feature to infect another Windows on the same network - DramaKing - Jan 5, 2025
(Jan 5, 2025 03:05 PM)dell_support Wrote: god what i wouldnt give to have another amazing thing like wannacry again lmaoo. fbi please do your thing
Two things:
1. It may be fun, but WannaCry caused millions of dollars in damage or more. It would make the Internet a much more dangerous place.
2. SMB is largely blocked on the Internet.
3. HIPS in antivirus software, at least paid antivirus, has become common.
RE: RAT with a feature to infect another Windows on the same network - dell_support - Jan 5, 2025
(Jan 5, 2025 07:06 PM)DramaKing Wrote: Two things:
1. It may be fun, but WannaCry caused millions of dollars in damage or more. It would make the Internet a much more dangerous place.
2. SMB is largely blocked on the Internet.
3. HIPS in antivirus software, at least paid antivirus, has become common.
right? why not just stick with network drives and sftp. And yeah sure it caused millions, it very well could have caused billions if deployed right. I bet the FBI has a vatican library-esque storage of that shit on hand lmao.
as for hips, useful and all, only monitors anything IN the OS, processes and running drivers. iirc petya was able to cache itself in gpu firmware and in bios. persistence is a bitch lol
RE: RAT with a feature to infect another Windows on the same network - DramaKing - Jan 6, 2025
(Jan 5, 2025 10:31 PM)dell_support Wrote: right? why not just stick with network drives and sftp. And yeah sure it caused millions, it very well could have caused billions if deployed right. I bet the FBI has a vatican library-esque storage of that shit on hand lmao.
as for hips, useful and all, only monitors anything IN the OS, processes and running drivers. iirc petya was able to cache itself in gpu firmware and in bios. persistence is a bitch lol
HIPS can block exploits before they are processed. That's the point. And as far as BIOS persistence goes, BIOS hasn't really been a thing since Windows 8.