+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: How secure are you while handling Rat's? (/showthread.php?tid=6291777)
How secure are you while handling Rat's? - Captiva28 - Feb 9, 2025
Hey there, I'm not new here but a new account.
1- I would like to know what ways you guys use to protect yourself from backdoors and also privacy while handling with RAT's.
2- I see for example ad for CrazyRDP. What's your thought about that? Do you rather use it or have a VM?
3- Which DNS is better for you?
4- The devices are mine but family members are using it and I suspect they are not using it how I've asked them to and that they are doing/accessing stuff that I specifically told them not to. Would it be illegal for me to have a RAT on both devices? I can't do it without their consent but the devices are mine, that's why I'm not sure if it's legal or not.
In case it is legal, I still want to protect my privacy, therefore my questions here. Thank you in advance 🙏
RE: How secure are you while handling Rat's? - Captiva28 - Feb 9, 2025
(Feb 9, 2025 05:01 AM)Lowkey Wrote: Hopefully you're testing things in a controlled virtual environment separate from your main PC/Workspace.
Definitely want a vps / second pc or just a virtual machine workspace to emulate an OS you can reset to blank snapshots if something goes wrong.
This should be the bare minimum.
I'm not testing anything yet, I'm just gathering information first. I want to know better about it before I do anything.
Do you have any recommendations of a VPS?
RE: How secure are you while handling Rat's? - DramaKing - Feb 9, 2025
(Feb 9, 2025 05:00 AM)Captiva28 Wrote: 4- The devices are mine but family members are using it and I suspect they are not using it how I've asked them to and that they are doing/accessing stuff that I specifically told them not to. Would it be illegal for me to have a RAT on both devices? I can't do it without their consent but the devices are mine, that's why I'm not sure if it's legal or not.
I don't want to assume what country you're in because of course laws will vary depending on where you live. If you're in Brazil, for example, it may not be illegal. If you're in the US, however, the Electronic Communications Privacy Act makes it a felony to intercept electronic communication or access stored electronic messages without consent. Hopefully, your family members won't press charges, but there are better ways to monitor online activity than malware that will be detected. And you didn't state that the devices are all Androids.
There are parental monitoring or spy apps, but DNS doesn't require any installed software on target devices. Just set up a DNS server and set the DNS server in DHCP to the server's IP address. This will allow you to both monitor and block web activity. You can follow online guides or hire someone to do it.
RE: How secure are you while handling Rat's? - Captiva28 - Feb 9, 2025
(Feb 9, 2025 05:08 AM)Lowkey Wrote: Linode, and OVHcloud are pretty solid. There are actually a lot but it's more so dependent on what you need and such.
I'm not assuming you are I read the thread just felt the need to emphasize that because many folks end up mis-handling or infecting themself and causing un-needed damage to OS or local files.
I've heard about Linode before. I'll take a look into it
Yes, that's awesome from you to make sure people don't go into that mistake. Thank you for that.
(Feb 9, 2025 06:14 AM)DramaKing Wrote: I don't want to assume what country you're in because of course laws will vary depending on where you live. If you're in Brazil, for example, it may not be illegal. If you're in the US, however, the Electronic Communications Privacy Act makes it a felony to intercept electronic communication or access stored electronic messages without consent. Hopefully, your family members won't press charges, but there are better ways to monitor online activity than malware that will be detected. And you didn't state that the devices are all Androids.
There are parental monitoring or spy apps, but DNS doesn't require any installed software on target devices. Just set up a DNS server and set the DNS server in DHCP to the server's IP address. This will allow you to both monitor and block web activity. You can follow online guides or hire someone to do it.
I will check wether is legal or not in my country.
I saw already some parental monitoring websites but since some RAT's are open source and free, thought would be better than paid subscription
Thank you for you explanation DramaKing