+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: How do you know your results are safe on a paid rat? (/showthread.php?tid=6332847)
How do you know your results are safe on a paid rat? - 0mnicide - Oct 1, 2026
I'm currently working on building my own RAT, and it's been a long, strenuous headache of a process since I'm learning as I go. I was thinking of buying a paid RAT on a monthly basis to use for my work until I have a working product of my own, but I don't understand how people just trust another dev with all of their clients. Are there certain steps people take, or some kind of hosting agreement or something? I know it's a dumb question, but I had to ask — maybe someone knows something I don't. Thanks.
RE: How do you know your results are safe on a paid rat? - Punny - Oct 1, 2026
Isolate the program, remove internet, whatever stops working remove replace
RE: How do you know your results are safe on a paid rat? - n3f3r - Oct 1, 2026
(Oct 1, 2026 01:58 PM)Punny Wrote: Isolate the program, remove internet, whatever stops working remove replace
that doesn't make sense, how do you validate license without internet? :)
RE: How do you know your results are safe on a paid rat? - noEsc - Oct 1, 2026
I think the trust comes from other users with good reputation that vouche for it and users that have experience in detection of malicious activity to catch to see if the RAT is backdoored and such.
RE: How do you know your results are safe on a paid rat? - DramaKing - Oct 1, 2026
It's dead simple to see if a payload is dualhooked.
RE: How do you know your results are safe on a paid rat? - Infinity. - Oct 4, 2026
(Oct 1, 2026 03:11 PM)n3f3r Wrote: that doesn't make sense, how do you validate license without internet? :)
You can ship the public key but meh...
i think Offline validation can establish “this license was genuinely issued by us”, but it can't reliably establish “this license is currently valid according to our server.”