[bcb038]

I have posted another thread that I am hoping someone can help me with, but I was curious if anyone has gotten any RAT client to work in a Virtualbox window?

I want to do this as my notebook is used for work and dont want to mix business with personal stuff. Also, I am a bit paranoid about backdoored RATs so I want to try in a safe environment.

Does anyone else do this or am I alone on a ledge all by myself? If so, anything special you have to worry about to get it to work?

thanks

[bcb038]

thanks for the quick reply but I meant the client....not the server

I have seen the antivm option in setups for servers but I was wondering about the actual client

[mariooo]

If virtual machine take connection from main machine it could be a problem for port forward. When I port forward i'm asked to put the local ip that must have the port open (192.168.0.2 for example) But if VM take connection from main machine it's like a LAN into another LAN and port won't be open there. Instead if you run connection directly from VM there should be no problem

[microsoldier]

I am just using usb flash drive i keep all there and run client from there

[bcb038]

hmmmm
I cant seem to get it work.

The program works but I just cant seem to get a connection with my test PC.

Tried different settings but it still doesnt get a connection. So I thought there might be a problem with the infected pc trying to communicate back with the client running in the virtualbox window

[bcb038]

ok. so the the VM has a static ip now. tested it. I can ping between my host os and the Virtualbox os.

I create the server and I put in my static ip and port 8003. This port is forwarded to my static ip of the VM.

Is this correct?

hmmmm.....just tried that and it didnt work

[bcb038]

Is no one working with type of setup?

Can anyone help?

[Riverthief]

Ok, I've literally JUST solved the same problem for myself lol. Forward your ports to your Host OS(Your physical, non virtual system), just like normal. Then, setup a bridged connection.

Now, on Linux, there are some Terminal commands to add "HostPort", "GuestPort", and Protocol. I will get into that later, once I fully test how to do it with a Windows host. I did it in Linux.

But just forwarding to your actual physical system and then setting the connection to "bridged" should suffice.

[Socal]

I can setup for you..I did the same thing a week ago

[Riverthief]

No, you are not correct...

First, does both your host and your VM have a 192.168.x.x IP ???

Next, do you have a static external public IP ?? If yes, you have to use THAT IP. Else, when creating your server, use your DNS (no-ip or dyndns) address...

Then, go to your router, and forward port 8003 to the static internal IP that you gave your VM...

Hope this helps...

Actually, I'd recommend port 2222. Least chance of conflicts etc.

[bcb038]

I appreciate all the replies.

I put the internal ip address because I want the traffic to flow through the router and not through the internet. I am hoping for faster data and also as to not affect my isp data limits. The target PC uses the same router for internet.

Riverthief.... I have set up in bridged mode and have the host OS and the Guest OS with different IP addresses. I will try the combination of setting the ip on the server file to the host OS IP address but what IP should I forward my port to?

eg. Host Win7= 192.168.1.10 Guest Win7 (running Spynet client) = 192.168.1.11
Spynet Server setting: 192.168.1.10:8003 router: forward port 8003 to 192.168.1.10 or 192.168.1.11?

Socal....is this how you did it or was there another way?

[bcb038]

I have tried this but i still dont get the connection. :(

I have pinged the ip address of the Guest OS from the Host OS and it works so communication should be fine.

I have never used a rat before, does it take time before it shows up on the client? I even rebooted the infected PC to see if it helps but still nothing.

I have to give the computer back tomorrow so if I cannot get it to work by then, I will have lost the opportunity.

Help!

[bcb038]

pardon the newbie question but what do you mean by add you?