Hiya, I set up my RAT to run on startup once activated, however upon testing on my test machine, everytime the computer is restarted it asks if it should run it since its an unknown publisher- any way to get around this?
[ILLUMINATI] Ask Skiezo™ Anything about RATS :-) |
Hi, sorry for the noob question, in all the tutorials for DC it says to set up a NoIP account and download and install some noIP software? But it never explains why you have to do so? Can you tell me what it is good for and if it also works without, and if not why? :-) It's probably also because I didn't really get yet how DC works? Why doesn't it just connect to the internet and then to the install? Why do you have to make settings in your router and portforward and NoIP and so? And what difference does it make? Thanks for your patience 🤝
Sep 11, 2012 05:46 PM
(This post was last modified: Sep 11, 2012 05:58 PM by Skiezo™.)
(Sep 11, 2012 02:23 AM)Boa Hancock Wrote: Hiya, I set up my RAT to run on startup once activated, however upon testing on my test machine, everytime the computer is restarted it asks if it should run it since its an unknown publisher- any way to get around this? Yes, make your file crypted and do not use start up on your Darkcomet. But on the crypter, Because Darkcomet always had that kind of problem with the startup option. (Sep 11, 2012 02:57 AM)batou Wrote: Hi, sorry for the noob question, in all the tutorials for DC it says to set up a NoIP account and download and install some noIP software? But it never explains why you have to do so? Can you tell me what it is good for and if it also works without, and if not why? :-) It's probably also because I didn't really get yet how DC works? Why doesn't it just connect to the internet and then to the install? Why do you have to make settings in your router and portforward and NoIP and so? And what difference does it make? Thanks for your patience 🤝 Well first of all people use NO-IP to hide their WAN IP They just set up a host on NO-IP so they don't risk to make a file with their WAN IP entered in the settings of the RAT. You don't need to make a NO-IP, it's just your risk to slaves who can get your WAN IP easily if you're not using it. The Port forwarding part is a must because you need to have a port open that you can connect with your RAT, We all have ports open those ports are ports that already have been opened on your Router to have access for various things such as Skype ( Port 80 ) This port is already opened for you, to have a connection on your Skype Well this is the same with your RAT, you need to have connections with your slaves and for that you need to have a port open. Difference between NO-IP & WAN IP; WAN IP: You are in more danger when someone knows how to get your IP while he is accepting your executable file. NO-IP: You slave only obtains your NO-IP, He pretty much can't do anything with it ( Unless reporting it to NO-IP and have your account blocked ) But lots of people leave that part. I hope you understand what i mean. (Sep 11, 2012 03:14 AM)Margherita Wrote: excuse me please: what's a decent and stable free RAT ? Darkcomet all the way, This is a Free RAT and pretty much stable especially the latest version Darkcomet ( 5.3.1 ). So if you wish to have a clean download, PM me Make sure to PM me on HF to verify if I'm dealing with you on Skype (Sep 11, 2012 05:46 PM)Skiezo™ Wrote: Well this is the same with your RAT, you need to have connections with your slaves and for that you need to have a port open. Thank you for the very detailed answer. I understood most of it, and the difference between the WAN IP and the NOIP IP. I think I got that, the install communicates with my noIP server and from there back to the DC software on my machine? please correct me if im wrong. Appart from one thing, what does the noIP DUC do? I thought it constantly updates the noIP with my real (WAN?) IP? Isn't the noIP IP the same as my WANIP then? Or why do I need the noIP DUC and what does it do? And why can't the RAT use one of the ports that are already open, like port 80 ( if or if not I am using skype)? Sorry, but I like to understand things... thanks a lot for your help 🤝
Sep 12, 2012 10:50 AM
(This post was last modified: Sep 12, 2012 10:56 AM by Skiezo™.)
(Sep 11, 2012 11:44 PM)Nemesis44 Wrote: Is there a way to make slaves visit my adf.ly links without them noticing it ? I hear visit web site in DC should do this, but when i tried it i didnt get views. For Adf.ly links you have to Skip ads.. And if you just open a website that wouldn't do the job.. the Blackshades NET RAT has this feature. Al though there are thoughts from people that Blackshades is backdoored. So i'm not sure if it's safe right now to use. (Sep 12, 2012 08:15 AM)batou Wrote: Thank you for the very detailed answer. I understood most of it, and the difference between the WAN IP and the NOIP IP. I think I got that, the install communicates with my noIP server and from there back to the DC software on my machine? please correct me if im wrong. The NO-IP DUC 3.0 updates your hosts and IP adress. NO-IP doesn't leak your IP Adress to others, it's just a back up for your WAN IP so there is no need to be worry about your WAN IP to be leaked. Only NO-IP knows your WAN IP. You have to '' Check '' your host and save that in your DUC 3.0 Because like i said.. It updates your hosts & IP Adress ( If you're switching IP's ) You don't need to have it ran.. But you can expect no Updates & there is a chance of losing slaves. (Sep 12, 2012 08:40 AM)Hack-IT! Wrote: Can Anyone Tell me what i have to do first Crypt your file first, and bind it after with a picture. Make sure you uncheck everything on your RAT before you crypt your file. Else there will be given a corruption file which means it's not gonna work. Make sure to PM me on HF to verify if I'm dealing with you on Skype (Sep 12, 2012 01:17 PM)GhostProtocol Wrote: Skiezo, Yes, this is a problem of blackshades that is not resolved yet As soon as your http://canyouseeme.org says it's open Then it's open. Make sure to PM me on HF to verify if I'm dealing with you on Skype (Sep 12, 2012 03:02 PM)Skiezo™ Wrote: Yes, this is a problem of blackshades that is not resolved yet thanks for your reply!! peace but weird its not on theyre site lols 
Hello Skiezo™,
I assume you're still using DataProtector. I know there's a DarkComet Removal tool around, saying that it can remove DC even if it's crypted, but does it work the same for DataProtector, or does DP has some extra persistence in it to prevent that? Thanks for answering all my previous questions ! |
|
|
