Sep 15, 2012 06:02 AM
(This post was last modified: Sep 15, 2012 06:40 AM by Skiezo™.)
(Sep 14, 2012 02:23 AM)Elweth Wrote: Hello Skiezo™,
I assume you're still using DataProtector. I know there's a DarkComet Removal tool around, saying that it can remove DC even if it's crypted, but does it work the same for DataProtector, or does DP has some extra persistence in it to prevent that?
Thanks for answering all my previous questions !
Nope, there is no way of getting it out of your computer using Darkcomet Removal, Darkcomet Removal is specially based on the virus you create with Darkcomet, And it's hard to get it out of your computer when the file is crypted.
Data protector is crypted with 4 back up processors, And the persistence is very very high
(Sep 15, 2012 03:40 AM)_Eragon_ Wrote: Hi Skiezo :D
I'm using nVPN with a shared IP address. Does that mean my IP changes eachtime I connect to VPN ? Do I have to setup No-Ip and DUC ?
Yes, it means you'll get Different IP's when connecting to your VPN.
You bought a Non Dedicated VPN on nVPN.
It doesn't effect your NO-IP if you're using DUC 3.0
Because it keeps updating your New IP.
(Sep 15, 2012 03:44 AM)Nemesis44 Wrote: Iam i safe rating if i use nVPN and i have a router where 4 peoples are connected to, other computers have still original ip when i checked (propably because i didnt install config on those PCs) or how does this work ? Iam not sure if you will understand what do i mean.
Not really..
Can you please be specific?
Make sure to PM me on HF to verify if I'm dealing with you on Skype
Every time I bind a file to my RAT, it creates a stub.dpr?
What do I do with stub.dpr, is it already binded, and is it binded to the RAT or the program?
At home i have a router where 4 computers are connected throught it (one of those is mine).
I bought nVPN and downloaded config, etc. files to my computer and now iam hidden under VPN.
My question is, will they VPN apply to other 3 computer in the house, i didnt install those config files on it. When i turn on nVPN on my computer and check for my IP i can see nVPN ip. I tried to check whats my ip also on other computer and it showed my original ip.
My question is if iam 100% hidden and those 3 others computer dont somehow connect with me or me with them, because it would suck if lets say my brother was connection to his email from our original ip, but also from nVPN ip, i dont want these 2 IPs (mine original and nVPNs to go together).
Do you understand now ? :D
hey whats up what is the best crypter that is fud and free or not free available and how do you know if ur rat is fully working e.g ports are forwarded and the rat you make will infect someones pc?
i bought some bots from a bot seller, and when i bought 400 bots, i only got 35 of them, usually thats normal but i only got like 15 then the came very slowly and stopped, the file was fud and im using dark comet so i have no idea what the problem is
Sep 15, 2012 02:12 PM
(This post was last modified: Sep 15, 2012 02:21 PM by Skiezo™.)
(Sep 15, 2012 08:02 AM)Dexter Moser Wrote: Every time I bind a file to my RAT, it creates a stub.dpr?
What do I do with stub.dpr, is it already binded, and is it binded to the RAT or the program?
What kind of binder do you use, I think it's just a copy of your actual binded file. There is a way to get around that by unchecking it somewhere on the Binder you're using.
(Sep 15, 2012 08:08 AM)Nemesis44 Wrote: At home i have a router where 4 computers are connected throught it (one of those is mine).
I bought nVPN and downloaded config, etc. files to my computer and now iam hidden under VPN.
My question is, will they VPN apply to other 3 computer in the house, i didnt install those config files on it. When i turn on nVPN on my computer and check for my IP i can see nVPN ip. I tried to check whats my ip also on other computer and it showed my original ip.
My question is if iam 100% hidden and those 3 others computer dont somehow connect with me or me with them, because it would suck if lets say my brother was connection to his email from our original ip, but also from nVPN ip, i dont want these 2 IPs (mine original and nVPNs to go together).
Do you understand now ? :D
The VPN you are connecting with on your current Computer is working.
If you're not connected through a VPN on another computer then you're not secured on that computer. I hope your question is answered now.
(Sep 15, 2012 11:11 AM)2pad3 Wrote: hey whats up what is the best crypter that is fud and free or not free available and how do you know if ur rat is fully working e.g ports are forwarded and the rat you make will infect someones pc?
There are barely Free Crypters that are fully undetectable
I highly suggest you to buy a Paid crypter if you really want to have your Crypter Fully undetectable for a long time.
Here are some crypters listed, of course paid ones come with unlimited updates and better customer support. Free ones are also good, but it will stick to one version, most of the time.
Paid Crypters:
https://hackforums.net/showthread.php?tid=2524118 - Data Protector
https://hackforums.net/showthread.php?tid=1017199 - SADDAM
https://hackforums.net/showthread.php?tid=2371565 - Dimension
https://hackforums.net/showthread.php?tid=2162662 - Cryptex Advanced
https://hackforums.net/showthread.php?tid=2361480 - Enigma
Free Crypters:
https://hackforums.net/showthread.php?tid=2483163 - Sikrypter
https://hackforums.net/showthread.php?tid=1515855 - Entropy
https://hackforums.net/showthread.php?tid=2432777 - 2012 Crypter
https://hackforums.net/showthread.php?tid=2500773 - EnergyCrypt
https://hackforums.net/showthread.php?tid=2295406 - Tekken
If you want to know if you're port forwarded right you always are able to create a server on your RAT with the host: 127.0.0.1
127.0.0.1 is your Local IP which connects with your own host computer.
If you're connected then you're port forwarded right and able to spread with your NO-IP created file.
(Sep 15, 2012 01:54 PM)BestFromAbove Wrote: i bought some bots from a bot seller, and when i bought 400 bots, i only got 35 of them, usually thats normal but i only got like 15 then the came very slowly and stopped, the file was fud and im using dark comet so i have no idea what the problem is
The Botseller might have been botkilled your Bots
Which means the botseller who sold you those bots used the Malwarekiller option to remove all the bots that have been infected by other Ratters on a victim's computer to keep them for his own.
There is also a chance of you did not add Startup to your file.
If you do not use Startup then you'll lose all the bots you have if they shut down or restart their computer.
And last, They might have been reformatted/scanned/ or let someone take care of removing it from his/her computer.
Make sure to PM me on HF to verify if I'm dealing with you on Skype
DO NOT DEAL WITH THIS MEMBER
A couple of questions.
Do you know what RAT's does NOT require port forwarding, if any?
Do you know if there is any way to get into my password protected router to set up port port forwarding? Basically break in?
Do you know if there is any way for me to hide the port that will be used by a RAT so it isn't visible to the network admin?
Thanks so much!
i am wondering how many bots you can update on DC without DC crashing
also what is the best way to keep you're server FUD on them?
I use Data protector as crypter and DC as main RAT
so my question is..
whats the best way to update your server on them without losing connections?
(happends quite often for me) thats why i always pick 30 at the time
Sep 17, 2012 05:10 PM
(This post was last modified: Sep 17, 2012 05:14 PM by Skiezo™.)
(Sep 15, 2012 03:21 PM)DerrickB123 Wrote: A couple of questions.
Do you know what RAT's does NOT require port forwarding, if any?
Do you know if there is any way to get into my password protected router to set up port port forwarding? Basically break in?
Do you know if there is any way for me to hide the port that will be used by a RAT so it isn't visible to the network admin?
Thanks so much!
Hello,
Yes, there are some RATs that do not require Port forwarding
Here are some examples;
Blackshades fusion -
Can be found on their own Blackshades Website
http://bshades.eu/products.php
HTTP LokiRat
Tutorial on how to setup the HTTP based RAT LokiRat, written by --DK--:
https://hackforums.net/showthread.php?tid=1464984
If you don't know your router details, there is always a option to reset your details to change it back to the default Username & Password
Go to your little modem box, and hold the RESET button with a pencil or anything small to reach it, hold it till a color lights up, and that's the sign that your router has been reset. Then just google your Router name and find the default password, Most common details: admin - admin, password - admin, user - user etc.
There is no way hiding your ports in your router, they will be for ever in your Port forwarding tab.. so there is not really you can do about that.
(Sep 16, 2012 08:53 AM)iyolo Wrote: i am wondering how many bots you can update on DC without DC crashing
also what is the best way to keep you're server FUD on them?
I use Data protector as crypter and DC as main RAT
so my question is..
whats the best way to update your server on them without losing connections?
(happends quite often for me) thats why i always pick 30 at the time
It depends on your internet speed, If you have a good internet speed you'll be holding a lot more slaves then usually. I'd say around 4-5K Slaves
The best way to keep your slaves on your RAT is download and the execute option for a new Crypted Fully undetectable file, This way will keep you have your slaves longer on your RAT, But Data protector is a very good Crypter so it's very hard to kill the back up processors so i even doubt if that needs to, But if you're not sure you can do that to keep your slaves longer.
Make sure to PM me on HF to verify if I'm dealing with you on Skype
DO NOT DEAL WITH THIS MEMBER
So when you make the infected file do you use the file binder on the program or you use your own then crypt it?
For some reason when i crypt the file it no longer works is this the crypter or dark comet?
& With the whole Extension Spoofing and stuff do you spoof the .exe after or before you crypt?
Ports: If i change ports to whichever is open will i have the previous slaves or only the ones that i infected on that port will show?
If someone that knows alot about ratting and stuff could add me and sort of teach me some basics i would appreciate it just PM me your skype or comment the user name below
any help is appreciated.
(Aug 21, 2012 06:53 PM)Skiezo™ Wrote: My best spread method so far is a common used spread method
The Torrent spread method, This got me a lot of slaves before i had my file uploaded on Torrents.
If you wish to use this spread method, then i suggest you use the search button, there are a lot of guides about it.
Make sure your file is Fully undetectable, and let the slaves roll in :-)
https://hackforums.net/search.php?act...order=desc
You devote a thread for you helping people with rats, but you direct them to the search page? So helpful man!
DO NOT DEAL WITH THIS MEMBER
Sep 18, 2012 01:32 AM
(This post was last modified: Sep 18, 2012 01:32 AM by αcid.)
(Sep 18, 2012 01:24 AM)ƇƓŠŠ Wrote: You devote a thread for you helping people with rats, but you direct them to the search page? So helpful man! That's a bit harsh man he's replied to alot of people on here
what is the best website for download and execute?
is dropbox any good for it
Whats the best a Free Crypter or a Buyed?
Tell me ure opinion.
Sorry bad english
Dutch <3
Im useing DarkComet, well im trying. but i cant open it with Sandboxie or when i give it to someone it isnt connecting. i have portforwarded to 200 i made a myftp.biz also i added something into Socket/NET can you please help me?
|
