(Sep 18, 2012 01:24 AM)ƇƓŠŠ Wrote: You devote a thread for you helping people with rats, but you direct them to the search page? So helpful man!
Sorry man i can't help you.. But i think you should read the Title once again
It's
Ask Skiezo™ Anything about RATS
Where did i mention that i help people, Please don't trash my thread.
And also.. You type in Torrent spreading and you find a lot of guides about how to spread your torrent file.
(Sep 18, 2012 01:21 AM)αcid Wrote: So when you make the infected file do you use the file binder on the program or you use your own then crypt it?
For some reason when i crypt the file it no longer works is this the crypter or dark comet?
& With the whole Extension Spoofing and stuff do you spoof the .exe after or before you crypt?
Ports: If i change ports to whichever is open will i have the previous slaves or only the ones that i infected on that port will show?
If someone that knows alot about ratting and stuff could add me and sort of teach me some basics i would appreciate it just PM me your skype or comment the user name below
any help is appreciated.
Once you create your file, It's infected and not crypted yet.
You may now bind the file with any picture you want ( Binder is in Darkcomet folder )
Once you did, you can crypt your file to make it fully undetectable. But please make sure you did not used the settings on your Darkcomet for example: Startup or icons. This will make your file corrupted once you crypt it since you're using the same settings on your Crypter.
Now if you want to spoof it,
you just open the spoofer ( Darkcomet folder ) And you give it a new name + the Fake extension.
Once you did these steps above
Your file should be working 100% without being corrupted.
If you have created a file on the port you port forwarded.
And want to use a different port, then you're not getting your slaves back since you're having them on another port.
If you need further questions PM me.
(Sep 18, 2012 07:49 AM)iyolo Wrote: what is the best website for download and execute?
is dropbox any good for it
To be honest currently i don't know of any good Direct downloader
That doesn't distribute samples, since i'm not ratting anymore and my mind isn't focused on that.
But Dropbox is definitely a bad choice since they are distributing samples of your file. If you have a file that is not crypted you're free to use it and it would be a good recommendation.
(Sep 18, 2012 08:20 AM)Givenchy Wrote: Whats the best a Free Crypter or a Buyed?
Tell me ure opinion.
Sorry bad english
Dutch <3
Here are some crypters listed, of course paid ones come with unlimited updates and better customer support. Free ones are also good, but it will stick to one version, most of the time.
Paid Crypters:
https://hackforums.net/showthread.php?tid=2524118 - Data Protector
https://hackforums.net/showthread.php?tid=1017199 - SADDAM
https://hackforums.net/showthread.php?tid=2371565 - Dimension
https://hackforums.net/showthread.php?tid=2162662 - Cryptex Advanced
https://hackforums.net/showthread.php?tid=2361480 - Enigma
Free Crypters:
https://hackforums.net/showthread.php?tid=2483163 - Sikrypter
https://hackforums.net/showthread.php?tid=1515855 - Entropy
https://hackforums.net/showthread.php?tid=2432777 - 2012 Crypter
https://hackforums.net/showthread.php?tid=2500773 - EnergyCrypt
https://hackforums.net/showthread.php?tid=2295406 - Tekken
I highly recommend you to use Data protector since that is the best Crypter i've ever used and i'm pretty sure it won't be a disappointment
(Sep 18, 2012 09:19 AM)iHysteria Wrote: Im useing DarkComet, well im trying. but i cant open it with Sandboxie or when i give it to someone it isnt connecting. i have portforwarded to 200 i made a myftp.biz also i added something into Socket/NET can you please help me?
Most likely reason you don't show up when you test it on yourself is the fact your probably using your external address when testing, (Eg, your WAN IP, or your No-ip DNS) and most likely your router/gateway/modem doesn't have NAT loopback support. Nothing to worry about, just when you test within your network use internal addresses, (eg, if your testing on the computer that is running the client use 127.0.0.1, if your testing within your network on a different computer use the address of the computer hosting the client).
(Sep 18, 2012 10:49 AM)larsek Wrote: I have question to you.
How RATs -especially Darkcomet- sends files ? By P2P connection , or with FTP protocol ? I just want to know more details.
And what RAT have the fastest sending files ?
1) None of the things you said.
You open a Custom port on your router, it has nothing to do with FTP P2P Or HTTP.. Once you open a custom port add the UDP + TCP Feature, and that would be good to go.
2) If you ask me about that question, i would say Blackshades..
But since there are a lot of stories going on Hackforums that it's backdoored i wouldn't recommend you to use it, I would stick to Darkcomet, other then that it really depends on your internet speed.