Mar 3, 2013 02:19 AM
(This post was last modified: May 22, 2014 10:33 AM by Phoeni✘.)
Hey HF, I just made a Detailed Tutorial about setting up Darkcomet RAT, All credits goes to ME 🙂
note :This Tutorial is for Educational Purposes only, use the information at your own risk! I am not responsible if you use this knowledge for unethical purposes.
This tutorial would teach the following things
-->Setting up No-Ip Client
-->Setting up Darkcomet RAT
-->Making a stable stub
-->Some tips on spreading
I won't be teaching you how to port forward though you can refer to this thread to learn about port forwarding Here
Why Darkcomet ?
DarkComer-RAT [as] one of the very best around, it is totally free to use and allows you to control many remote machines at the same time using hundreds of functions (webcam streaming, desktop streaming, micro streaming, keylogger, MSN control, system control, etc, etc.)
DarkComet is also considered as the most stable RAT around and it is even regarded more stable than some professional ones (profesional is another word for not free). Why would you spend even one dollar on a RAT when you can have better one for free ?" (Quoted from DarkComet Website)
Things we need:
NO-IP Account and DUC
Darkcomet v5.3 (Any older version will also work)
Download links :
No-Ip Client
Darkcomet v5.3 :
http://sharesend.com/download/62s36u4b
Older versions can be found here
Lets begin:
Step 1.
Setting up No-Ip
Go to https://www.noip.com/
and make an account there
![[Image: 2aOr6]](https://puu.sh/2aOr6)
![[Image: 2biyW]](https://puu.sh/2biyW)
After that head over to your E-mail id in order to confirm your account
You'll get a confirmation E-mail, Just click on the link to confirm the account.
Now Download DUC
Install it on your PC, Then run it after that Log into your no-ip account.
Click Edit Host
After that a dialogue box will pop-up, Check mark your Host in it
![[Image: 2fSoV]](https://puu.sh/2fSoV)
After that Just minimize the DUC and head over to Step2.
Step 2.
Setting Up Darkcomet.
Darkcomet V5.3 (or any other version)
open up Darkcomet.exe and Click on Darkcomet-RAT
Then click on Listen to a new Port
Enter any desired number, for ex. 100 - > then hit [/b]Listen[b]
![[Image: 2biJ5]](https://puu.sh/2biJ5)
Then again click "Darkcomet-RAT" --> then click Client Settings
![[Image: 2aPll]](https://puu.sh/2aPll)
Edit the settings,
![[Image: 2aPvV]](https://puu.sh/2aPvV)
Now close the "Settings" window and click on Server Module --> Full edition(expert)
![[Image: 2biO4]](https://puu.sh/2biO4)
![[Image: 2biUd]](https://puu.sh/2biUd)
![[Image: 2bj03]](https://puu.sh/2bj03)
![[Image: 2aQoC]](https://puu.sh/2aQoC)
Your server is now ready. You will need to crypt it first. Get it crypted from a crypter in the "Cryptography Section" or you can find someone doing it for free in the "Free Services and Giveaways" section or better still you can buy a crypter from the "Marketplace" of this section.
Some recommended crypters Free crypters are
--> Tyna Crypter
NOTE:
1. Never run your server on yourself because it can kill your firewall and Fixcomet doesn't always work. If you do run it then go through this tutorial . You can test your server in your sandboxie or in a VM.
2. The inbuilt No-Ip client on darkcomet doesn't work not more, use the external no-ip client (DUC)
3. If you have problems portforwarding, or your router is too old and doesn't support portforwarding use a VPN that supports portforwarding - here
4. Some recommended Spreading methods are Torrent,Chatrooms, Youtube method. You can read about them here
Other guides for spreading can be found here
6.In order to test your RAT you can follow my my tutorial located here
Please leave Feedback or if you feel something is wrong in the tut Let me know 🙂
Hope you like it
Regards 🤝
(Mar 3, 2013 02:25 AM).Weekend Wrote: Nice tutorial.
Will sure help some. :) Thanks for the compliment 🙂
Hope it help the folks around here.
This is nice tutorial dude, good job!
ok..i m facing strange problem with dc..i use minimum setting option...when i chk window installation and when i run that server in sandbox it work and get detected...but when i infect myself it dint pop up in client..when i uncheck that option it works perfectly on sandbox and when i infect myself...
sever make with window installtion>on sandbox working and detecting>infecting myself not wotking
without > working on both ways..
hope i explain it clearly :)
(Mar 3, 2013 04:41 AM)sikander007 Wrote: ok..i m facing strange problem with dc..i use minimum setting option...when i chk window installation and when i run that server in sandbox it work and get detected...but when i infect myself it dint pop up in client..when i uncheck that option it works perfectly on sandbox and when i infect myself...
sever make with window installtion>on sandbox working and detecting>infecting myself not wotking
without > working on both ways..
hope i explain it clearly :) Sorry dude I am not able to figure out your problem, Mind explaining again ? 🙂
can u add me on skype if u dont mind ?? :) namuna007
(Mar 3, 2013 05:02 AM)sikander007 Wrote: can u add me on skype if u dont mind ?? :) namuna007 Hope it worked for you 🙂
regards
thank you very much sir. this is the best tutorial and you are best :)
Good tutorial, and even though you mentioned to not use them if you plan to add startup, a note saying, "It will corrupt if you crypt it." would be nice.
Mar 5, 2013 08:26 AM
(This post was last modified: Mar 5, 2013 08:26 AM by Phoeni✘.)
(Mar 5, 2013 08:24 AM)Tutelary Wrote: Good tutorial, and even though you mentioned to not use them if you plan to add startup, a note saying, "It will corrupt if you crypt it." would be nice. Thanks for the feedback :)
I'll fix it up.
Great tutorial, I will be leaking it now.
Joking man =]
This guy helped me with my Darkcomet setup! 100% Working did it all over teamviewer! Friendly and nice guy. I VOUCH FOR THIS GUY!
(Mar 5, 2013 09:13 AM)Frebbe Wrote: This guy helped me with my Darkcomet setup! 100% Working did it all over teamviewer! Friendly and nice guy. I VOUCH FOR THIS GUY!
This is a setup tutorial, not a help desk. I guess you could vouch here though, even if it's the wrong thread...
hey that link contained a virus and was deleted by my antivirus. Thank god for Kapersky !!
(Mar 5, 2013 10:50 AM)dbmike316 Wrote: hey that link contained a virus and was deleted by my antivirus. Thank god for Kapersky !! AV gives false detection to Darkcomet, you should know that.
|