[popdogcrush]

Hi there,
I'm having a problem understanding the concept of the Java Drive-By and the Silent Java Drive-By. Could you please answer my questions:
1. Am I right that no JDB will stay FUD forever? Thus, one has to purchase something like FoxxyJava to have a constant supply of FUD JDBs?
2. Am I right that the Silent JDB is so rare that it is almost impossible to obtain and those Silent JDB tutorials around here on the forum are actually not silent?
3. If I'm using jRAT, does it have more sense to use JDB? Or, can I somehow take advantage of the java nature of jRAT when infecting people? Or the fact that it is java-based is irrelevant when it comes to infecting people?

Thank you very much in advance. Look forward for your answers.

1. No you're not right.
2. It is rare, however not impossible to obtain. They're patched, well most if not all.
3.You don't need to use a JDB to spread with jRAT.

No problem.

Thanks for a prompt answer but:
1. Could you be more specific please and provide me with a more detailed answer?
2. Then how can I obtain one? Since they are almost all patched...
3. I'm sorry but I'm afraid you didn't answer my question. I know I don't need JDB to spread jRAT, what I was asking is if I can combine the benefit of java nature of jRAT with a JDB.

Thanks.

[Understalker]

Thanks for a prompt answer but:
1. Could you be more specific please and provide me with a more detailed answer?
2. Then how can I obtain one? Since they are almost all patched...
3. I'm sorry but I'm afraid you didn't answer my question. I know I don't need JDB to spread jRAT, what I was asking is if I can combine the benefit of java nature of jRAT with a JDB.

Thanks.

1. You will need a FUD stub as well.
2. You cannot? 😝
3. Yes you can, FoxxyJava has that option.

[Ill_Nye]

Hello!

Im having problems getting my server to work. I've got my no-ip set up correctly, ports forwarded properly (did port check), and im also using legacylink. I've tried setting up the server tons of different ways and none are working. Ive uploaded them to anibus to test, and I get zero connections. Any idea whats wrong?

edit: also, i am not crypting the servers when i upload to anibus. And I am using nvpn for my port forwarding.

[Understalker]

Hello!

Im having problems getting my server to work. I've got my no-ip set up correctly, ports forwarded properly (did port check), and im also using legacylink. I've tried setting up the server tons of different ways and none are working. Ive uploaded them to anibus to test, and I get zero connections. Any idea whats wrong?

Ask to test it on a friend, if you've everything setup correctly then it should be working properly.

Test it on yourself, via localhost(127.0.0.1) instead.

[Adept]

Instead of testing it on a VM, test it on Anubis please.

Thank you very much a minute or two later i got a popup.
Could i test crypted files there ?

---

I have a new question. If on the crypter you tick the box to inject into process. You then would not have to put a startup option as the server would load every time the injected file loads for example explorer.exe Is that correct?

[popdogcrush]

Hi there,
I'm having a problem understanding the concept of the Java Drive-By and the Silent Java Drive-By. Could you please answer my questions:
1. Am I right that no JDB will stay FUD forever? Thus, one has to purchase something like FoxxyJava to have a constant supply of FUD JDBs?
2. Am I right that the Silent JDB is so rare that it is almost impossible to obtain and those Silent JDB tutorials around here on the forum are actually not silent?
3. If I'm using jRAT, does it have more sense to use JDB? Or, can I somehow take advantage of the java nature of jRAT when infecting people? Or the fact that it is java-based is irrelevant when it comes to infecting people?

Thank you very much in advance. Look forward for your answers.

1. No you're not right.
2. It is rare, however not impossible to obtain. They're patched, well most if not all.
3.You don't need to use a JDB to spread with jRAT.

No problem.

Thanks for a prompt answer but:
1. Could you be more specific please and provide me with a more detailed answer?
2. Then how can I obtain one? Since they are almost all patched...
3. I'm sorry but I'm afraid you didn't answer my question. I know I don't need JDB to spread jRAT, what I was asking is if I can combine the benefit of java nature of jRAT with a JDB.

Thanks.

1. You will need a FUD stub as well.
2. You cannot? 😝
3. Yes you can, FoxxyJava has that option.

You call it helpdesk but it hasn't helped me. Thanks though.

[Understalker]

Thank you very much a minute or two later i got a popup.
Could i test crypted files there ?

---

I have a new question. If on the crypter you tick the box to inject into process. You then would not have to put a startup option as the server would load every time the injected file loads for example explorer.exe Is that correct?

I would highly recommend you still use startup as he may simply stop using that program in the future.

You call it helpdesk but it hasn't helped me. Thanks though.

First person to say that, :(. However, no problem. Have a good day.

[Ill_Nye]

Ask to test it on a friend, if you've everything setup correctly then it should be working properly.

Test it on yourself, via localhost(127.0.0.1) instead.

It works when i test it on myself, but only that. Dosent work on anibus. ive also infected it on 4 computers and i get nothing from them. Im using legacylink to make the servers. However when i did test it on myself, nothing showed up in legacy link. just some fluctuation in the b/per sec on the bottom right and thats it. When I open dark comet, then im able to see myself. but thats it. Nobody else. Any idea what im doing wrong?

[Understalker]

It works when i test it on myself, but only that. Dosent work on anibus. ive also infected it on 4 computers and i get nothing from them. Im using legacylink to make the servers. However when i did test it on myself, nothing showed up in legacy link. just some fluctuation in the b/per sec on the bottom right and thats it. When I open dark comet, then im able to see myself. but thats it. Nobody else. Any idea what im doing wrong?

Your firewall is turned off correct? Your ports are also successfully portforwarded?

[Ill_Nye]

Your firewall is turned off correct? Your ports are also successfully portforwarded?

Firewall is not completely off, however I made inbound rules for the specific ports I am using. As well as allowed the Legacylink app to run. And yes, ports are successfully forwarded via VPN.

[Understalker]

Firewall is not completely off, however I made inbound rules for the specific ports I am using. As well as allowed the Legacylink app to run. And yes, ports are successfully forwarded via VPN.

Turn it completely off first please. Then try to infect others again.

[Ill_Nye]

Turn it completely off first please. Then try to infect others again.

Ok, ill try that. If it works, should the ones I originally infected show up?

Ok, i did this. However Im still getting the same problem as before; im not showing up in legacylink (i infected myself), yet im showing up in dark comet. As well, nobody else I infected is showing up.

[flylow]

Hi!

I've got this problem, i've got a couple of people infected with my servers crypted with DP. But my client does not connect to the servers.

My ports are forwarded and when listening on the client Canyouseeme.org reports that the port is open.
- also checked if port forwarded on a different site using my no-ip adress instead of router ip, still works.

I've got a no-ip set up with the DUC reporting my routers IP for redirection.

Anyone got an idea what could cause this inability to connect?

Using DC 5.3.1

[๖ۣۜJeff ๖ۣۜThe ๖ۣۜKiller]

I can't seem to trust any download on hackforums, I don't know why but it's just me. What I do trust is Legion. So I'd like you to link me to a legit darkcomet rat so I could start my adventure.
Thanks for responding.

Mardig.

[Understalker]

Ok, ill try that. If it works, should the ones I originally infected show up?

Ok, i did this. However Im still getting the same problem as before; im not showing up in legacylink (i infected myself), yet im showing up in dark comet. As well, nobody else I infected is showing up.

Send me your TV details when you're online and I will assist you.

---

Hi!

I've got this problem, i've got a couple of people infected with my servers crypted with DP. But my client does not connect to the servers.

My ports are forwarded and when listening on the client Canyouseeme.org reports that the port is open.
- also checked if port forwarded on a different site using my no-ip adress instead of router ip, still works.

I've got a no-ip set up with the DUC reporting my routers IP for redirection.

Anyone got an idea what could cause this inability to connect?

Using DC 5.3.1

Are you sure that your crypter isn't corrupting your servers?

---

I can't seem to trust any download on hackforums, I don't know why but it's just me. What I do trust is Legion. So I'd like you to link me to a legit darkcomet rat so I could start my adventure.
Thanks for responding.

Mardig.

https://hackforums.net/showthread.php?tid=2632776