Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Echo Official Help Desk | RAT Expert | Free | Spreading Tips

So I need to infect someone.

For test purposes I got a wordpress site up and I need to know how do I infect it so whenever that guy visits the site he gets infected e.g. with a JDB or something else.

Any ideas?
(Dec 1, 2013 03:52 AM)asap rockyyy Wrote:  So I need to infect someone.

For test purposes I got a wordpress site up and I need to know how do I infect it so whenever that guy visits the site he gets infected e.g. with a JDB or something else.

Any ideas?

You can buy a JDB off the marketplace and upload it to your site.
hi dude can u pls tell me which RAT is fud and good pls waiting for your answer thanx in adviance
(Nov 30, 2013 08:45 PM)Understalker Wrote:  Where did you get the DC download from?

Also... did you test your port?

bro i usieing Njrat and all things right my port and no-ip all things right but report didn't come to me
I also have several questions. I read some of your replies and they 're very helpful.

I already spoke to some guys and got different answers no idea whats 100% correct.

Question 1:

When i crypt my server with a fud crypter and the victim's AV shows no detection and he executes the infected file.
The victim do not delete the file (which he already executed) and he let it saved at the desktop.

After 5 days the infected file is not FUD any more and the victim's AV detects it.

a) What happen with the infected file what the victim still got on his desktop?

b) What happen with the executed file (server?) which is in his startup?

Question 2:

When i got a crypter and want to update my server that it stays FUD. Do I have to do it every 5+- days? Do i have to do it manuel with every victim I have? Or is the update automatically (i dont need to be online) ?

Question 3:

When I ask someone to crypt my server and bind it for example with a .png or .mp3 file:

The file contains 2 files:

-Server.exe
-picture.png or music.mp3

= Total 2 processes

In case he binds his server as well to the file without my knowledge. The file should contain than 3 files:

-Server1.exe (my server)
-picture.png or music.mp3
-Server2.exe (his server)

= Total 3 processes

Am I able to check that out easily how many files are bindet to the output?
I think it should be possible to check

a) On the count of processes opened with 1 file via sandboxie / taskmanager?
b) On the file size. For example the Server1.exe (my server) has a size of 500kb. The size of the picture.png i give him the size is 1.000kb so the output file should be 1.500kb

In case of the crypting service bind server2.exe (his server) size=300kb to the file or maybe a keylogger (i dont know the size of keyloggers maybe 50kb?) there should be a output of 1.800kb

Is this correct what I write?

I would appreciate your answers to my questions. Thanks in advance.
(Dec 1, 2013 04:57 AM)Qasimkhatri Wrote:  hi dude can u pls tell me which RAT is fud and good pls waiting for your answer thanx in adviance

Free or paid? If free, there aren't any really.

If paid, there are a few in the marketplace.

(Dec 1, 2013 05:26 AM)kkimo Wrote:  bro i usieing Njrat and all things right my port and no-ip all things right but report didn't come to me

Did you test it on Anubis?

(Dec 1, 2013 07:43 AM)Sprudel Wrote:  I also have several questions. I read some of your replies and they 're very helpful.

I already spoke to some guys and got different answers no idea whats 100% correct.

Question 1:

When i crypt my server with a fud crypter and the victim's AV shows no detection and he executes the infected file.
The victim do not delete the file (which he already executed) and he let it saved at the desktop.

After 5 days the infected file is not FUD any more and the victim's AV detects it.

a) What happen with the infected file what the victim still got on his desktop?

b) What happen with the executed file (server?) which is in his startup?

Question 2:

When i got a crypter and want to update my server that it stays FUD. Do I have to do it every 5+- days? Do i have to do it manuel with every victim I have? Or is the update automatically (i dont need to be online) ?

Question 3:

When I ask someone to crypt my server and bind it for example with a .png or .mp3 file:

The file contains 2 files:

-Server.exe
-picture.png or music.mp3

= Total 2 processes

In case he binds his server as well to the file without my knowledge. The file should contain than 3 files:

-Server1.exe (my server)
-picture.png or music.mp3
-Server2.exe (his server)

= Total 3 processes

Am I able to check that out easily how many files are bindet to the output?
I think it should be possible to check

a) On the count of processes opened with 1 file via sandboxie / taskmanager?
b) On the file size. For example the Server1.exe (my server) has a size of 500kb. The size of the picture.png i give him the size is 1.000kb so the output file should be 1.500kb

In case of the crypting service bind server2.exe (his server) size=300kb to the file or maybe a keylogger (i dont know the size of keyloggers maybe 50kb?) there should be a output of 1.800kb

Is this correct what I write?

I would appreciate your answers to my questions. Thanks in advance.

Question 1)
a) What happen with the infected file what the victim still got on his desktop?
The file gets reported as infected and is removed.

b) What happen with the executed file (server?) which is in his startup?
Same as above.

Question 2)
Code
When i got a crypter and want to update my server that it stays FUD. Do I have to do it every 5+- days?  Do i have to do it manuel with every victim I have? Or is the update automatically (i dont need to be online) ?

I would recommend updating your server every 1-2 days. And you can upload and execute on multiple victims depending on which RAT you're using.

Question 3)

You confused me on the 3rd question. If you're asking if you can check if something is backdoored, that would be a yes.
Oh so if server is detected by AV the victim is gone if i see this right. Thats realy time intense than if you need update the server manual every 2 days. If you forget you lose all victim's.

wow

About my 3rd question i may wrote it too complicated.

Easy said i want to know if i can find out when i ask someone to crypt my server and he binds his server too which i dont want.

And if the answer is yes how can i find that out?

And about if a file is backdoored would be cool if you also can describe how its possible to check.

Thanks for your answers so far.
(Dec 1, 2013 10:39 AM)Sprudel Wrote:  Oh so if server is detected by AV the victim is gone if i see this right. Thats realy time intense than if you need update the server manual every 2 days. If you forget you lose all victim's.

wow

About my 3rd question i may wrote it too complicated.

Easy said i want to know if i can find out when i ask someone to crypt my server and he binds his server too which i dont want.

And if the answer is yes how can i find that out?

And about if a file is backdoored would be cool if you also can describe how its possible to check.

Thanks for your answers so far.

Not all, in fact some of your slaves wont have AV's to begin with. 😝

You'll be just fine, just update it every 2-3 days and you're set.

Tbh, you can't really find out if another thing is binded too it(you can but wont explain here) but you can figure out if it's backdoored more easily.

Throw me a PM and I'll help you the best I can with further questions.
Forgot to thank you for your help Understalker, I really appreciate it my friend!
Need urgent help opening ports, would really appreciate help pm me on here please.
(Dec 1, 2013 01:27 PM)Stoned AF Wrote:  Forgot to thank you for your help Understalker, I really appreciate it my friend!

Not a problem, that's what I'm here for.

(Dec 1, 2013 01:32 PM)Daneee Wrote:  Need urgent help opening ports, would really appreciate help pm me on here please.

Responded to your PM.
Hey,

Can you help me port-forward & get the DNS? I signed up @ no-ip.org but I don't know how to get the DNS address to input into Plasma RAT.

I also don't know how to port-forward because I am living in an apartment where the internet is shared and don't have access to the router or anything. Hope you can help again man.
(Dec 2, 2013 03:30 AM)Stoned AF Wrote:  Hey,

Can you help me port-forward & get the DNS? I signed up @ no-ip.org but I don't know how to get the DNS address to input into Plasma RAT.

I also don't know how to port-forward because I am living in an apartment where the internet is shared and don't have access to the router or anything. Hope you can help again man.

Enter the No-IP as the host when creating your server.

Also, try the default logins..
Admin/admin
Admin/password
User/password

And so forth.
No question here right now, but would just like to say that Understalker does a great a job, and knows what he is talking about in regards to many things. He has helped me out numerous times.

If you have any questions - make sure you ask him.
[Image: support-magenta-2.png]
(Dec 2, 2013 04:36 AM)Snowwy Wrote:  No question here right now, but would just like to say that Understalker does a great a job, and knows what he is talking about in regards to many things. He has helped me out numerous times.

If you have any questions - make sure you ask him.

Thank you for the kind words. 🤝


Possibly Related Threads...
Thread / Author Replies Views Last Post
by FluoxJan 15, 2021 01:28 PM 37 1,157 Jan 15, 2021 01:28 PM
Last Post: Partycrasher
by xVulnerableAug 31, 2020 10:30 AM 177 8,928 Aug 31, 2020 10:30 AM
Last Post: Dotexe
by BenDoverJun 9, 2020 12:16 PM 17 1,218 Jun 9, 2020 12:16 PM
Last Post: VisualSoft