[Understalker]

Welcome to my first EVER RAT tutorial - it should cover everything that is needed of you to know.

First off - lets start off with some basic knowledge. A RAT(Remote Administrator Tool) is simply a tool that helps you connect to your victim. To a certain extent, RAT's can be 'legal' however we all know that it is used otherwise. RAT's can be used to gain access to ones computer, while having full access to their webcam/desktop/files and what not.

What this thread will cover:
Setting up your DNS
Choosing a RAT Client
Portforwarding
Crypting
Spreading tips
Frequently Asked Questions

---

---

FREE:

[img]http://img593.imageshack.us/img593/4986/22515540.jpg[/img]

Download links to the following RAT posted above can be found here:
Darkcomet Download Links

---

---

Now let's get started on setting up our RAT - once you've downloaded Darkcomet 5.3.1F drag it over to your desktop so it will be easier to open it up at a later point.

1) Setting up No-IP

What we're going to want to do at this point is head over to No-IP to set up our DNS. No-IP simply gives us a place to host our slaves on, if you ever lose access to your No-IP account, you will lose access to your slaves. So be sure to know all your information.

Once you're on the site, simply head over to "Sign Up" or just visit this URL:

http://noip.com/sign-up

Enter all the required information, for username enter whatever you'd like.

For your Hostname - be sure to enter something that cannot be traced back to you if you want to stay Anonymous.

For example, using a name like Understalker.no-ip.biz as my hostname would be a very stupid move by me as it can be traced back to me with ease.

Instead use something like, ma89we9821.no-ip.biz

Once you've finished entering all your information, click "Free Sign Up"

Confirm the email they will send you.

Once you've confirmed the email and logged on, you should see something like this:

Head over to Manage Hosts and you should see the No-IP host you've registered:

Once that is done, simply head over to http://www.noip.com/download and download the DUC client.

Once you've successfully downloaded the client, sign on with all required information and keep it open.

---

---

2) Portforwarding

Portforwarding is quite simple. All in all, it can be done within 5 minutes.

For this step, what we're going to want to do is simply going to take us 5 steps.

First off, head over locate and open cmd.exe.

Once you've opened it successfully - enter the following command:

Code

ipconfig

You should see something like this,

There are two very important things here, the Default Gateway and the IPv4 Address.

The next step is going to be opening up a web browser, and inputting your Default Gateway as your URL.

You should then, click 'login' or a login screen should automatically pop up. If you do not know your information, simply try out the default ones such as:

Code

admin:admin
admin:pass
user:pass
user:user

Once you've successfully logged in, what you're going to want to do is locate the portforwarding tab.

This is where your IPv4 address comes to play, your settings should look something like this with a few different changes:

Once you believe you've successfully portforwarded, you can move on to the next step.

---

---

[Understalker]

3) Setting up your Client

Assuming you've already downloaded Darkcomet from the links provided above, I will suggest you go ahead and open it.

You should see something like this:

Spoiler (Click to View)

The first thing you're going to want to do is head over to the Socket / Net tab.

Once you're in there, simply right click somewhere inside of it and click "[+] Add port to listen" and input the port you've put on the Default Gateway, in my case it will be 1604.



To confirm that your ports are indeed open I would recommend using the following site to check:

http://canyouseeme.org

If your ports are still not open, here are some ideas as to why they're closed:
Spoiler (Click to View)
Your Firewall is on.
AV is preventing the ports to be open.
You didn't PF correctly

If you do indeed see that your ports are open, you should see something like this:

Code

Success: I can see your service on **.**.**.** on port (1604)
Your ISP is not blocking port 1604.

Moving on to the next step would be setting up your RAT stub.

What we're going to want to do is click the "Darkcomet-RAT" tab and then head over to the "Server module" > Full editor (Expert)

If you do not have a crypter, use these settings

Spoiler (Click to View)

Once you've set these settings up, click on "Build The Stub" - save it on Desktop and have a decent name for it.

---

---

4) Testing your RAT

To test your server, I will recommend downloading the following:

http://www.sandboxie.com/index.php?DownloadSandboxie

After you've installed Sandboxie, from this point forward everything is quite simple.

Go to Darkcomet-RAT --> Server module --> Minimalist (Quick).

Click on "Normal" and save your stub to your desktop.

After you've created your stub, what you're going to want to do is Right click it --> Run Sandboxed --> DefaultBox

After you've successfully ran it via Sandboxie, you should see yourself pop up.

---

However, testing it on yourself is not the only way to testing it.

Another way would be testing it on Anubis.

The link to Anubis is as follows:

http://anubis.iseclab.org

You would need to create a completely new stub for this, and I would recommend the settings listed below:

Simply click on Normal, and name your stub something like anubislol.exe

Shortly after you should see something like this:

If you did indeed receive a temporary slave, then you should now know that your stub is working flawlessly.

---

---

5) Crypting

As you all know, any public RAT that you use WILL be detected.

My last scan on Darkcomet was 46/49.

What I would personally recommend is purchasing a crypter, however there is multiple other ways to crypt your stub, but I will not be explaining that here.

Crypters can be found all over the Marketplace and I am recommending you purchase either one(1) crypted server, or a whole crypter itself to do unlimited crypts.

A crypter by itself can cost anywhere from $10-25 a month.

However, a single crypt can cost you $1-5.

If you're using a crypter, use MINIMALIST settings. Any settings you want on your stub, will have to be added via your Crypter.

---

---

---

[Understalker]

6) Spreading Tips

I will be providing you guys a few spreading tips I personally recommend.

If you do put your effort in to it there is no doubt you can easily obtain 100s of slaves per day.

The YouTube method:

My number one spreading advice is to get a niche you know lots of people are interested in and uploading a fake YouTube video.

After you've done so, simply start botting some views and getting some like/comments on your video to make it seem legit.

Rinse and repeat the method and once your video starts getting some fame, you will be earning an easy 5-10 slaves an hour.

---

---

uTorrent spreading:

This is similar to the YouTube spreading for the getting a decent niche part and uploading it.

Make sure it is over 64 MB so it looks legit and the victim cannot scan your stub on VirusTotal.

Spoiler (Click to View)

---

---

Pedophile Spreading:

Simply set up a ewhore persona and start spreading on chat sites.

---

---

7) F.A.Q

Can I use a RAT without portforwarding?
Unless you're using a VPN that supports portforwarding or a PHP ART, then no.

Are there any good free crypters?
No.

Is mining on your bots profitable?
Unless they're altcoins, no.

To find out what altcoins are most profitable to mine, check out: http://www.coinwarz.com/cryptocurrency

Have any questions you'd like me to add here? Let me know.

[Michael Townley]

Very clean setup, and very detailed. Nice post OP. +1

[Coo]

Jesus Christ, you haven't half put some effort in here son.

[Understalker]

If anyone runs into an error when following this guide, lmk.

[haydrazs]

Very professional tut, lots of good info in there :)

[Understalker]

This tutorial should help everyone who wants to get started on RATting.

If you run into any troubles, find a typo, or anything that relates to my thread - don't hesitate to PM me.

[Harley Quinn]

Thanks for the tutorial!🤝
So if i have a vpn with portforwarding i do not have to portforward my router?
Also, litecoin mining with lets say 500 bots isnt profitable?

[Understalker]

Thanks for the tutorial!🤝
So if i have a vpn with portforwarding i do not have to portforward my router?
Also, litecoin mining with lets say 500 bots isnt profitable?

No, you do not need to portforward through your router if you have a VPN that supports portforwarding.
It's decent, not very profitable.

Instead, just mine altcoins.

[iKick]

I couldn't have explained any of this better myself.
Great tutorial!
Mad props to you OP! 🤝

[Harley Quinn]

Anothr question. Using a portforwarding vpn, i am not bound to a router right? And if i switch inbetween vpn locations, i will have to have DUC right?
Also what altcoins would work best?

[Understalker]

Anothr question. Using a portforwarding vpn, i am not bound to a router right? And if i switch inbetween vpn locations, i will have to have DUC right?
Also what altcoins would work best?

No, you're not bound to using a router.

Yes, DUC will be there incase your VPN IP changes.

Go to http://www.coinwarz.com/cryptocurrency to find out what is the most profitable altcoin to mine.

[Harley Quinn]

Thanks for your tutorial+help. Great member

[slxnn]

Thanks man working well for me, very kind