Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[RedLion]A tutorial about everything you need to know of RATs| Basic to Advance| Pics

Introduction:
Hello everyone,
This is Jinu. I'm very glad to share this tutorial with you. I know there are plenty of same kind of tutorials available here. Hence, many folks are struggling to understand it and having lots of questions about RAT (Remote Administration Tools). Here I started this tutorial from Basic to Advance. So everyone can understand how to handle the RAT and If they have any questions or problems, that too will get solved easily.This I share with you is what I have learned and with my experience. This tutorial is brought you by the great group RedLions. Okay, let us move on.


What is a RAT (Remote Administration Tool)?
RAT is an acronym of Remote Administration Tool. It's a program or software.
What a RAT allows you to do is to take full control of another one's computer without their knowledge.
There are many RATs (Remote Administration Tools) available in the market with different features. They are including free RATs and paid RATs. You can see all the RATs currently available in the market here.


How does it work (Working model)?
With the help of Remote Administration Tool, you will create one "Program". That is called "Server.exe". Once you send that to your friends or enemies, If they click that file, their computer details will be seen in your RAT. So you can control their PC, steal their passwords, watch their activities etc... without their knowledge. And It will be show like this:Spoiler (Click to View)

How to make your PC ready before start RATing?
While opening RAT, creating server.exe, opening ports, outgoing-incoming connections, your Anti-Virus or your firewall won't allow this process. It will affect your RATing process. So you need to completely disable your Anti-virus, firewall, and any other blocking software.
Okay, we move on to the next step.



What are the things require before you start RATing?

The Remote Administration Tool alone will not help you to RAT, someone. It requires some other tools too.
Here are the list: Spoiler (Click to View)

Okay. I hope you have collected the things.


How to setup a RAT?
In this tutorial, I have chosen the RAT called DarkComet 5.3. And many of the RAT will have almost same settings like this.
The setup process will consist of:
  1. Creating no-IP account. Or creating FreeDNS account.
  2. Setup DUC client. Or setup FreeDNS client.
  3. Setup your RAT.
  4. Portforwarding.
  5. Crypting
  6. Spreading


1. Creating no-IP account or Creating FreeDNS:
Creating no-ip account (Click to View)
or
Creating FreeDNS account (Click to View)


2. Setting up the DUC client or Setting up the FreeDNS client:

Setting up the DUC client (Click to View)
or
Setting up the FreeDNS client (Click to View)

[Image: 192-BC15-A-BC6-F-43-EA-8-ED4-76-D5-A5847950.gif]
3. Setup your RAT(Remote Administration Tool):
Don't panic. It's a piece of cake. I have chosen the RAT DarkComet. I hope you have downloaded that RAT client. If not, download it from here.

a.) If you do not have Crypter, go with this settings (Default settings):
Spoiler (Click to View)

b.) If you have Crypter, go with this settings:

Spoiler (Click to View)

FAQS:
Spoiler (Click to View)

4. Portforwarding:
Note: If you're having VPN with open ports, you do not need to follow this step. You go ahead to the next step.

Many of them are thinking that portforwarding is the hardest part in RATing but that's not correct. This is a very easy part. There are few methods available: Portforward via router/modem, portforward via torrents and via software.
What we are going to do is, open the port in our network which we recently used in our RAT. That is 1604.

In order to open the ports, first you need to disable your blocking software such as like Anti-Virus. And you have to disable your Firewall.


a.)Method -1 Portforward via router/modem:


Spoiler (Click to View)

b.) Method-2 Portforwarding via torrent:

Spoiler (Click to View)

c.) Method-3 Portorward via software:
Spoiler (Click to View)

FAQS:
Spoiler (Click to View)


5. Crypting:
This is the ultimate stage in your RAT. You have fully set-up and portforward your RAT now you want to crypt it to protect your server.exe from your victim's Anti-virus.
For this you need a program called crypters. There are many crypters available in the market. You can buy or get free one. It will help you to protect your server.exe from your victim's Anti-Virus. You can see about crypters here: Cryptography, Encryption, and Decryption
If you need any other help regarding crypter questions, post here: https://hackforums.net/showthread.php?tid=4219663



5.Spreading:

There are many way to spread your RAT server. Here I have shared some basic methods.

Before you spread your server, make it FUD with the help of your crypter.

a.) The Torrent Method:-
Spoiler (Click to View)

b.)The Omegle Method:-
Spoiler (Click to View)

c.) The YouTube Method:-
Spoiler (Click to View)


To get hot girls as slave and more, post here:
Spoiler (Click to View)

How to don't lose your slaves?

Losing slaves may get irritate. The main causes is due to your server got detected by your slaves Anti-Virus, your server may not executed correctly due to .net requirement, your server may killed by others server(botkilled). To don't lose your slaves, you need to update your server of your slaves. And keep it FUD. To update your server:
I) Create new server.exe in your RAT. (Use Crypter settings)

II) Then crypt your server by using your crypter. Make sure use "Persistence" in your crypter and also Ani-Botkill (If available)
PS: I recommend you to use no dependency crypters.

III) Upload your server in to any host with direct link. Example: ge.tt

IV) Then right click on your slave whom you want to update and Click "Update from URL" or click F7 button.
Spoiler (Click to View)

V) Then enter your URL and click OK.
Spoiler (Click to View)

VI)Or Right click on your slave whom you want to update and click "Update from file" or F8 button. Select your file and click OK.
Spoiler (Click to View)

This way you can update your server and keep your slaves without losing them.


How to hide yourself?

I always recommend you to use VPN and Virtual Machine.
There are many different VPN's out there and the main difference between all of them is the encryption, if it supports port forwarding and if the VPN stores log files it's not good.
It's important to have a VPN which doesn't store any log files at all. Log files are files which are kept if you surf around on the internet using that VPN.
Encryption is basically how strong the connection between you and the VPN is coded.
And the port forwarding part is also important to people who RAT, because some people have routers which don't support port forwarding at all. So go with VPN that supports portforward plus no logs. I recommend you to use nVPN: http://www.nvpn.net

-When you are using a VPN, always make sure you are using (listening) to that port before checking on a website like; http://www.canyouseeme.org
-Always make sure to run your VPN as an administrator.
Using a Virtual Private Server(VPS), is also a good thing to do. You will basically have a virtual computer where you can do whatever on. You can find some good VPS providers in this list: http://www.bestvpsproviders.com/



How to remove RAT infection from your PC?

While RATing, you may get infected or not. You may know or not.That's not a big problem you can remove it by yourself.

a.) Darkcomet RAT remover:
Spoiler (Click to View)

b.) By navigating to the virus:
Spoiler (Click to View)

III) Now check with those PID's in your task manager:
Spoiler (Click to View)

IV) It shows "jinu.exe". If you think it's nasty, You should open the file location by right clicking it and pressing Open File Location. If the file exist, then stop that process. And delete it.


C.) By White HAT:
Spoiler (Click to View)
[Image: 192-BC15-A-BC6-F-43-EA-8-ED4-76-D5-A5847950.gif]
How to play with your slaves?
There are lots of fun stuff available to play with your victims. It will be fun at the same time dangerous too so look before you leap.

Fun Manager:-
Spoiler (Click to View)

Remote Scripting:-
Spoiler (Click to View)


Fun Sites:-
Spoiler (Click to View)


How to earn money with your slaves?

Adfly, Adfocus...
You can earn money with your slaves by viewing your adfly, adocus...etc links. This is simple to do. You need some loads of slaves from various countries to earn a lot. And you can do this by using the option called "Visit webpage"

Mining:
Some new RATs are built with miner support. With that you can earn cryto currencies. It depends on your slaves system configuration.

DDOS:
If you're really have loads of slaves, you can do DDOS services to earn money.

For all, you need loads of slaves. If you cannot able to get slaves, you can buy slaves from the market. You can also try botnets to earn a lot. I'll make seperate tutorial soon.
[Image: 192-BC15-A-BC6-F-43-EA-8-ED4-76-D5-A5847950.gif]
Miscellaneous:

Where can you upload your server.exe to get the direct link?:
These are the non-distribution sites.
  1. http://www.sharesend.com/
  2. http://www.rghost.net/
  3. http://dox.abv.bg/files/share
  4. http://www.filetolink.com/
  5. http://directxex.net/
  6. http://www.filesplat.com/
  7. http://www.ge.tt/


Where can you scan your crypted file?:
These are the non-distribution sites.
  1. http://nodistribute.com/
  2. http://razorscanner.com/
  3. https://anonscanner.com/
  4. http://scan4you.net/
  5. http://scan.majyx.net/


Where can you test your server.exe?:
To check your server.exe whether does it work or not,
1. Navigate to http://anubis.iseclab.org/
2.Choose your server.exe
Spoiler (Click to View)
3. Once you uploaded, you will receive one connection for few minutes.This way you can understand that your RAT is working.


How to bind your server with another file?:
A binder is a tool that does what it says, it binds multiple files together into an application. It is important to note that binding a file might cause your server to become detected, so it's always better to use your crypter's. The output of your file is going to be an executable when you bind things together, which is why spoofing and icon changing come to be useful, it is also why choosing a good crypter is an important step. You can use (Celesty Binder) that comes with DarkComet. Most of the crypters are build with binders.

How to change your server icon?

a.)ResHacker Method:

Spoiler (Click to View)
b.)Icon Changer Tool method:-
Spoiler (Click to View)

How to spoof your server?:
Spoofing is where you alter the extension of the file to display it as something else. Most crypters come with this features.

a.)Manual Method:-
Spoiler (Click to View)

b.)Program Method:
Spoiler (Click to View)

Code Words:
  • RAT - Remote Administration Tool
  • UD - Undetectable
  • FUD - Fully Undetectable
  • TV - Team Viewer
  • PF - Port Forward
  • AV - Anti-Virus
  • VM - Virtual Machine
  • Crypt - Encryption
  • Install, bot, slave, victim - The person whom you RAT-ed.
  • Bot Killed - Your bot/install/slave/victim get deleted in your RAT by someone else.
  • Honey Pot - A honey pot is often a trap set by someone may be the AV company or anyone to lure and trap hacking attempts.
  • FAQ- Frequently Asked Question

Some Useful threads:
[RED LIONS] Free RAT Support [RAT setup | Portforward | JDB's & Crypting] by Jinu
[TUT]How to see/remove infections of the 3 most popular RATs Manually[CG/DC/BS] by Stev
[NetWire RAT] How to use the Reverse Proxy Feature + Randomization Constructor [TuT] by Stev
[CyberGate] [TUT] How To Use A Slave As A HTTP Proxy [TUT] by Jake Ekaj
★ How To Set Up VirtualBox - Beginner ★ by Xch4ng3
[TUT] How to setup a Dynamic DNS for RAT |An Alternative to no-IP DNS| with Pics| by Jinu
-[EDUCATIONAL ONLY]- All the Remote Administration Tools link - Paid and Free! by ȺʁɱªÐą
Credits:
Spoiler (Click to View)

Disclaimer:-
Spoiler (Click to View)

If anybody has any ideas and that to be included in this tutorial, please PM me or post here. Your name will be added in the "Credits" part.

[Image: 192-BC15-A-BC6-F-43-EA-8-ED4-76-D5-A5847950.gif]
I'm very new to this stuff and reading this guide made everything a little easier to understand. Thanks for your time :D
Let me first state that I'm not at all interested in any form of mainstream RATs so this tutorial does not interest me personally.

That being said, having created many tutorials myself, I know how incredibly time consuming this must have been. Everyone reading this should stop and say thank you to OP (even if you're like me and are not interested in RATTING) because his hard work and several hours that he put into this thread are going to immensely help those that need it. When we receive "thank you"s and gratitude from members that can use our tutorials, or even receive notoriety from members who appreciate the work we put into it, it is a huge pat on the back for us and is very welcomed.

Very well done!
SRPP Discord Server

I am a professional network/cloud security architect.
My Old Tutorials
Outstanding tutorial, Just Awesome.
Very detailed and HQ tutorial !!
nice tutorial bro. u always comes with nice tutorials :)
Thanks man for the tutorial! This must of taken you a long time, I appreciate your hard work. 🎉 helping dem noobies.
thanks bro, detailed presentation , can you have tuorial with ur simplified steps for keyloggers too ? thank you again
(May 19, 2014 10:26 PM)Goodies Wrote:  Let me first state that I'm not at all interested in any form of mainstream RATs so this tutorial does not interest me personally.

That being said, having created many tutorials myself, I know how incredibly time consuming this must have been. Everyone reading this should stop and say thank you to OP (even if you're like me and are not interested in RATTING) because his hard work and several hours that he put into this thread are going to immensely help those that need it. When we receive "thank you"s and gratitude from members that can use our tutorials, or even receive notoriety from members who appreciate the work we put into it, it is a huge pat on the back for us and is very welcomed.

Very well done!

Goodies isn't interested in RATTING because he couldn't figure out how to set one up. He asked me to team viewer with him to setup his Darkcomet.

All jokes aside, this is a great tutorial OP, and I can tell you put tons of work into this tutorial. I hope everyone puts it to good use.
Nice tutorial, it's useful for me..i want to start ratting
Nice tutorial, i appreciate that you worked so hard with it!
(May 19, 2014 11:22 AM)hackcitybich Wrote:  I'm very new to this stuff and reading this guide made everything a little easier to understand. Thanks for your time :D

Sure. If you have any other questions, just send me an PM.

(May 19, 2014 10:26 PM)Goodies Wrote:  Let me first state that I'm not at all interested in any form of mainstream RATs so this tutorial does not interest me personally.

That being said, having created many tutorials myself, I know how incredibly time consuming this must have been. Everyone reading this should stop and say thank you to OP (even if you're like me and are not interested in RATTING) because his hard work and several hours that he put into this thread are going to immensely help those that need it. When we receive "thank you"s and gratitude from members that can use our tutorials, or even receive notoriety from members who appreciate the work we put into it, it is a huge pat on the back for us and is very welcomed.

Very well done!
Thank you for the appreciation.

(May 20, 2014 01:01 AM)Ghost Rider™ Wrote:  Outstanding tutorial, Just Awesome.
Very detailed and HQ tutorial !!
Thank you dude.

(May 21, 2014 03:53 AM)๖ۣۜMr Blade™ Wrote:  nice tutorial bro. u always comes with nice tutorials :)

Thank you dude. :)
(May 21, 2014 06:55 AM)Peppermint Butler Wrote:  Thanks man for the tutorial! This must of taken you a long time, I appreciate your hard work. 🎉 helping dem noobies.
Yea, It took some days and night to complete this TUT.

(May 21, 2014 07:19 AM)kalai Wrote:  thanks bro, detailed presentation , can you have tuorial with ur simplified steps for keyloggers too ? thank you again
Sure. Soon I'll provide that too. :)

(May 21, 2014 07:25 AM)Raxer Wrote:  Nice tutorial, it's useful for me..i want to start ratting
Sure. Follow the tutorial. If you have any questions PM me.

(May 21, 2014 07:32 AM)cr0ush Wrote:  Nice tutorial, i appreciate that you worked so hard with it!
Thank you dude.

(May 21, 2014 07:21 AM)Doxicity Wrote:  Goodies isn't interested in RATTING because he couldn't figure out how to set one up. He asked me to team viewer with him to setup his Darkcomet.

All jokes aside, this is a great tutorial OP, and I can tell you put tons of work into this tutorial. I hope everyone puts it to good use.
Maybe he is interesting in the networking part. :)
[Image: 192-BC15-A-BC6-F-43-EA-8-ED4-76-D5-A5847950.gif]
Hi, i am very new to this and i followed all step up to step 3, when i press the dark-comet menu i don't get the server module option can you help me please? https://gyazo.com/a362c3e29e159f032b773d79779e4dce


Possibly Related Threads...
Thread / Author Replies Views Last Post
by waitdontbSep 9, 2025 05:58 PM 10 1,078 Sep 9, 2025 05:58 PM
Last Post: MeW11
by SuggestiveDec 30, 2018 11:57 PM 3 620 Dec 30, 2018 11:57 PM
Last Post: CyberStrike
by Sheriff1337Dec 10, 2018 08:38 PM 6 133 Dec 10, 2018 08:38 PM
Last Post: CyberStrike