[Obimoto]

IF THIS TUTORIAL HELPED YOU, SHARE THE LOVE AND LEAVE A COMMENT!
;D

So here's a basic RAT tutorial (I will be using njRAT and Windows)...

Firstly, Download a good RAT...
-njRAT

PORT FORWARDING

So you gotta port forward for most RATs...

To do this, the common way would be to type the default gateway IP into the url of your browser...
Spoiler (Click to View)
Spoiler (Click to View)

You'll have to know your router's login information...
Spoiler (Click to View)

After you need to look around for the port forwarding settings...
Every ISP is different...

Select the port you want to forward (I suggest something over 1000)
Select both TCP and UDP (You may have to do this twice if there is no both option, although just TCP should be fine)

Test at http://www.canyouseeme.org/
(you must be listening to the port you are testing! You can do this by clicking START when you start up njrat)

If you cannot port forward, it may be your ISP. I know AT&T does this, but you can call and get them to set it up for you...

Alternatively, you can use a VPN, although you should ALWAYS use paid VPNs, and study their security and privacy policies well...
Make sure they allow port forwarding, although most paid VPNs do...

SETTING UP YOUR RAT

1. Download your rat to the Desktop
2. Click on the exe Spoiler (Click to View)
3. Pick the port you are forwarding (I'm using 5687) Spoiler (Click to View)
4. Click the Builder Spoiler (Click to View)
5. For now, we will use our IPv4 Spoiler (Click to View)
6. Use whatever you want, but we will be testing this on our machine, so don't check BSOD, Copy To StartUp, or Registry StartUp
7. Click build, and save the file to the Desktop Spoiler (Click to View)
Spoiler (Click to View)
(I have mine with a python image) Keep in mind that in order to use an extension other than .exe (like my .py), you must rename it after making the .exe...
8. Double-click on the .exe and this should come up...
Spoiler (Click to View)

NOW WITH DNS

1. Get a good DNS hosting service. I'm sorry, I have no suggestions at the moment except DON't USE no-ip...
2. Connect to your created DNS
3. Follow steps 2-4 of the setup
4. When going to the builder, change the IPv4 to your DNS address
5. Create the exe and you're done!

To test, you will need a VM or dummy computer to infect, instead of your own...



Almost forgot...
You'll want to look into a FUD crypter as well...
You can start by looking in the Cryptography, Encryption, and Decryption section...

IF YOU HAVE ANY SUGGESTIONS OR FIND ANYTHING WRONG WITH MY INFORMATION, FEEL FREE TO COMMENT...

HAPPY HACKING XD

[tux1]

Nice tutorial, I can see you put a lot of work in to this.

[Furious Yellow]

Nice tut.. Thanks for writing this :-)

[Internet Explorer.]

Nice tutorial, writing to see tomorrow.

[ledpen6]

One of the easiest tutorial to understand for a noob like myself, thanks mate! :D

[KuKomPU]

How do I enslave other systems tho? I'm just abit confused on that aspect? Do I need them to download that thing that that we built?

[Obimoto]

How do I enslave other systems tho? I'm just abit confused on that aspect? Do I need them to download that thing that that we built?

Yes. If you look at step 7, the picture with the python image was my malicious.exe file. To work, the victim must open this file...

You can give them this file in a number of ways...
Try to look for spreading guides, If I see one that's good I will inform you...

---

"Nice tutorial, I can see you put a lot of work in to this."

"Nice tut.. Thanks for writing this :-)"

"Nice tutorial, writing to see tomorrow."

"One of the easiest tutorial to understand for a noob like myself, thanks mate! :D"

Thank you all for the support! I'm glad it is helping XD

[jazzahacks]

dose that link have a rat or malware attched ?

[Obimoto]

dose that link have a rat or malware attched ?

From my research, I could not find anything malicious, or anyone claiming it was malicious, and it comes from a trusted HF member...

He has not been accused of giving out infected programs...

There is always a chance of course, but I wouldn't put the link up if I felt if was malicious...

All hacking programs will come up as malware for AVs btw...

[KuKomPU]

Yes. If you look at step 7, the picture with the python image was my malicious.exe file. To work, the victim must open this file...

You can give them this file in a number of ways...
Try to look for spreading guides, If I see one that's good I will inform you...

---

Thank you all for the support! I'm glad it is helping XD

Ah okay, Thanks alot. Also, last question (maybe), could i just put the malicious.exe on a flash drive, bring it to another computer, and open it there?

Oh and the IP i need to put in is my IP or..? (for the host thing)

[Obimoto]

Ah okay, Thanks alot. Also, last question (maybe), could i just put the malicious.exe on a flash drive, bring it to another computer, and open it there?

Oh and the IP i need to put in is my IP or..? (for the host thing)

Yes, you can just copy the file from the usb to the computer, execute it, then delete the file...

And your IPv4 only works on your network, so to infect someone who lives somewhere else you have to put in your DNS address...
Example:
Spoiler (Click to View)
This is a setup for no-ip. DO NOT USE no-ip, I just don't have another DNS host at the moment. I don't rat really...
The setup should be under "Add a host" or something similar...

[Credit Card.]

Ok, so I am into my router/modem settings on my computer. How do you find what port number you have to setup port fowarding?

[Obimoto]

Ok, so I am into my router/modem settings on my computer. How do you find what port number you have to setup port fowarding?

Ah, you can pick any port you want in existence...

Although it's recommended to use one over 1000 or so...

You're gonna find the setup for it somewhere under "Forward a Port" or something like it...

[Credit Card.]

Ah, you can pick any port you want in existence...

Although it's recommended to use one over 1000 or so...

You're gonna find the setup for it somewhere under "Forward a Port" or something like it...

So can I just type in any number over 1000?
I found where I can put a number in for "Starting Port" and "ending port"

[Obimoto]

So can I just type in any number over 1000?
I found where I can put a number in for "Starting Port" and "ending port"

Pretty much, just not too far lol...

I think ports go up to like 65,000

Put the starting port and ending port as the same port...

I use 5687...

For internal IP put your IPv4...