Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

DNS warning (not the usual warning)

So I have seen a few people offering to create DNS or made new DNS services
Just a heads up that this will give them ability to steal your clients if they are so inclined
best way to make it so they cant would be to make your clients have a password for encrypted connection
I know babylon has this feature but I am not sure what other RAT's do.


So just take care in what DNS you use.
I personally would reccomend
ȺʁɱªÐą
as a trustworthy DNS source
Ive seen him around alot and he looks the most legit in this regard IMO
and his dns service https://hackforums.net/showthread.php?tid=4995393

but in the most part its a good idea to buy a cheap domain name and use that to forward your DNS


Just a heads up as I was recently asked if this were possible to do, so I figure more of you wont know about this

[Image: 2f4032b5f1170bc8fedd7e367c680327.png]
(Sep 23, 2015 10:12 PM)Alison Wonderland Wrote:  So I have seen a few people offering to create DNS or made new DNS services
Just a heads up that this will give them ability to steal your clients if they are so inclined
best way to make it so they cant would be to make your clients have a password for encrypted connection
I know babylon has this feature but I am not sure what other RAT's do.

Absolutely true.
- But I would like to point out how much of a pain in the ass that entire concept would be.

Firstly I would need to jack someones DNS I have given out to (Ok, easy being I control this aspect)
Then point it to an IP I connect with.
Open ALL the ports, so I can see which ones are getting hits on.
And then. (Drum roll please) I gotta figure out what everything is (Which port is running which software\protocol), likely by packet sniffing.

Oh, and all this has to be done before the real DNS owner decides to ping their own DNS assignment and figure out the IP# has been changed. 🤫

(Sep 23, 2015 10:12 PM)Alison Wonderland Wrote:  I personally would reccomend
ȺʁɱªÐą
as a trustworthy DNS source
Ive seen him around alot and he looks the most legit in this regard IMO
and his dns service https://hackforums.net/showthread.php?tid=4995393

I appreciate the recommendation, on this note, For all the reasons I listed above. For me to do ANY such thing, well yea. Just reading the steps I listed out, seems like too much a pain in the ass for me to bother even considering.
- I can be a VERY lazy person at times... keep your bots, I can get my own lol.

(Sep 23, 2015 10:12 PM)Alison Wonderland Wrote:  but in the most part its a good idea to buy a cheap domain name and use that to forward your DNS

This is a decent solution for some users, but one of the largest problems with domain registration for these uses is simple. The registrars don't like tolerating this stuff much either. Big surprise, right?
Larger or more serious users will encounter problems with this, by registrar domain seizure. - Then everyone looses their bots, and government or "others" control them. 😑

This however is a risk ran REGARDLESS. We have all seen domains that have come and been seized by authorities.
Good advice overall.
Especially with users who are offering DNS services. 🤝

I personally think it would be a total pain in the ass to do something like you suggested, HOWEVER. This has happened before, it can, and will again... Users are always advised to either do it themselves (or learn to, always the best way) or use someone they trust.
can you selle me 5 DNS subdomain? It is engought for me
(Sep 23, 2015 10:44 PM)vanphi89 Wrote:  can you selle me 5 DNS subdomain? It is engought for me

Check this out little guy: https://hackforums.net/showthread.php?tid=4996047
Easy :)
[Image: PVoDiqS.png]
well to put it simply
have a all port opened connection
computer/OS/Program that listens on every port and captures every packet recieved on said ports
if the packets arent encrypted using a special key then they are generic and can be deciphered to which rat they are with relatively easy

Its a fair bit of work but its not impossible or improbable

[Image: 2f4032b5f1170bc8fedd7e367c680327.png]
(Sep 23, 2015 10:59 PM)Cecilia Wrote:  Check this out little guy: https://hackforums.net/showthread.php?tid=4996047
Easy :)

what is your skype
can you help me via team viewer.
I use Oronze RAT but i will lose slave if IP changed :(
(Sep 24, 2015 02:06 AM)vanphi89 Wrote:  what is your skype
can you help me via team viewer.
I use Oronze RAT but i will lose slave if IP changed :(

The entire point is for the RAT to use the DNS hostname and you change the IP that hostname resolves to when your ip changes.
[Image: PVoDiqS.png]
(Sep 24, 2015 02:37 AM)Cecilia Wrote:  The entire point is for the RAT to use the DNS hostname and you change the IP that hostname resolves to when your ip changes.

you might offer less autistic dns services
but that doesnt mean the users are less autistic

[Image: 2f4032b5f1170bc8fedd7e367c680327.png]
(Sep 24, 2015 02:39 AM)Alison Wonderland Wrote:  you might offer less autistic dns services
but that doesnt mean the users are less autistic

I cannot agree more with you, HF skids are still skids :)
🤝
[Image: PVoDiqS.png]
(Sep 23, 2015 10:12 PM)Alison Wonderland Wrote:  So I have seen a few people offering to create DNS or made new DNS services
Just a heads up that this will give them ability to steal your clients if they are so inclined
best way to make it so they cant would be to make your clients have a password for encrypted connection
I know babylon has this feature but I am not sure what other RAT's do.


So just take care in what DNS you use.
I personally would reccomend
ȺʁɱªÐą
as a trustworthy DNS source
Ive seen him around alot and he looks the most legit in this regard IMO
and his dns service https://hackforums.net/showthread.php?tid=4995393

but in the most part its a good idea to buy a cheap domain name and use that to forward your DNS


Just a heads up as I was recently asked if this were possible to do, so I figure more of you wont know about this

lmaooo thats what im saying like why have someone else be your host when you can make your own
Can vouch for ȺʁɱªÐą - we see each other around a fair amount.

Also it's much easier to RAT one computer and use it as a host for other clients using a dns anyways :P
(Sep 24, 2015 11:10 AM)Mr. Robot Wrote:  Can vouch for ȺʁɱªÐą - we see each other around a fair amount.

Also it's much easier to RAT one computer and use it as a host for other clients using a dns anyways :P

True bot why pay someone for hosting when you can buy your own without the middle man
(Sep 24, 2015 11:18 AM)y B Z Wrote:  True bot why pay someone for hosting when you can buy your own without the middle man

Your posts make my eyes bleed.....😑

(Sep 23, 2015 10:42 PM)Armada Wrote:  This is a decent solution for some users, but one of the largest problems with domain registration for these uses is simple. The registrars don't like tolerating this stuff much either. Big surprise, right?
Larger or more serious users will encounter problems with this, by registrar domain seizure. - Then everyone looses their bots, and government or "others" control them. 😑
(Sep 24, 2015 11:23 AM)Armada Wrote:  Your posts make my eyes bleed.....😑

Long story short. Your reselling hosting why would someone buy from you ? Its like me selling a ovh for 25% more when they can buy straight from ovh for cheaper ...
(Sep 23, 2015 10:42 PM)Armada Wrote:  Absolutely true.
- But I would like to point out how much of a pain in the ass that entire concept would be.

Firstly I would need to jack someones DNS I have given out to (Ok, easy being I control this aspect)
Then point it to an IP I connect with.
Open ALL the ports, so I can see which ones are getting hits on.
And then. (Drum roll please) I gotta figure out what everything is (Which port is running which software\protocol), likely by packet sniffing.

Oh, and all this has to be done before the real DNS owner decides to ping their own DNS assignment and figure out the IP# has been changed. 🤫


I appreciate the recommendation, on this note, For all the reasons I listed above. For me to do ANY such thing, well yea. Just reading the steps I listed out, seems like too much a pain in the ass for me to bother even considering.
- I can be a VERY lazy person at times... keep your bots, I can get my own lol.


This is a decent solution for some users, but one of the largest problems with domain registration for these uses is simple. The registrars don't like tolerating this stuff much either. Big surprise, right?
Larger or more serious users will encounter problems with this, by registrar domain seizure. - Then everyone looses their bots, and government or "others" control them. 😑

This however is a risk ran REGARDLESS. We have all seen domains that have come and been seized by authorities.
Good advice overall.
Especially with users who are offering DNS services. 🤝

I personally think it would be a total pain in the ass to do something like you suggested, HOWEVER. This has happened before, it can, and will again... Users are always advised to either do it themselves (or learn to, always the best way) or use someone they trust.

I believe LL can't be jacked, because they only connect to managers that have the license they sign up for :)
[Image: ChZqDxU.gif]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by JinuApr 17, 2024 08:13 PM 248 29,962 Apr 17, 2024 08:13 PM
Last Post: D3ath_GuN
by M100Aug 8, 2020 06:15 AM 38 1,527 Aug 8, 2020 06:15 AM
Last Post: M100
by cashfJan 26, 2017 06:17 AM 36 2,645 Jan 26, 2017 06:17 AM
Last Post: Mohinder