ProxiesFood: Unlimited Residential Proxy ◆ Private Crypter - Unique Private Stubs ◆ Spoof Call and Spoof SMS set any caller ◆ Anvilpoint CyberOps - Hacker for Hire ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Beginner Hacking › Question about bootable USB sticks like RUFUS etc.

New Reply 

Question about bootable USB sticks like RUFUS etc.
FULLAUTO
FULLAUTO Offline
[n00b@HF:]
*
HF l33t
Posts:
19
Threads:
6
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 13, 2016 09:53 AM
Hi

is there any possibility to make a bootable USB stick like Rufus and get it to autostart a RAT BEFORE the windows and its security tools are started?

alternative way: is it possible to replace with this bootstick a file like osk.exe in the windows directory so i can start the osk (on screen keyboard) and my rat will be executed ?


greetings from nazi germany🎉🎉🎉🎉🎉🎉
FULLAUTO
FULLAUTO Offline
[n00b@HF:]
*
HF l33t
Posts:
19
Threads:
6
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 15, 2016 04:53 AM
Nobody any ideas how to do it ?
iLogic™
iLogic™ Offline
[bin@HF:]
***
HF l33t
Posts:
1,614
Threads:
97
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 15, 2016 07:23 AM
No there is no option how to run RAT before OS boots. Why ? Because RAT is depends on OS.
SysAdmin
SysAdmin Offline
[email protected]
**********
Legends
Posts:
5,491
Threads:
138
Credibility:
100
Popularity:
559
βytes:
β 0
Game XP:
260
Apr 15, 2016 07:56 AM
(Apr 15, 2016 07:23 AM)iLogic™ Wrote:  No there is no option how to run RAT before OS boots. Why ? Because RAT is depends on OS.

He's correct.

You need an OS to run a RAT. Why would you even need to run a RAT before the OS boots?
I sometimes come around and poke a few threads before leaving for a few months again.
UniQ
UniQ Offline
[user@HF:]
*
Registered
Posts:
348
Threads:
63
Credibility:
100
Popularity:
64
βytes:
β 0
Game XP:
0
Apr 15, 2016 02:50 PM
(Apr 15, 2016 07:56 AM)SysAdmin Wrote:  He's correct.

You need an OS to run a RAT. Why would you even need to run a RAT before the OS boots?

Perhaps because his RAT's stub isn't fud so he simply wants to avoid the AV's. Imagine if you could run any RAT on any computer before the OS boots lol. Chaotic.
FULLAUTO
FULLAUTO Offline
[n00b@HF:]
*
HF l33t
Posts:
19
Threads:
6
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 16, 2016 10:41 AM
(Apr 15, 2016 02:50 PM)UniQ Wrote:  Perhaps because his RAT's stub isn't fud so he simply wants to avoid the AV's. Imagine if you could run any RAT on any computer before the OS boots lol. Chaotic.

I know what you guys are saying, but i want to replace a useless EXE in the sysfiles like OSK.EXE

then i hit run type in OSK.EXE and my replaced exe (rat) will be executed

why do this? because of the security settings
LanMan
LanMan Offline
[bin@HF:]
***
HF l33t
Posts:
693
Threads:
8
Credibility:
000
Popularity:
15
βytes:
β 0
Game XP:
0
Apr 16, 2016 12:46 PM
Yes it is possible to start a RAT before any other programs loads and before AV. But not before windows (not with a basic rat i mean).

And yes you can replace any files in the rufus install. But it will not be protected from any good security good program. And Windows File Protection / Windows Ressource Protection will throw you a bsod at startup if you touch any protected files.
iLogic™
iLogic™ Offline
[bin@HF:]
***
HF l33t
Posts:
1,614
Threads:
97
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 18, 2016 12:53 AM (This post was last modified: Apr 18, 2016 12:55 AM by iLogic™.)
(Apr 16, 2016 10:41 AM)FULLAUTO Wrote:  I know what you guys are saying, but i want to replace a useless EXE in the sysfiles like OSK.EXE

then i hit run type in OSK.EXE and my replaced exe (rat) will be executed

why do this? because of the security settings
You can inject your RAT into that process (RunPE) but you will need to have administrator rights to do it. And also... Why you do not want to use startup function in crypter, change assembly information and put that file into sysfiles ?

(Apr 15, 2016 02:50 PM)UniQ Wrote:  Perhaps because his RAT's stub isn't fud so he simply wants to avoid the AV's. Imagine if you could run any RAT on any computer before the OS boots lol. Chaotic.
🤣 What a shame that it is not possible lol
Cynoptics
Cynoptics Offline
[closed@HF:]
Posts:
34
Threads:
2
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 18, 2016 04:29 AM
(Apr 13, 2016 09:53 AM)FULLAUTO Wrote:  Hi

is there any possibility to make a bootable USB stick like Rufus and get it to autostart a RAT BEFORE the windows and its security tools are started?

alternative way: is it possible to replace with this bootstick a file like osk.exe in the windows directory so i can start the osk (on screen keyboard) and my rat will be executed ?


greetings from nazi germany🎉🎉🎉🎉🎉🎉

Unfortunately thats not possible. Well everything is possible but its not easy. You could if you want it to run before anything and for it to be ignored. If you could replace the explorer.exe with your rat embedded into it. That way your antivirus would run it as soon as windows loads. There could be issues with this tho such as it not functioning on systems depending on operating system model and version. Thats the easiest way i can think of for it to be 100% and irremovable. You could just maybe embed code into your rat presume you were coding it that would disable that antivirus and add an exception, you could do this in many ways including creating a script that would run a hidden vnc and create the exclusion then delete it.
FULLAUTO
FULLAUTO Offline
[n00b@HF:]
*
HF l33t
Posts:
19
Threads:
6
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 18, 2016 09:33 AM
(Apr 18, 2016 04:29 AM)Cynoptics Wrote:  Unfortunately thats not possible. Well everything is possible but its not easy. You could if you want it to run before anything and for it to be ignored. If you could replace the explorer.exe with your rat embedded into it. That way your antivirus would run it as soon as windows loads. There could be issues with this tho such as it not functioning on systems depending on operating system model and version. Thats the easiest way i can think of for it to be 100% and irremovable. You could just maybe embed code into your rat presume you were coding it that would disable that antivirus and add an exception, you could do this in many ways including creating a script that would run a hidden vnc and create the exclusion then delete it.

thanks a lot for all of your help ppl..

I think its better to do that RAT FUD with some crypter and then execute it via RubberDucky USB
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by StanleyJan 21, 2026 12:35 PM 2 66 Jan 21, 2026 12:35 PM
Last Post: JoseMar
by Androidjp6modAug 13, 2023 08:29 PM 2 153 Aug 13, 2023 08:29 PM
Last Post: Daeshadb
by Dule74Sep 21, 2020 03:54 PM 0 63 Sep 21, 2020 03:54 PM
Last Post: Dule74