[ciccio]

Hi,
I search a RAT with this function:
add your self in autorun;
add an exception for your self at the firewall of windows.

Not necessary UAC bypass or injection.
Now I bypass my request with Install Shield or similar software...but to long and complicate.

Thanks for your help.

Best regards.

[Jacque Fresco]

1. add your self in autorun;
2. add an exception for your self at the firewall of windows.

1. What do you mean with add to autorun? Do you mean that the RAT should be able to start on Windows start? if yes then almost every RAT does that.
2. choose any rat you like that does the other requirement and then write a little batch script that does create the exeption: https://lizardsystems.com/articles/confi...mand-line/

[__Digital__]

I would just use powershell to interact with windows filrewall and windows defender, you will need andmin or system rights to add exceptions etc

[3DES]

Adding exception to firewall is retarded and EXTREMELY detected method to bypass firewall.

[Jacque Fresco]

Adding exception to firewall is retarded and EXTREMELY detected method to bypass firewall.

if you say so. I believe that ONLY your method is detected. It is always possible, you just need to dig around ^^
it is for example possible to trick AV's with GUI's and titles likes "install XXX program" with checkboxes like "Implement Rule into the Firewall?" and when ever the user clicks somewhere on the desktop the gui disappears and the implemention takes place. Of course the GUi will never being visible to the user. This is enough to trick a couple of AV's. therefore yoour "EXTREMELY" is nonsense.

Note: There is always a way in. This is same why it is not possible to make a computer 100% safe.

You can look at my last thread and you will see that i managed it to even uninstall 3 different AV's without any notification to the USER.