Spoof Call and Spoof SMS set any caller ◆ Anvilpoint CyberOps - Hacker for Hire ◆ ProxiesFood: Unlimited Residential Proxy ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Remote Administration Tools › How to hide RAT from task manager?

New Reply 

How to hide RAT from task manager?
Cyamic
Cyamic Offline
[n00b@HF:]
*
Registered
Posts:
6
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Mar 21, 2019 06:19 PM
Hello. I am fairly new to ratting and I only know the basics to it like crypting and port forwarding to setup the rat. I am wondering if there is any way to hide the rat I have created from the victims task manager. I am trying to not let my rat show up so its not obvious. Is there anything I can do to hide this? Anything would help me, thanks :).
I.M.P
I.M.P Offline
[closed@HF:]
Posts:
1,647
Threads:
30
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Mar 21, 2019 06:24 PM
I assume that

A. You have the source code (or can edit the stubs code in some way) to this rat

B. Your okay with loosing the client every time they open task manager

C. Have some FUD watchdog program to keep the task alive after they close task manager

Assuming all these conditions are met it should be fairly simple
SoonTM
SoonTM Offline
[closed@HF:]
Posts:
110
Threads:
3
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Mar 21, 2019 08:22 PM
A rootkit would do the trick.
Silent hill
Silent hill Offline
[closed@HF:]
Posts:
1,082
Threads:
22
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
8,357
Mar 23, 2019 02:56 AM
(Mar 21, 2019 06:24 PM)I.M.P Wrote:  I assume that

A. You have the source code (or can edit the stubs code in some way) to this rat

B. Your okay with loosing the client every time they open task manager

C. Have some FUD watchdog program to keep the task alive after they close task manager

Assuming all these conditions are met it should be fairly simple

100% d) also you can inject it into any legit process.
NYANxCAT
NYANxCAT Away
[closed@HF:]
Posts:
2,131
Threads:
90
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
11
Mar 23, 2019 04:25 AM
the simplest solution is to make your RAT kill itself every time task manager is open.
then start your RAT again using windows task schedule.
It's very simple and basic.
iCoreX
iCoreX Offline
[n00b@HF:]
*
Registered
Posts:
84
Threads:
12
Credibility:
000
Popularity:
15
βytes:
β 0
Game XP:
0
Mar 23, 2019 06:58 AM
(Mar 23, 2019 04:25 AM)NYANxCAT Wrote:  the simplest solution is to make your RAT kill itself every time task manager is open.
then start your RAT again using windows task schedule.
It's very simple and basic.

What do you mean with "using windows task schedule"? How can it detect that taskmanager is closed?
Onireves
Onireves Away
[closed@HF:]
Posts:
1,245
Threads:
75
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
41
Mar 23, 2019 07:12 AM
You can always give it a legit name and icon, and no one will suspect :)
iCoreX
iCoreX Offline
[n00b@HF:]
*
Registered
Posts:
84
Threads:
12
Credibility:
000
Popularity:
15
βytes:
β 0
Game XP:
0
Mar 23, 2019 07:18 AM
(Mar 23, 2019 07:12 AM)Onireves Wrote:  You can always give it a legit name and icon, and no one will suspect :)

True, I always name my stub "svchost" and everytime they look in taskmanager they never find it lol
Goku
Goku Offline
Give me your energy
****
HF Ub3r
Posts:
8,156
Threads:
118
Credibility:
5800
Popularity:
2,113
βytes:
β 184.04
Game XP:
123,376
Mar 23, 2019 07:21 AM
you guys make me paranoid...
[Image: AEMUV3u.gif]
int
int Offline
[closed@HF:]
Posts:
6,299
Threads:
113
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
2,654
Mar 23, 2019 07:26 AM
the real chads name their stub some fishy shit and then make it unkillable in tskmgr
WhatTheLeak
WhatTheLeak Offline
[user@HF:]
*
Registered
Posts:
309
Threads:
15
Credibility:
000
Popularity:
25
βytes:
β 0
Game XP:
26
Mar 23, 2019 03:01 PM
(Mar 23, 2019 04:25 AM)NYANxCAT Wrote:  the simplest solution is to make your RAT kill itself every time task manager is open.
then start your RAT again using windows task schedule.
It's very simple and basic.

Does any RAT has this feature? Or is it more like a crypter feature?
Zexture
Zexture Away
[closed@HF:]
Posts:
561
Threads:
38
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
5,746
Mar 23, 2019 03:02 PM
The rat should be programmed as a driver
Exodus
Exodus Away
Master Procrastinator
***
HF l33t
Posts:
2,854
Threads:
0
Credibility:
200
Popularity:
202
βytes:
β 1,688.5
Game XP:
0
Mar 23, 2019 03:05 PM
(Mar 23, 2019 03:02 PM)Zexture Wrote:  The rat should be programmed as a driver

Drivers can't be installed without being digitally signed.
I'm not using HF much, expect long reply times.
My old XMPP ([email protected]) is dead, use [email protected] instead.
Zexture
Zexture Away
[closed@HF:]
Posts:
561
Threads:
38
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
5,746
Mar 23, 2019 03:16 PM
(Mar 23, 2019 03:05 PM)Exodus Wrote:  Drivers can't be installed without being digitally signed.

Ahh Thanks never knew that. But I believe you can disable it
NYANxCAT
NYANxCAT Away
[closed@HF:]
Posts:
2,131
Threads:
90
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
11
Mar 23, 2019 03:20 PM
(Mar 23, 2019 03:01 PM)WhatTheLeak Wrote:  Does any RAT has this feature? Or is it more like a crypter feature?

It's just an idea, you can code it as a rat feature or crypter feature. It's simple yet efficient
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by SBxzjzAug 27, 2026 02:09 AM 6 183 Aug 27, 2026 02:09 AM
Last Post: x64assembler
by naxsterApr 6, 2019 11:31 PM 4 175 Apr 6, 2019 11:31 PM
Last Post: SoonTM
by germi89Nov 19, 2018 01:59 PM 11 755 Nov 19, 2018 01:59 PM
Last Post: crazy_command3r