[Curiosity2602]

So, could I send a RAT per minecraft mod since the extension .Jar is? I mean more like, could i put the mod into a folder and let people download it with dropbox? Or do i have to send them the mod as a single download for the RAT to work

[Curiosity2602]

Dropbox scans and distributes everything.
I wouldnt use that as a direct host, but you can, yes.
Best if you have a Java RAT imo.

Sounds great, thanks!

---

Dropbox scans and distributes everything.
I wouldnt use that as a direct host, but you can, yes.
Best if you have a Java RAT imo.

But one question tho if you dont mind answering. If i am able to send someone an RAT, would it be possible to gain access to the WebCam and login details? Since i know that the person that i am aiming for an laptop uses.

[Z4ACK]

Sounds great, thanks!

---

But one question tho if you dont mind answering. If i am able to send someone an RAT, would it be possible to gain access to the WebCam and login details? Since i know that the person that i am aiming for an laptop uses.

I mean it depends. usually RATS have keyloggers which would do that. Id recommend not ratting but just sending a token logger for discord.

[Curiosity2602]

Yes.
If you have physical access you could, hypothetically, use a USB spread feature.

I dont have physical access to that laptop sadly.

[KingVOID7777]

So, hypothetically, one would need a RAT, good runtime crypter and delivery method. Whether the RAT stub is bound to another, working .exe and social engineered into installing it ("hey, I have this assorted video game cheat." Please be more creative) or bound to an exploit delivery method like a .doc or a .xls file (there are two different types. Macros and Silent. Macros are cheaper, at about $50-100 for a FUD one which act as a downloader or Silent at about $900-2000 depending on the CVE, and are often a rip off to the point where I've only found one legitimate seller in the last 3 months).
Objectively, you can find other methods of delivery if you are creative enough.


Edit: if you need to bind it to a .jar file, you would need a Java binder for a Java RAT.

Wait doesn't the creator of Warzone RAT also sell a silent exploit? And what's the difference between Macro/Silent?

But anyway, back to the .jar RAT:
I've seen this personally before in exploiting communities (Roblox 😭😂) where someone would literally just use a RAT and rename it to (cheat's name.exe) ((Usually Synapse X.exe)
For now you can probably trick the more naive ones into running a .jar that's purely the RAT, otherwise yeah you can bind it with one of the options Snyke said.

[Kabir]

Macro requires the user to click "Enable Editing", and if the .doc has a zoneidentifier that designates it was downloaded from the internet, it will open the document in protected view which actively warns the user that it may contain a virus if it has an active macro table. Regardless if it does or not.

yes regardless n most of them enables it  as you see there are many macro excel / word documents in circulation
assuming 20% executions may be more not bad

[Curiosity2602]

So, hypothetically, one would need a RAT, good runtime crypter and delivery method. Whether the RAT stub is bound to another, working .exe and social engineered into installing it ("hey, I have this assorted video game cheat." Please be more creative) or bound to an exploit delivery method like a .doc or a .xls file (there are two different types. Macros and Silent. Macros are cheaper, at about $50-100 for a FUD one which act as a downloader or Silent at about $900-2000 depending on the CVE, and are often a rip off to the point where I've only found one legitimate seller in the last 3 months).
Objectively, you can find other methods of delivery if you are creative enough.


Edit: if you need to bind it to a .jar file, you would need a Java binder for a Java RAT.

Well, my plan was actually to send the RAT as minecraft mod since all of the mods .Jar are. I have already an good idea on how to trick that person in installing that mod. If DropBox is not going to work, i will tell him that he has to install that 1 other mod aswell that isnt in the modpack yet but on the minecraft server. I have also picked his favourit mod and was planning on sending it to him via discord after crypting that whole thing so that its undetectable.

---

Well, my plan was actually to send the RAT as minecraft mod since all of the mods .Jar are. I have already an good idea on how to trick that person in installing that mod. If DropBox is not going to work, i will tell him that he has to install that 1 other mod aswell that isnt in the modpack yet but on the minecraft server. I have also picked his favourit mod and was planning on sending it to him via discord after crypting that whole thing so that its undetectable.

And i also know that, that person isnt playing with anyone atm, so the chance is high that he is gonna give it a try. All i want is the Discord account to mess a little around with that person.

[ElectroRAT]

This RAT is include .jar binder electrorat.com

[3xploit]

There's one problem if you want to spread it as Minecraft mod: They are not executed normally (i.e. through a double click) but by the mod loader like Forge. However, it's not hard to change the entry point for the jar and make a real backdoored MC mod (also works for plugins btw).

[Curiosity2602]

There's one problem if you want to spread it as Minecraft mod: They are not executed normally (i.e. through a double click) but by the mod loader like Forge. However, it's not hard to change the entry point for the jar and make a real backdoored MC mod (also works for plugins btw).

What exacly do you mean by that? So it would technically work, since its getting executed by forge or?

[3xploit]

What exacly do you mean by that? So it would technically work, since its getting executed by forge or?

If it's a normal jar using the main method it's not going to work, forge requires a specific entry point.

[Curiosity2602]

If it's a normal jar using the main method it's not going to work, forge requires a specific entry point.

Hmm but its not hard to change the entry point like you said am i correct? So it can work if i am right.

---

Another person told me that if they open the .Jar, it's goint to download the rat from a link.

[3xploit]

Hmm but its not hard to change the entry point like you said am i correct? So it can work if i am right.

---

Another person told me that if they open the .Jar, it's goint to download the rat from a link.

Simply look up "how to code minecraft forge mod" to create the mod base and instead of adding the contents of the mod (new blocks idk) you add the backdoor.
It depends on how the jar is openend. As I already said, there's a difference if Forge loads the mod or if someone double clicks the jar.

[Curiosity2602]

Simply look up "how to code minecraft forge mod" to create the mod base and instead of adding the contents of the mod (new blocks idk) you add the backdoor.
It depends on how the jar is openend. As I already said, there's a difference if Forge loads the mod or if someone double clicks the jar.

Shrug, alright. But do you know if its easier to send a RAT as a minecraft mod, or a keylogger with a texture pack? Or is there another way to get to the discord details somehow perhaps

[j0rdan]

Good luck, lol. Love ratting children.