Jul 23, 2011 04:04 PM
(This post was last modified: Jul 23, 2011 04:29 PM by Trophy™.)
Ok, this is my first Tutorial on how to set up DarkComet RAT and I hope it can help all those in need of it!
Downloads Needed (If you prefer DC v3.2, Download link is below):
DUC 3.0 (No-ip): Click to Download
DarkComet v3.2: Click to Download
DarkComet v3.3: Click to Download
Optional Downloads:
FixComet: Click to Download
FixComet v1.0 This tool allow you to fix disabled registry function caused by DarkComet control module shield, it will restore your firewall, taskmanager, registry access etc
Please when testing servers, uncheck the harmful options like anti-firewall features. Try to leave everything unchecked as this can mess your firewall up.
Remember to disable firewall/AV as it can cause problems when working with DarkComet!
Ok so, lets get started.
Step 1
Go to No-ip and register/make an account.
Step 2
Once you have made your account, log in and click on 'Add a Host'
[IMG]http://img51.imageshack.us/img51/195/step1ak.png[/IMG]
Step 3
Then go on to making yourself a Hostname. Pick no-ip.biz on the drop down menu. Once you have chosen your Hostname, click on 'Create Host' at the bottom.
[IMG]http://img535.imageshack.us/img535/2539/step2c.png[/IMG]
Step 4
Now install DUC 3.0, which is No-ip's downloadable feature. Once installed, open it. Go to 'Select Hosts'. (Download link is available at the top for DUC 3.0)
[IMG]http://img33.imageshack.us/img33/5043/step3s.png[/IMG]
Step 5
Tick the box of your Hostname you created, and click save at the bottom.
[IMG]http://img32.imageshack.us/img32/5310/step4ir.png[/IMG]
Step 6 (Port Forwarding)
This step you will need to Port forward the port: 1604. Once you have forwarded port 1604, proceed to the next step. (If you go to canyouseeme.org and it says its closed, keep going until to step 10 and then recheck when prompted)
Step 7
Now download DarkComet v3.2/3.3. Once downloaded, open the client. You then click on '+ Listen'.
Step 8
Type in port 1604, which should be the one you forwarded. Check the box below, and click 'Listen'
[IMG]http://img94.imageshack.us/img94/816/step6a.png[/IMG]
Step 9
On the options at the bottom of the client, click on 'Sockets/Net' and it should have a green tick next to '1604' and under the '@ Message', it should say 'Listening'.
[IMG]http://img651.imageshack.us/img651/8709/step7s.png[/IMG]
Step 10
Head over to Canyouseeme (Click this) and type in port 1604. If you have forwarded successfully, it should say 'Success' in the message at the bottom.
Step 11
Go back to the DarkComet client and click on 'Edit server' and then 'Server Module'.
[IMG]http://img607.imageshack.us/img607/199/step9i.png[/IMG]
Step 12
Ok, so now the new window has popped up, check the box next to 'Security Password' and enter a remember-able/easy password. Click 'Generate' next to the 'Process Mutex' option. Server ID and profile name dont matter too much.
[IMG]http://img813.imageshack.us/img813/8546/step10.png[/IMG]
Step 13
Click on 'Network settings' and in the IP/DNS box, enter your Hostname you created a little while back. Obviously for the port, you enter 1604. Then click 'Add this Configuration'.
[IMG]http://img7.imageshack.us/img7/1831/step11s.png[/IMG]
Step 14
Proceed to click on the next option which is Module Startup. You want to enable this and pick the options to your preference.
[IMG]http://img827.imageshack.us/img827/7987/step12w.png[/IMG]
Step 15
Click on 'Module Shield'. Once again these settings may need changing due to the crypter you use, or just to personal preference if you don't want to use a crypter.
Step 16
The keylogger option is useful, but DarkComet's Keylogger is known to be rather bad. Nevertheless, you can pick the settings to personal preference.
Step 17
The other options you can change if you like, but I wont go into binding as you can get various binders on HF and the icon changer is pretty self explanatory.
Step 18
You can now proceed onto the 'Build Module'. You can pick what extension you want and if you want to save the settings you have used, you can simply check the box at the bottom. You then click the 'Build server' button and choose the directory/area of where you want to save your server.
[IMG]http://img828.imageshack.us/img828/1747/step15.png[/IMG]
Step 19
Once you have finished making your server, head over to settings which can be found via the options at the bottom of the client. Click on the 'No-ip' button.
[IMG]http://img810.imageshack.us/img810/6461/step16.png[/IMG]
Step 20
You then input the information in the No-ip updater window. Your Hostname is the one you created a while back. Your username will be your No-ip username along with your No-ip password. You then click the big button on the left hand side and that will perform any updates.
[IMG]http://img577.imageshack.us/img577/9039/step17.png[/IMG]
Step 21 (IMPORTANT)
Right this step is important. Once back on the settings option, scroll all the way down to the bottom. It will say 'Default Password'. Enter the same password you used when making your server.
[IMG]http://img94.imageshack.us/img94/1020/step18m.png[/IMG]
Step 22
DarkComet is now set up, and to test it, simply head over to the place you saved your Server too.
Step 23
You then double click your Server, and it should look like this! If the connection pops up, you have successfully infected youself, this is to make sure it works! To uninstall, simply right click on the connection and click 'Uninstall server'.
[IMG]http://img824.imageshack.us/img824/655/step20.png[/IMG]
Thanks to the people who made DarkComet RAT
Thanks to No-ip
I hope I helped, please rate, and say thanks! <3
Downloads Needed (If you prefer DC v3.2, Download link is below):
DUC 3.0 (No-ip): Click to Download
DarkComet v3.2: Click to Download
DarkComet v3.3: Click to Download
Optional Downloads:
FixComet: Click to Download
FixComet v1.0 This tool allow you to fix disabled registry function caused by DarkComet control module shield, it will restore your firewall, taskmanager, registry access etc
Please when testing servers, uncheck the harmful options like anti-firewall features. Try to leave everything unchecked as this can mess your firewall up.
Remember to disable firewall/AV as it can cause problems when working with DarkComet!
Ok so, lets get started.
Step 1
Go to No-ip and register/make an account.
Step 2
Once you have made your account, log in and click on 'Add a Host'
[IMG]http://img51.imageshack.us/img51/195/step1ak.png[/IMG]
Step 3
Then go on to making yourself a Hostname. Pick no-ip.biz on the drop down menu. Once you have chosen your Hostname, click on 'Create Host' at the bottom.
[IMG]http://img535.imageshack.us/img535/2539/step2c.png[/IMG]
Step 4
Now install DUC 3.0, which is No-ip's downloadable feature. Once installed, open it. Go to 'Select Hosts'. (Download link is available at the top for DUC 3.0)
[IMG]http://img33.imageshack.us/img33/5043/step3s.png[/IMG]
Step 5
Tick the box of your Hostname you created, and click save at the bottom.
[IMG]http://img32.imageshack.us/img32/5310/step4ir.png[/IMG]
Step 6 (Port Forwarding)
This step you will need to Port forward the port: 1604. Once you have forwarded port 1604, proceed to the next step. (If you go to canyouseeme.org and it says its closed, keep going until to step 10 and then recheck when prompted)
Step 7
Now download DarkComet v3.2/3.3. Once downloaded, open the client. You then click on '+ Listen'.
Step 8
Type in port 1604, which should be the one you forwarded. Check the box below, and click 'Listen'
[IMG]http://img94.imageshack.us/img94/816/step6a.png[/IMG]
Step 9
On the options at the bottom of the client, click on 'Sockets/Net' and it should have a green tick next to '1604' and under the '@ Message', it should say 'Listening'.
[IMG]http://img651.imageshack.us/img651/8709/step7s.png[/IMG]
Step 10
Head over to Canyouseeme (Click this) and type in port 1604. If you have forwarded successfully, it should say 'Success' in the message at the bottom.
Step 11
Go back to the DarkComet client and click on 'Edit server' and then 'Server Module'.
[IMG]http://img607.imageshack.us/img607/199/step9i.png[/IMG]
Step 12
Ok, so now the new window has popped up, check the box next to 'Security Password' and enter a remember-able/easy password. Click 'Generate' next to the 'Process Mutex' option. Server ID and profile name dont matter too much.
[IMG]http://img813.imageshack.us/img813/8546/step10.png[/IMG]
Step 13
Click on 'Network settings' and in the IP/DNS box, enter your Hostname you created a little while back. Obviously for the port, you enter 1604. Then click 'Add this Configuration'.
[IMG]http://img7.imageshack.us/img7/1831/step11s.png[/IMG]
Step 14
Proceed to click on the next option which is Module Startup. You want to enable this and pick the options to your preference.
[IMG]http://img827.imageshack.us/img827/7987/step12w.png[/IMG]
Step 15
Click on 'Module Shield'. Once again these settings may need changing due to the crypter you use, or just to personal preference if you don't want to use a crypter.
Step 16
The keylogger option is useful, but DarkComet's Keylogger is known to be rather bad. Nevertheless, you can pick the settings to personal preference.
Step 17
The other options you can change if you like, but I wont go into binding as you can get various binders on HF and the icon changer is pretty self explanatory.
Step 18
You can now proceed onto the 'Build Module'. You can pick what extension you want and if you want to save the settings you have used, you can simply check the box at the bottom. You then click the 'Build server' button and choose the directory/area of where you want to save your server.
[IMG]http://img828.imageshack.us/img828/1747/step15.png[/IMG]
Step 19
Once you have finished making your server, head over to settings which can be found via the options at the bottom of the client. Click on the 'No-ip' button.
[IMG]http://img810.imageshack.us/img810/6461/step16.png[/IMG]
Step 20
You then input the information in the No-ip updater window. Your Hostname is the one you created a while back. Your username will be your No-ip username along with your No-ip password. You then click the big button on the left hand side and that will perform any updates.
[IMG]http://img577.imageshack.us/img577/9039/step17.png[/IMG]
Step 21 (IMPORTANT)
Right this step is important. Once back on the settings option, scroll all the way down to the bottom. It will say 'Default Password'. Enter the same password you used when making your server.
[IMG]http://img94.imageshack.us/img94/1020/step18m.png[/IMG]
Step 22
DarkComet is now set up, and to test it, simply head over to the place you saved your Server too.
Step 23
You then double click your Server, and it should look like this! If the connection pops up, you have successfully infected youself, this is to make sure it works! To uninstall, simply right click on the connection and click 'Uninstall server'.
[IMG]http://img824.imageshack.us/img824/655/step20.png[/IMG]
Thanks to the people who made DarkComet RAT
Thanks to No-ip
I hope I helped, please rate, and say thanks! <3


![[Image: isw1Ebu.png]](https://i.imgur.com/isw1Ebu.png)