[I am THC]

Hey guys, the purpose of this tutorial is to use a Virtual Machine to assist in covering your tracks whilst RAT'ing. The main purpose of this Virtual Machine (VMWARE) Will be to run your RAT on a seperate service or OS so IF in the case you are ever caught you can simply wipe the VM and you will have a clean PC..

The whole idea of this TuT was supported by: Arcaina™


Note: This will take up about 3.6gb of space to download

To get VMWARE + Windows 7 (64bit OS) we will be using two torrents.

(These ARE CLEAN files! that both me and Arcaina™ found)

Torrent for VMWARE: here
Password is: adobe4u

Torrent for Windows 7 OS 64BIT: Here

Once you have downloaded both of these you will need to install VMWARE, Once it is installed we will setup the VM (Virtual Machine)
To do this follow the pictures
(just keep hitting next)




Once you have setup your VM + the OS is all running you should be on a blank screen such as this:


Now that we are on our OS we must download all the needed files to setup our RAT + Portforward!

We will need:

NO-IP DUC 3.04
Cybergate V1.075.5

Once you have downloaded both of these we are going to leave that for now and setup our portforward + our No-Ip account.

First thing we will need to do for our portforward is to make a bridge connection from our VM to our LAN, to do this follow the pictures.



now that we have made our bridge connection open up CMD and type in

Code

Ipconfig

Your IPv4 Address should be identical to your normal LAN's Ip addresses eg:

in this picture the IPv4 is 192.168.1.104
MY PC on the LAN is: 192.168.1.102


This means it is now connected to our LAN network and we can now use this address to portforward out RAT

Also while we have the CMD window open we will get our default gateway in this case it is

Code

192.168.1.1

We will now open up the internet on our VM and type this into our webbrowser and login to our router to setup a porforward.

for our portforward settings we are going to use any port we want (for the example of this TuT we are going to use 1337)


Once we have forwarded that specific port we are going to need to setup our No-Ip and our Cybergate settings!

Head over to www.no-ip.com and setup an account, login and follow the pictures:


Now once your NO-Ip is setup we are going to setup our Cybergate Client!






Now make sure you remember the name for your No-IP, if you forget it simply open the DUC and click select hosts to get the name again.

Once you have setup your NO-IP/Cybergate Client AND portforwarded we are going to head over to: www.canyouseeme.org to double check!

We will type in the port we forwarded (1337)



If it says success CONGRATS! you may now test your server out!


simply double click your server to see if it works! DONT WORRY! its on a VM it won't affect your PC.

As we can see in the picture it says I am registered and from US

I am really from Aus (This has changed my location!)

If you are recieving yourself on your RAT you have set this all up correctly and are ready to spread!

Just head over to the crytography section here:
And get a FUD server! you are now ready to spread!

Keep your VM running and IF you ever get in trouble simply remove it and set it up again LATER!

If your worried you can put a encryption on your VM by going VM>Settings>Encryption.

Hope this tutorial helped you guys! i spent over 6 hours downloading the files and setting up this tutorial So please, even if you aren't going to use this post a comment!

This will work with other RAT's Such as DC and Xtreme RAT.

Goodluck!

[TheKnownBuster]

Good tut bro but you might wanna change the post format cause it's really annoying to scroll right and left🤝

[I am THC]

Okay, thank you. Someone finally replied haha.

edit: it's the pictures that make it so you can scroll across. I had to make multiple pictures into one for it to all fit.

[spikebites]

Kind of weird that you would run the server sandboxed on a VMWare LOL, for two reasons

1) VMWare is already a fake OS so running it on your VM Ware wouldn't harm your main computer,
and
2) If you were going to run it sandboxed, you didn't mention to disable the "Anti-Sandboxie" option when you create a server.

[Slash]

This is a very good tutorial. But let me share a personal experience. You can still get caught. I got busted once. I was using VM. It was a big LAN and all. But don't worry, you guys wont get caught doing this.

[spikebites]

This is a very good tutorial. But let me share a personal experience. You can still get caught. I got busted once. I was using VM. It was a big LAN and all. But don't worry, you guys wont get caught doing this.

caught for what?... what was this tutorial for? lol I didn't read the whole thing..

[I am THC]

Kind of weird that you would run the server sandboxed on a VMWare LOL, for two reasons

1) VMWare is already a fake OS so running it on your VM Ware wouldn't harm your main computer,
and
2) If you were going to run it sandboxed, you didn't mention to disable the "Anti-Sandboxie" option when you create a server.

It's not really meant to be used for the VM it's mainly to make people aware of the actual program so they don't infect themselves as this can be followed to setup the RAT even without the VMWARE.

Seondly It's available in the options and i personally don't see a need to include it.

Thanks for the feedback.

[pvpoodle]

Excelent Guide.. ive already been runing tools on virtual machines for a while now. im currently trying out DC with virtual pc with all integration features turned off.

[hg123A]

Great guide. I will try this now. :-)

[I am THC]

Great guide. I will try this now. :-)

Thank you, let me know how it goes.

🤝

[spikebites]

Seondly It's available in the options and i personally don't see a need to include it.

Thanks for the feedback.

Do you know what you are saying? You are trying to run your cybergate server in sandboxie mode. You CAN'T run a Cybergate server in Sandboxie if the Anti-Sandboxie is checked....so how is it not necessary?? If you ran it, nothing would show up.

[I am THC]

Do you know what you are saying? You are trying to run your cybergate server in sandboxie mode. You CAN'T run a Cybergate server in Sandboxie if the Anti-Sandboxie is checked....so how is it not necessary?? If you ran it, nothing would show up.

I know this, if people read the options then obviously they wouldn't see a need to have it checked if they were going to be testing it on themselves.

Not here to argue.

[spikebites]

I know this, if people read the options then obviously they wouldn't see a need to have it checked if they were going to be testing it on themselves.

Not here to argue.

Okay, but, most people aren't so bright, and completely ignore the Anti page.. And since it defaults as checked for Anti-Sandboxie.. I think it should be your duty as the person who wrote this tutorial to also include a step where that is disabled. Otherwise, you will just get a lot of people confused and PMing you as to "why doesnt my server work in sandboxie? is my port forwarded wrong??" and then that will just lead to a lot more headaches and stupid problems.

you might as well just take out that step of testing it in sandboxie

[I am THC]

Okay, but, most people aren't so bright, and completely ignore the Anti page.. And since it defaults as checked for Anti-Sandboxie.. I think it should be your duty as the person who wrote this tutorial to also include a step where that is disabled. Otherwise, you will just get a lot of people confused and PMing you as to "why doesnt my server work in sandboxie? is my port forwarded wrong??" and then that will just lead to a lot more headaches and stupid problems.

you might as well just take out that step of testing it in sandboxie

Thank you for the advice, you are right alot of noobs just try to skip to get L337 HAX0RZ.

Thank you.

[Algo-rhythm]

Will this Vmware setting prevent the infection to spread to the host OS?Also,could you please expain what is the usage of the bridged connection?