[NoodleBot™]

-=RaZoR CrYpT Support Thread=-
By
NuudleRow

Please use CTRL+F to find anything you need really fast. ;)

Caution: This is a HUGE 2 post-picture walk-through on how to create and crypt your DarkComet, and CyberGate server using Razor and Ebola's RazorCrypt. As I write this guide I currently use RazorCrypt 6.1.1 successfully with DarkComet and CyberGate, so I thought I should show how.

This will also act as an official support thread for RazorCrypt. I have been in touch with the other RazorCrypt Support members and this will be the main source of help you will receive, other then PM's and finding us online on Skype.

This thread has taken me alone a considerable amount of time to make as I have been dealing with customers and giving out help as much as I possibly can while creating this thread and testing servers. Any thanks is deeply appreciated, as well as thanks to any other support members is a sign of gratitude for our time and help.

Steps before proceeding

Ensure you have a RAT to crypt.

Cybergate V 1.07.5 - http://www.mediafire.com/?5o5dgwb4uy53s9y

DarkComet V 5.3.1 - http://www.mediafire.com/?0oimgw2mcjcx2rx

Ensure your antivirus is turned off completely before using the crypter. When your antivirus software is on, it will detect the crypter and add an injection detection. Basically, by saying this, I mean that it will send a copy of RazorCrypt to it's manufacturer. So if you have Avira, turn it off, or you will see more Avira detectons. Etc etc etc. Very simple rule, and this universal rule applies for all types of malware and cryptography.

Ensure you have read this guide before deciding to contact Support for any further questions.

For HWID related concerns, please avoid contacting support directly to resolve this issue. Personally as a support member, until I obtain the ability to manage your HWID from Razor, this will not be happening.

List of Current Support Members

NuudleRow - https://hackforums.net/member.php?act...uid=974949

XOwnage - https://hackforums.net/member.php?action...id=1201083

๖ۣۜTitties - https://hackforums.net/member.php?action...id=1476404

Nickfost - https://hackforums.net/member.php?act...uid=674179

Please contact me to have your name and profile added to the thread. I cannot think at the moment.

-DarkComet Server instructions-
Step 1
https://gyazo.com/6546f98bcc36f41570f4cc...1347920698
Step 2
https://gyazo.com/4215f8ac33bcf3333c9f2f...1347920743
Step 3
https://gyazo.com/62252efd8aa672607c3dd7...1347920761
Step 4
https://gyazo.com/616c1d358411f6029cb680603012fcc4.png
Step 5
https://gyazo.com/24d9f98b8ca692ba14cb95e9b3c0e440.png
Step 6
https://gyazo.com/877ca836e226443b996249...1347920784
Step 7
https://gyazo.com/6142e2b448153f588334e0d081475baf.png
Step 8
https://gyazo.com/6500b2f2dcfafa8932054e...1347921416
Step 9
https://gyazo.com/4e8c9527cb3d1ef72c9f7a...1347920853
Step 10
https://gyazo.com/480d6e5b2136c1bffb9db3...1347920867
Step 11: Server Completion
https://gyazo.com/2b140f9df5d4556ded9b021af8bcf28b.png

-CyberGate Server Instructions-

Step 1
https://gyazo.com/ea928d29b68f2f769498de...1347933498
Step 2
https://gyazo.com/66817a2bd3ef23d96c4f3d...1347933561
Step 3
https://gyazo.com/d9f4d2bb84fe999ccca3f5...1347933514
Step 4
https://gyazo.com/169aad8bad0c3783f975d7...1347933574
Step 5
https://gyazo.com/38709dc0c1b114d1096a0f926d642a4e.png
Step 6 Server Completion
https://gyazo.com/0d211040dc0c8057d60449...1347933766

If you have followed the above steps correctly, you should achieve a very solid infection rate as you have proper settings.

If you for any reason cannot achieve any infection using the above settings and the crypter settings, you have a problem with your network, or your computer itself. The crypter does not like it's files to be run on it's own HWID computer.

Some connection issues are port forwarding and your firewall.

Troubleshooting:

Step 1: Ensure your firewall either excepts the connection of your RAT/RazorCrypt, or turn it off completely.

Step 2: Ensure your Antivirus software is turned off while accessing the crypter, and ensure it remains off until you have crypted, uploaded and completed spreading your file.

Step 3: Check to see if your ports are forwarded correctly using third party websites such as canyouseeme.org, or even call your ISP (Rogers, bell, etc.)

Some basic FREE tutorials on port forwarding troubleshooting:
https://hackforums.net/showthread.php...rt+forward by Wre©ked = https://hackforums.net/member.php?act...id=1025222

https://hackforums.net/showthread.php...rt+forward by Mario Götze =
https://hackforums.net/member.php?act...uid=799934

This thread has taken me alone a considerable amount of time to make as I have been dealing with customers and giving out help as much as I possibly can while creating this thread and testing servers. Any thanks is deeply appreciated, as well as thanks to any other support members is a sign of gratitude for our time and help.

If you for any reason cannot achieve any infection using the above settings and the crypter settings, you have a problem with your network, or your computer itself. The crypter does not like it's files to be run on it's own HWID computer.

Some connection issues are port forwarding and your firewall.

Troubleshooting:

Step 1: Ensure your firewall either excepts the connection of your RAT/RazorCrypt, or turn it off completely.

Step 2: Ensure your Antivirus software is turned off while accessing the crypter, and ensure it remains off until you have crypted, uploaded and completed spreading your file.

Step 3: Check to see if your ports are forwarded correctly using third party websites such as canyouseeme.org, or even call your ISP (Rogers, bell, etc.)

[XOwnage]

If you still have problems and / or questions feel free to pm me here or on skype , im a supporter

[Foreskin‎]

If anybody above are occupied and cant help you at the moment contact me. I am also support.

Skype: TittiesHF

[NoodleBot™]

I have added you guys to the support list. Thanks for posting. ;)

Just to let everyone know I was not able to post more then 15 screenshots per post, so I decided to put the links instead. Hope it isn't making it TOO 'difficult' for you people.

Also, to let everyone know the settings provided in my screenshots are universal and will always work with any crypter. You can experiment with your own once establishing that these work.

[mr_man]

Does razorcrypt work with meterpreter?

Thanks.

[XOwnage]

Does razorcrypt work with meterpreter?

Thanks.

Meterpreter is part of the metasploit framework , and doesnt provide you an .exe file or anything (atleast whilst the time i used it ,you may correct me) so basically you cant crypt it

[NoodleBot™]

Does razorcrypt work with meterpreter?

Thanks.

This is a question you should really ask the developer, Razor, as I am not able to answer that because I have never tested it myself or possessed it.

https://hackforums.net/member.php?action...id=1243825

[mr_man]

Meterpreter is part of the metasploit framework , and doesnt provide you an .exe file or anything (atleast whilst the time i used it ,you may correct me) so basically you cant crypt it

It does give you .exe files. That is why I was thinking it can be used with a crypter.

---

This is a question you should really ask the developer, Razor, as I am not able to answer that because I have never tested it myself or possessed it.

https://hackforums.net/member.php?action...id=1243825

Thanks for your reply. I need to get atleast 10 posts before I can pm anybody.

[XOwnage]

Well in that case tell us what those .exe files are coded in ? .net ?

[mr_man]

Hyperion is a free, non-fud crypter for .exe files, written in c++ and works with meterpreter payloads.
http://3ncrypt0r.blogspot.com/2012/09/by...pters.html

The payload I was experimenting with uses shellcodeexec which is written in c.
http://www.coresec.org/2011/04/22/execut...lcodeexec/

[XOwnage]

Hyperion is a free, non-fud crypter for .exe files, written in c++ and works with meterpreter payloads.
http://3ncrypt0r.blogspot.com/2012/09/by...pters.html

The payload I was experimenting with uses shellcodeexec which is written in c.
http://www.coresec.org/2011/04/22/execut...lcodeexec/

Usually we dont have any problems with native coded applications , but you bet get 3 more posts and pm razor . Though i doubt there will be any problems

[NoodleBot™]

Yes just to confirm, always ask the coder Razor. We cannot confirm what we don't personally use.

[mr_man]

Thanks guys.

•The message is . Please enter a message longer than 35 characters.

[The masta]

razorcrypt always corrupts my servers even when i follow the instructions

[NoodleBot™]

razorcrypt always corrupts my servers even when i follow the instructions

It is currently being recoded, you should just wait til it is finished.