[Business]

Ultimate Beginners' Guide to Dark Comet

This guide is designed for anyone that is interested in learning more about Remote Administration Tools and how to set them up.

In this guide I go in great detail to explain how to set up Dark Comet, the leading free Remote Administration Tool.

This guide will help you not only get your RAT ready to go, but it will also briefly teach you how to spread your final product.

Before we get started, we must download the tools essential for this guide to be followed correctly.

I suggest saving these onto your desktop for easy access later in the guide.

I have placed the downloads into a folder which you will find below.

(Downloads)

Once you download the folder, continue to install Duck DNS.

==

First thing we need to do when setting up Duck DNS is go to their website. You can find it below.

Duck DNS site

Next thing we need to do is sign in.

In the top right of the homepage there are multiple options for signing into Duck DNS, you can pick whichever one you prefer.



Once you sign in, you will be greeted by a page like this (I have blanked out certain parts of this thread for obvious reasons):

Next thing we are going to do, is choose a DNS hostname/domain.

In the middle of the page, there is a place to fill out this hostname. You may choose whatever you want, then press "add domain".



Your hostname is what you will use as your IP/DNS when making your file in Dark Comet later on in this guide.

I suggest making your hostname something you will remember.

[Business]

Port Forwarding

Why do we port forward?

Port forwarding allows us to open a port that we will use to receive your connections on Dark Comet.

Without your port forwarded, the connections we expect to receive would not come through.

What ports will you be using?

There are thousands of ports.

You only need to open one for Dark Comet.

You could pick from many ports, but for this guide you will be using 5050.

Why? The only reason is because that is what I have chosen.

It does not matter what port you use. I personally use these ports for demonstrations, so that is what I will use for this guide.

How to Portforward

Many people find port forwarding to be a tricky task.

There are many steps that are commonly overlooked when Port Forwarding.

I will now show you how to properly forward your ports.

The first thing you are going to need to do is figure out what your Default Gateway is.

You can do this by going into your Command Prompt.

I am a Windows User, so this guide will be based off of Windows instructions.

The steps may be partially different for other Operating Systems.

To find your Command Prompt, click the start button located, usually at the bottom left corner of your computer screen.

Once you have clicked it, type “cmd”.

A black screen should pop up.

This is your Command Prompt. Next you need to type “ipconfig”.

This will present you with your connection information.

Your screen should now look something like this. (Example pic)

If you do not see where it says “Default Gateway”, you may have to scroll up or down.

Once you have found it, minimize this for now.

Next you need to open your Internet Browser.

I personally use Google Chrome.

Now you must enter the Default Gateway that you found in the Command Prompt into your Address Bar.

Mine is 192.168.1.1, so that is what I entered into my Address Bar.

Click Enter. You may be welcomed by a prompt asking you for a User Name and Password.

In this case, unless your User Name and Password are customized by you or someone else, than you should be able to find them on the website below.

The website will ask you for the brand and model of your router.

To find what model router you have, you can check on the router itself.

It should be listed as “Model No.”, or something similar, somewhere on your router.

Router list.

All you have to do is enter what brand and model you have, and it will come up!

Once you have found and entered your User name and Password, you should be brought to your router’s homepage.

These vary in style according to your router brand. Mine looks like this:



The methods to port forwarding are different based on what router you have.

On mine, you go to “Applications and Gaming”.

Seeing that I can only demonstrate how to do it on my router, I will provide a website with instructions on how to port forward on each router.

Make sure to follow the directions for your router precisely and completely.

Remember, you are using port 5050 for Dark Comet.

When it gives you the option to select “Protocol”, you will have either two or three options.

If you get two options, they will be “UDP”, and “TCP”.

If you get three options, they will be “UDP”, “TCP”, and “UDP/TCP”.

Sometimes instead of the option “UDP/TCP”, it will say “Both”.

You need to select “UDP/TCP”, or “Both”.

When you are filling out the IP Address, you will use your IPv4 Address.

You can find this by going back into your Command Prompt and typing “ipconfig”.

It should be located around the same area that you found your Default Gateway.

This is what my port forwarding looks like.



Once you are done, Hit “Save Settings”, or a button similar to this, which you will find somewhere on the page, commonly towards the bottom of the page.



To test if you have successfully forwarded your ports, you can use this site.

Test here.

Go to this site, and type in your port where it says “What Port?”

If you were successful, you should automatically load this:



If your port was not successfully forwarded, you will get this:



(I chose a random port that I knew was not forwarded.)

If you DID get this error, DO NOT WORRY! There are many things that keep ports from forwarding.

Port Forward Troubleshooting:

The most common problem I see people having with Port Forwarding is Windows Firewall.

You can find this by either going to “Start”, and searching “Windows Firewall”, or by going to your Control Panel.

When you select Windows Firewall, you will see a page that looks like this:



The first thing you need to do is locate “Turn Windows Firewall on or off”.

This can be found on the left side, in the middle. Click on it now.

You need to make sure none of the boxes are checked and that all options are set to off.



After you do this, the places on your screen that were once green, should now be red.

This is where the most common mistake comes in. Most people think that Windows Firewall is now completely off.

It is NOT! See where it says “Block all connections including programs on the list of allowed programs”?

You need to fix this.



The next thing you must do is find where it says “Advanced settings”.

Once you click it, you will be brought to this page:



You will notice that it still says “Windows Firewall is on.”

For your next step, click “Windows Firewall Properties”.

A pop-up will appear:



You need to change where it says “Block”, to “Allow”.

After you change it to “Allow”, change the firewall state to “Off”.

Do this for all three tabs.



Once you have done this for all three tabs, press “Apply” at the bottom. Then press “OK”.

Where it previously said “Block all connections including programs on the list of allowed programs”, it should now say “Allow all connections that do not have an exception to block the connection”.

Now that you have completely and successfully disabled Windows Firewall, you can test to see if your port forwarded once again:

Test here.

Still having problems?

You may have a firewall enabled on your router itself.

Go back to the router homepage that we opened earlier and go to “Security”.

Most router homepages will have that section.

Look for any firewall settings and make sure they are off.

If you are on a wired connection, and cannot manage to open your ports, I suggest buying a VPN that supports port forwarding.

For this, almost any VPN will do. Just be sure to get one that supports port forwarding.

Many of you will find it a good idea to run a VPN.

[Business]

Once you have done all the steps to port forward, you can start to set up Dark Comet.

If your port is still not appearing as open on http://canyouseeme.org/, then the first step when setting up Dark Comet may fix this.

First thing you need to do is open Dark Comet, which you downloaded earlier.

When you open Dark Comet, you will be welcomed by a pop up.

It will look like this:



Check the box for “Do not display again the EULA”. Once you can, click “I Accept”.

You will now be brought to Dark Comet itself, along as another pop up.



Check to box for “Do not show at startup”. Click “Fine”.

Now, Dark Comet should look like this:



The first thing you are going to do is click the “Socket /Net” tab.



Now you are going to right click in this area:



You will be prompted by this pop up:



Click “Add port to listen”.

A settings box that looks like this should appear:



This is how you set Dark Comet to listen to your port.

Since you port forwarded port 5050 earlier, your will type 5050 in the box.



Keep “Try to forward automatically (UpNP)” checked.

Click “Listen”.

Dark Comet should now look like this:



Now test your port once again via http://canyouseeme.org/.

If you get success, you have been successful up to this point.



Now you will build your Dark Comet stub.

Select the following:



You will be brought to this screen:



Your “Stub ID” is an ID that will pop up next to your connections on Dark Comet.

These are a good way to organize your connections.

For example, if you know you will be remotely controlling your second laptop, you could type in “PC2”. But it really does not matter.

In the “IP/DNS” box, you type your Duck DNS hostname.

Your hostname will look something like this:
exampleaccounts123.duckdns.org

In the “Port” box, you will input your port.

The port you have set up for Dark Comet is 5050, so input it into the box.

Uncheck the “Start the stub with Windows (Installation)” setting.

You are now done making your stub.



Click “Normal”, then name it and save to your desktop.

[Business]

Now that you have your stub, you need to test it before you crypt it.

Head over to:

Anubis

Once there, you need to scroll down until you see this:



Now, click “Choose File”, and select it your stub.

Now type in the “Get a priority boost” four digit code.

Then press “Submit for Analysis”.

Now, a test will begin. Let the test run.

If everything has been done properly on Dark Comet and port forwarding, you will receive a temporary connection in Dark Comet.

If you do, so far so good! (:

Now we can move on.

[Business]

There are many crypters out there, but I will be showing you how to use Razor Crypt.

First, open Razor Crypt.

It should look like this:



The first thing we will do is select our stub.

Find your stub, and select it in the file area:



Now, if desired, you can add an icon to disguise your stub better.

I will link some icons that I find useful:

Icon downloads.

Once you have selected your icon, click “GEN” a few times:



For the right side, set your settings to match mine:



These are my personal favorite settings to use.

Head over to the “Additional Options” tab, and select the following:



Now, accept the terms of service, and hit “Crypt”.

Save it to your desktop, and BOOM! You have finished making your RAT!

Note: Binding is optional, and can be used if done properly.

That brings my guide to a close! I hope you enjoyed it and got some use from it. I am sure it will help many of you!

[redpois0n]

Really nice tutorial you have made... very nice work

[Business]

I really hope that this thread gets the attention it deserves.

[Understalker]

As always, a mothafuckin detailed guide. This shit is long as fuck, and should help EVERYONE with their RAT issues.

[redpois0n]

I really hope that this thread gets the attention it deserves.

I'll make sure of that, don't you worry 😎

[Business]

Thank you for the kinds words Under!

[jtagsrcool_z]

When i go into canyouseeme i get this...
Error: I could not see your service on (IP ADDRESS) on port (1606)
Reason: Connection refused

[Understalker]

When i go into canyouseeme i get this...
Error: I could not see your service on (IP ADDRESS) on port (1606)
Reason: Connection refused

Did you portforward/listen to your port?

[ShadowLock]

That looks pretty cool! If you know how to do It, you can show how to port forward with uTorrent too :)

Note; Any problems with this tutorials can look at my signature.

[Business]

I may be adding more soon. Writing more sections.

[OG Alien]

I want to try blackshades, but all I hear is shitty stuff about them, it drops slaves more than dark comet, which is a pretty big deal.