Jun 11, 2015 07:53 PM
(This post was last modified: Jun 12, 2015 12:57 AM by Business.)
This is a tutorial sponsored by "Specialists".
Full OSCelestial RAT Setup Guide
This guide was written to assist OSCelestial customers with their setup process. I am not the owner/seller of this product, but I do not see any tutorials for it so I figured it would be helpful.
*I realize this guide is designed for Windows users, but the steps are practically the same for all OS.*
*I realize this guide is designed for Windows users, but the steps are practically the same for all OS.*
Before we get started, we must download the tools essential for this guide to be followed correctly.
I suggest saving these onto your desktop for easy access later in the guide.
What you will need:
OSCelestial RAT (You should have purchased this already)
Duck DNS Updater
Sandboxie
Once you download these, you are ready to begin.
DNS Setup
First thing we need to do when setting up Duck DNS is go to their website. You can find it below.
Duck DNS site
Next thing we need to do is sign in.
In the top right of the homepage there are multiple options for signing into Duck DNS, you can pick whichever one you prefer.
![[Image: 4296b1d59915ef6ffd28b7b84b048597.png]](https://i.gyazo.com/4296b1d59915ef6ffd28b7b84b048597.png)
Once you sign in, you will be greeted by a page like this (I have blanked out certain parts of this thread for obvious reasons):
![[Image: 6020d53fd6f031f9d45edf05e7df1370.png]](https://i.gyazo.com/6020d53fd6f031f9d45edf05e7df1370.png)
Next thing we are going to do, is choose a DNS domain name.
I suggest making your domain name something you will remember.
In the middle of the page, there is a place to fill out this domain name. You may choose whatever you want, then press "add domain".
![[Image: 0ce7b191164c6c69966da48db6cc391b.png]](https://i.gyazo.com/0ce7b191164c6c69966da48db6cc391b.png)
Your DNS domain takes the place of your IP in the setup process. One of the main reasons we use a DNS is to prevent connection loss. If you use your IP instead of a DNS and your IP changes, you will lose all your connections. With a DNS you can access your connections from anywhere, and they will not be lost if your IP changes.
Now that you have made your DNS domain, you need to synchronize the Duck DNS Updater that you downloaded at the beginning of this tutorial. This process is very simple, just open the Updater on your computer, and find the Duck DNS icon in your taskbar. Right click it, then click the settings tab; a pop-up should appear. Go to the Duck DNS website and sign in. Once you are signed in, you should see a "token" (a bunch of random numbers and letters) towards the top of the page. Copy/paste this token into the corresponding field in the Duck DNS Updater.
Then, type your DNS domain into the first field and press OK. If you did this correctly, you will receive a pop-up message to confirm that your settings were successful.
Port Forwarding
The next thing you will want to do is port forward. Every router is slightly different for port forwarding, so I am referring you to a site that has guides for port forwarding on all routers. Just find your router on THIS SITE and select it, then click the link in this paragraph to be brought to the proper guide:
![[Image: 07972450b8e596b9dbd328c26c177bfe.png]](https://i.gyazo.com/07972450b8e596b9dbd328c26c177bfe.png)
To test if you have successfully forwarded your ports, you can use THIS SITE.
type in your port where it says “What Port?”
If you were successful, you should automatically load this:
![[Image: 76KU2gs.png]](https://i.imgur.com/76KU2gs.png)
If your port was not successfully forwarded, you will get a message saying "ERROR".
If you DID get this error, DO NOT WORRY! There are many things that keep ports from forwarding.
Port Forward Troubleshooting:
The most common problem I see people having with Port Forwarding is Windows Firewall.
You can find this by either going to “Start”, and searching “Windows Firewall”, or by going to your Control Panel.
When you select Windows Firewall, you will see a page that looks like this:
![[Image: 67GNIn5.png]](https://i.imgur.com/67GNIn5.png)
The first thing you need to do is locate “Turn Windows Firewall on or off”.
This can be found on the left side, in the middle. Click on it now.
You need to make sure none of the boxes are checked and that all options are set to off.
![[Image: tmUMWfL.png]](https://i.imgur.com/tmUMWfL.png)
After you do this, the places on your screen that were once green, should now be red.
This is where the most common mistake comes in. Most people think that Windows Firewall is now completely off.
It is NOT! See where it says “Block all connections including programs on the list of allowed programs”?
You need to fix this.
![[Image: USZuQ9P.png]](https://i.imgur.com/USZuQ9P.png)
The next thing you must do is find where it says “Advanced settings”.
Once you click it, you will be brought to this page:
![[Image: QTwTnki.png]](https://i.imgur.com/QTwTnki.png)
You will notice that it still says “Windows Firewall is on.”
For your next step, click “Windows Firewall Properties”.
A pop-up will appear:
![[Image: NtMVgC3.png]](https://i.imgur.com/NtMVgC3.png)
You need to change where it says “Block”, to “Allow”.
After you change it to “Allow”, hit apply. Then, change the firewall state to “Off” and click apply again.
Do this for all three tabs.
![[Image: I4Skxag.png]](https://i.imgur.com/I4Skxag.png)
Once you have done this for all three tabs, press “Apply” at the bottom. Then press “OK”.
Where it previously said “Block all connections including programs on the list of allowed programs”, it should now say “Allow all connections that do not have an exception to block the connection”.
Now that you have completely and successfully disabled Windows Firewall, you can test to see if your port forwarded once again:
TEST HERE
Still having problems?
You may have a firewall enabled on your router itself.
Go back to the router homepage that we opened earlier and go to “Security”.
Most router homepages will have that section.
Look for any firewall settings and make sure they are off.
If all the above steps fail, a last resort is using the DMZ option. Almost all routers have it. You simply enable DMZ within your router, and it will ask for your device IP. (internal IP) Enter it, and apply the changes. This puts your device outside of any/all firewall/security options that your router provides. This has proven to be a working last resort.
If you are on a wired connection, and cannot manage to open your ports, I suggest buying a VPN that supports port forwarding.
For this, almost any VPN will do. Just be sure to get one that supports port forwarding.
Creating Your Stub
When you open OSC, it will look like this:
![[Image: d379c3618f9641975af9a62edfefaf94.png]](https://i.gyazo.com/d379c3618f9641975af9a62edfefaf94.png)
The first thing you want to do is listen to your port in the "Connected Ports" tab by typing your port and clicking "Add Port":
![[Image: f5a36d7d9929009c638b0129928c19d3.png]](https://i.gyazo.com/f5a36d7d9929009c638b0129928c19d3.png)
Next, head over to the "Compiler" tab and go to "Hosts", here you will add your DNS domain name:
MAKE SURE YOU ENTER IT IN THIS STYLE: yourdomain.duckdns.org
You will replace "yourdomain" with your actual domain name.
Ex: If your domain is "piratesarecool", you would enter "piratesarecool.duckdns.org" into the builder.
![[Image: 0dd285dffda20c66089bbde6a4db83be.png]](https://i.gyazo.com/0dd285dffda20c66089bbde6a4db83be.png)
After that, go to "File Settings" and type your port into the builder:
![[Image: 2b4a9609fda21e8e15df697089f52e55.png]](https://i.gyazo.com/2b4a9609fda21e8e15df697089f52e55.png)
I recommend using startup and Disable UI Element. All you need to do is check those boxes and enter your port. Once you are done, you now have a fully functional stub that is FUD. For questions regarding errors or issues you are having, contact myself or the product's owner.
If you are worried that it may not be working, you can use Sandboxie to test your file. Simply open "Sandboxie Control", and drag your stub into the box and accept the pop-up that appears. Once the file is running within Sandboxie, it should show a connection in OSCelestial if you have done everything properly. If a connection does not appear, double check that your firewalls are off and that your port is open.
If you made it this far, congratulations! You have successfully created a working stub that is 100% undetectable. The rest is up to you. Thank you for reading this guide, I hope it made the setup process much easier to understand.
![[Image: uw2cCW1.gif]](https://i.imgur.com/uw2cCW1.gif)
![[Image: boostdroid-signature.gif]](https://boostdroid.com/assets/images/boostdroid-signature.gif)
