I' have a question. i'm sure is possible to make a RAT with python, but is possible crypt ( i think is the right word :? ) i mean cryptying the source but on duble click working, like this if i set my ip inside will be hide?
|
Python
[Question] Python - Rat and Cryption |
 (May 9, 2016 08:27 AM)█ＢＯＲＮＥ█ Wrote: Everything is possible in python... encryption is possible but a RAT would be more stable on a different language. Got it, now i have two more question: 1) Witch language? 2) Can you tell me how to work technically, i can't imagine how work this cryption, i mean how is possible the computer can read a script/program if the source is crypted? (May 9, 2016 08:36 AM)Anymore Wrote: Got it, now i have two more question: Wait I am confused on what your asking... are you encrypting the source code or a server? (I figured you meant server as you were asking about RAT) (May 9, 2016 09:40 AM)█ＢＯＲＮＥ█ Wrote: Wait I am confused on what your asking... are you encrypting the source code or a server? (I figured you meant server as you were asking about RAT) Both of it 
May 9, 2016 09:52 AM
(This post was last modified: May 9, 2016 09:52 AM by Crynx.)
(May 9, 2016 08:36 AM)Anymore Wrote: Got it, now i have two more question: C++ can be very stable
Python can be used to create any sort of stable malware, however, expect to be coding the low level stuff (memory management, hooking, etc..) in a language like C or C++ to actually have it be stable. The problem then is that you'd have to "compile" it using a tool like PyInstaller and from my experience PyInstaller binaries cannot be crypted using the usual RunPE method, so you'd probably have to code some sort of a custom packer.
If you put your IP in it, it will not be hidden. Ever. Do not make a Python RAT. Also, anyone can run netstat to see your IP anyways...
SRPP Discord Server
I am a professional network/cloud security architect. My Old Tutorials (May 9, 2016 01:09 PM)Goodies Wrote: If you put your IP in it, it will not be hidden. Ever. Do not make a Python RAT. Also, anyone can run netstat to see your IP anyways... Its not true, with little magic you can avoid your IP from netstat,nmap etc. anything on windows(not working on linux yet).I'm working on it when its complate i will share from here :) (May 9, 2016 01:09 PM)Goodies Wrote: If you put your IP in it, it will not be hidden. Ever. Do not make a Python RAT. Also, anyone can run netstat to see your IP anyways... You sure can hide it as good as C will. You could encrypt the DNS server to connect to, and decrypt using same key (using aes or something) And then youcould convert it to .pyc and it would be wayharder to read. Right? (May 9, 2016 01:09 PM)Goodies Wrote: If you put your IP in it, it will not be hidden. Ever. Do not make a Python RAT. Also, anyone can run netstat to see your IP anyways... I'm not a black/gray hat, for now i'm in learning just at home with my own device, my question was just for curiosity 'cause, everybody tell me " You can do everything in python " and i want know how much is powerful :D however i send you a PM right now (May 10, 2016 03:53 AM)DJSanderrr Wrote: You sure can hide it as good as C will. Correct me if I'm wrong, but encrypting the communications between you and the DNS server won't help with anything. You don't need to actually request anything from a DNS server when connecting to an IP. You just connect to it, simply. (May 10, 2016 07:36 AM)Xutdes. Wrote: Correct me if I'm wrong, but encrypting the communications between you and the DNS server won't help with anything. You don't need to actually request anything from a DNS server when connecting to an IP. You just connect to it, simply. Sorry I might was unclear, but I just woke up. But I actually meant: encrypting the dns-server-link (no-ip kinda link, like i-am-hacker.no-ip.org), as it's a bad thing anyways to use your IP raw in the code. Is this more clear?
May 10, 2016 07:46 AM
(This post was last modified: May 10, 2016 07:49 AM by Xutdes..)
(May 10, 2016 06:34 AM)Anymore Wrote: I'm not a black/gray hat, for now i'm in learning just at home with my own device, my question was just for curiosity 'cause, everybody tell me " You can do everything in python " and i want know how much is powerful :D however i send you a PM right now You have to understand how the internet works before going any step further. You have been illuded into thinking that everything is possible. There are things that are possible, and there are things which are not. Hiding you IP - the very thing that enables computers to communicate across the internet - is impossible. You almost always have to give your IP whenever you're requesting something from a machine. Now some kid might hurry and say "Oh really sucker? Tor can!". Well, using Tor does hide YOUR IP from the machine you're communicating with, but in the end all the other nodes that your packets had passed through have your IP and everything can be traced back to you, assuming log files were untouched. So your best bet would be to use a VPN that allows port forwarding, or you could just pay for a VPS or an RDP. (May 10, 2016 07:45 AM)DJSanderrr Wrote: Sorry I might was unclear, but I just woke up. I can still know the IP by just having the domain. I might not be getting you, if not I really hope you could explain your idea to me more clearly and less vaguely.
May 10, 2016 08:53 AM
(This post was last modified: May 10, 2016 08:54 AM by DJSanderrr.)
(May 10, 2016 07:46 AM)Xutdes. Wrote: You have to understand how the internet works before going any step further. You have been illuded into thinking that everything is possible. There are things that are possible, and there are things which are not. Hiding you IP - the very thing that enables computers to communicate across the internet - is impossible. You almost always have to give your IP whenever you're requesting something from a machine. Now some kid might hurry and say "Oh really sucker? Tor can!". Well, using Tor does hide YOUR IP from the machine you're communicating with, but in the end all the other nodes that your packets had passed through have your IP and everything can be traced back to you, assuming log files were untouched. (May 10, 2016 07:46 AM)Xutdes. Wrote: I can still know the IP by just having the domain. I might not be getting you, if not I really hope you could explain your idea to me more clearly and less vaguely. Spoiler (Click to View) Ok, let me explain in a language we both speak: python. This code is pretty much way not really readable to the naked eye: Code from Crypto.Cipher import AESAnd after compiling to .pyc: Code sander@sec:~$ xxd test.pycThat's basically what I meant, and what I thought the OP meant. |
|
|
