Spoof Call and Spoof SMS set any caller ◆ Private Crypter - Unique Private Stubs ◆ 🛒 View HF's Premium Marketplace ◆ [#1] PURE RAT v4 // BEST HVNC RAT ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Remote Administration Tools › Temp or roaming?

New Reply 

Temp or roaming?
AsuraControl
AsuraControl Offline
[user@HF:]
**
HF l33t
Posts:
175
Threads:
44
Credibility:
200
Popularity:
40
βytes:
β 0
Game XP:
0
Jan 2, 2017 08:09 AM
what is the best directory in which to hide a rat or any other virus?
thanks you, sorry for my bad english :)
[Image: signatureeaf873f0ead91512.gif]
yotoprules
yotoprules Offline
[closed@HF:]
Posts:
2,846
Threads:
84
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jan 2, 2017 09:33 AM
(Jan 2, 2017 08:09 AM)AsuraControl Wrote:  what is the best directory in which to hide a rat or any other virus?
thanks you, sorry for my bad english :)

Roaming, because the client might clear the temp folder
JoshuTee
JoshuTee Offline
[closed@HF:]
Posts:
1,521
Threads:
55
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jan 2, 2017 09:38 AM
The best folder, from experience, is %localappdata%, since hardly any normal user knows of it, and it doesnt get flushed at all
aerohack
aerohack Offline
[user@HF:]
*
Registered
Posts:
293
Threads:
126
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jan 2, 2017 10:01 AM
AppData is the best folder, if the victim use CCleaner so It can remove the server if it is in the temp folder.

Besides the folders: Temp, Roaming and AppData, it's possible to install the server in the Windows or System32 folder? Maybe in these folders the server is even more protected.
JoshuTee
JoshuTee Offline
[closed@HF:]
Posts:
1,521
Threads:
55
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Jan 2, 2017 10:06 AM
(Jan 2, 2017 10:01 AM)aerohack Wrote:  it's possible to install the server in the Windows or System32 folder? Maybe in these folders the server is even more protected.

No, it's impossible. Windows has the NTFS file systen which denies access to the folder for non-admin users.
And even if it would work it would throw up issues
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by naxsterApr 12, 2019 10:55 AM 4 155 Apr 12, 2019 10:55 AM
Last Post: #Natasha
by PureLifeCodingFeb 5, 2015 06:56 AM 1 169 Feb 5, 2015 06:56 AM
Last Post: SIM-2198759
by `NinjaJul 22, 2013 05:36 AM 42 1,121 Jul 22, 2013 05:36 AM
Last Post: `Ninja