Mar 13, 2020 05:00 AM
(This post was last modified: Mar 13, 2020 05:01 AM by SIM-4581439.)
The concept behind pastebin is simple. You first create an account. That way you can modify your pastes. Then you create a paste that contains your dynamic IP. As you know, when you compile your binary, if you just enter in a dynamic IP address, once that address changes your installs will try to connect back to an address that is no longer valid,and you lose those connections. Pastebin makes things easier because you can go in and modify the paste with your new IP. Pastebin is also not gonna be monitoring you as closely as most DNS providers will be. The only discrepancy here is when you want to find the IP behind a DNS, you ping it. It's that simple. You can't ping a pastebin URL to get the IP. I've never written such a function, but if I were asked to, I would use an HTTP-GET request to pull the IP instead. I'm pretty confident that's how most RATs that support this are written too. So to kind of touch again on your question, I believe pastebin-support is only for certain RATs. It's not a method you can use on just any one you come across.
