[SSR771]

Hello,

I'm currently using njRAT Danger Edition as my primary remote administration tool. However, I've encountered a consistent issue: targets are required to install the .NET Framework, which complicates deployment and user interaction.

I'm looking for recommendations on free RATs that meet the following criteria:

Do not require the target to install additional frameworks (or have a more seamless deployment).
Offer features similar to VenomRAT (such as remote desktop, keylogging, file management, and persistence).
Allow for the use of a dynamic hostname or link (e.g., DuckDNS or Pastebin) in the host field, rather than requiring a static IP address.
If VenomRAT itself can be configured to support dynamic hostnames via a link or raw URL, I’d appreciate a walkthrough or clarification on that as well.

Thank you in advance for your help.

[DarkG8]

1. Free RATs with no dependency on the .NET Framework:

Quasar RAT (Open-Source):

• Download the source code from GitHub
  


• Build the client using Visual Studio (select the “No Framework Dependency” setting).
  


• Set up a server on a VPS or hosting with DuckDNS.
  

AsyncRAT (Open-Source, C# but with dependency bypass):

• Download the latest version
  


• Use ILMerge to embed .NET libraries into a single executable.
  


• Set up a dynamic host via Pastebin (automatic link update).
  

DarkComet (Legacy, but lightweight):

• Download a clean version (no backdoors).
  


• Use the built-in No-IP/DNS client for dynamic addresses.
  


• Disable .NET checks in server settings.
  

2. Configuring VenomRAT for dynamic hosts:

Via Pastebin/DuckDNS:

• Create a script (Python/PHP) that updates Pastebin with the current IP of your server.
  


• In VenomRAT, specify the raw URL in the host field.
  


• Configure the client to periodically check this link.
  

An alternative is Ngrok/Cloudflare Tunnels:

• Sign up for Ngrok, get an auto-updated subdomain.
  


• In VenomRAT, type subdomain.ngrok.io instead of IP.
  


• For persistence, use Ngrok's hidden mode (TCP tunnel).