[0mnicide]

I'm currently working on building my own RAT, and it's been a long, strenuous headache of a process since I'm learning as I go. I was thinking of buying a paid RAT on a monthly basis to use for my work until I have a working product of my own, but I don't understand how people just trust another dev with all of their clients. Are there certain steps people take, or some kind of hosting agreement or something? I know it's a dumb question, but I had to ask — maybe someone knows something I don't. Thanks.

[Punny]

Isolate the program, remove internet, whatever stops working remove replace

[n3f3r]

Isolate the program, remove internet, whatever stops working remove replace

that doesn't make sense, how do you validate license without internet? :)

[noEsc]

I think the trust comes from other users with good reputation that vouche for it and users that have experience in detection of malicious activity to catch to see if the RAT is backdoored and such.

[DramaKing]

It's dead simple to see if a payload is dualhooked.

[Infinity.]

that doesn't make sense, how do you validate license without internet? :)

You can ship the public key but meh...

i think Offline validation can establish “this license was genuinely issued by us”, but it can't reliably establish “this license is currently valid according to our server.”