Winshell is great and goes undetected by most AV software (if crypted with morphine).
Wollf is imho the best backdoor. Morphine is unusable for Wollf (messes it up) but with a little hex editing Wollf goes undetected by most AV software too.
Get Wollf @ xfocus
cha0s
Jan 6 2004, 11:40 AM
uhh a shell
hm u can take netcat but if an rehacker scans the sys where nc is running he easily grabs that banner, just connecting using telnet and hes in, not so good, nc isnt password protected, another i guess better idea is the use of the wollf server have a look at xfocus for it, it provides even more enhanced features, but isn pw protected either, best is to use a pw bd and to set up a shell when needed, think its the best choice i can offer u
dmg
Jan 6 2004, 01:09 PM
QUOTE (cha0s @ Jan 6 2004, 11:40 AM)
uhh a shell
hm u can take netcat but if an rehacker scans the sys where nc is running he easily grabs that banner, just connecting using telnet and hes in, not so good, nc isnt password protected, another i guess better idea is the use of the wollf server have a look at xfocus for it, it provides even more enhanced features, but isn pw protected either, best is to use a pw bd and to set up a shell when needed, think its the best choice i can offer u
Wollf IS password protected and highly configurable (just like winshell)
saetji
Jan 6 2004, 01:18 PM
1) Netcat can be used with password (check downloads section fora mini example) if u can batch program... but then nyone with axs to that comp (may happen in future) can find out ur backdoor and steal all ur bots: SOLUTION - compile that damn batch
2) copycat - same thing as netcat but uses password
3)radmin: u get axs to telnet AND computer screen and is pass prot. icon can be hidden by reg hack
If ive missed anything that is small, and not detected by viri scanners then lemme know so i can add it
LittleHacker
Jan 19 2004, 07:50 PM
@ saetji can you tell more about "copycat" ? and a link to download !
tolf
Jan 20 2004, 04:14 AM
QUOTE (cha0s @ Jan 6 2004, 11:40 AM)
uhh a shell
hm u can take netcat but if an rehacker scans the sys where nc is running he easily grabs that banner, just connecting using telnet and hes in, not so good, nc isnt password protected, another i guess better idea is the use of the wollf server have a look at xfocus for it, it provides even more enhanced features, but isn pw protected either, best is to use a pw bd and to set up a shell when needed, think its the best choice i can offer u
Just configure nc to only listen to a certain IP address and make it listen on a very high port (ie 65535)... hes got buckleys of gettign a connection...
netcomm
Jan 20 2004, 05:58 AM
simple use windows telnet client....
net start telnet and add your-self as a user or use the user/pass you already have.
as telnet is a genuine service its not likley it will be detected.... also its bound to be a lot more stable(and i never thought i say that about anything to do with windows) than NC or any other such tools...
Peace - NetComm
esorone
Jan 26 2004, 10:22 AM
It is possible to run nc as services. Just make a .bat with the command you would like. And convert the .bat to a .exe. Place also a command in HKLM\software\microsoft....\run ---> name of the .exe
Now your nc is running as a service. Remember the original nc en the coverted .bat must be in system32.
Greetz esorone
esorone
Jan 26 2004, 10:24 AM
It is possible to run nc as services. Just make a .bat with the command you would like. And convert the .bat to a .exe. Place also a command in HKLM\software\microsoft....\run ---> name of the .exe
Now your nc is running as a service. Remember the original nc en the coverted .bat must be in system32.
Greetz esorone
HAnzsz
Feb 4 2004, 10:56 AM
QUOTE
SeNe Wrote; if u up and execute the file on system volume information u can use it without prob because NAV doesnt scan by default that section.
very nice info t/y
wh173r
Feb 4 2004, 05:24 PM
Original Post by skydance
QUOTE
try icmd.exe, u can setup a pass.... with netcat everyone can connect if they find the port.
Not true, I have a netcat with password project, as dose one other person, who based his off of mine.
And for encryptions, use my project + cryptcat replacing netcat.
Partizaan
Feb 14 2004, 11:23 PM
with firedaemon.exe you can isntall all .exe as service
$3b4$t!4N
May 8 2004, 09:35 AM
hello, could somebody tell me which reg-entry of rAdmin i have to export?
$3b4$t!4N
MessyR
May 8 2004, 10:19 AM
Radmin is detectable by most AV software now adays. :9 Try net_devil thats some good programs to get u telnet and reverse shells.
$3b4$t!4N
May 8 2004, 10:33 AM
no, rAdmin isn't detected by symantec. i need a program to see the desktop of the user (like rAdmin). i only want to know how i could start rAdmin in hidden mode.
as u c, the 1st uninstall is 2 make sure that another proccess of it will be vanished ;P
$3b4$t!4N
May 8 2004, 06:23 PM
ok thank you... it works!
i'm also searching for a reverse remote-desktop software... a remote software which connects back to MY computer (i open a server, the client connects to ME)... i need this for computers which are behind routers
6066up9r
May 9 2004, 03:29 AM
radmin works very well and i also favor winshell whenever necessary
radmin has everything all wrapped into one and i've never had trouble with it
it's easy to manage your 'servers' as well with the viewer utility
$3b4$t!4N
May 9 2004, 09:42 AM
yes, radmin is a very nice tool! but i need also a remote-software, which connects back to my computer... so if the computer is behind a router, i can't connect to him, but he could connect to me!
somebody knows such a remote-software?
$3b4$t!4N
jarodders
May 9 2004, 10:34 AM
$3b4$t!4N - if you have some level of access, you could scheduale netcat to run every day with the AT command and connect to your machine, and just listen on that port at the right time. is that what you want?
off topic: hey guys this is my first post, was gonna make a thread to introduce myself but dont have permissions. Been reading these forums for a while and they've been v helpfull, thought i'd start to "give something back" as they say. Im a compsci student, can code java well and a few others not so well an i know a bit about hardware so maybe i can be of some help. Anyways great forum, interesting mix of people, keep it up.
$3b4$t!4N
May 10 2004, 12:52 PM
i want a remote-DESKTOP-software, which connects back to my computer... so that i could see the desktop of the user, not only the dos-box!
$3b4$t!4N
jpno5
May 10 2004, 01:55 PM
926 byte backdoor posted by illwill on 05-03-2004 18:17
added tx to the files its a 926 byte backdoor written in visual c++ for NT/2K/XP/2K3 get it from the releases section under other or click here
also added the reverse connecting backdoor that allows you to reach into computers behind routers
Works Great For Me
nec
May 11 2004, 10:47 AM
yeah, it works now. But wait two weeks or so and it will be detected by av-software. That's the main problem with those tools. nc for example is availible for years and no av detects it as a trojan or hack tool, or however you want to call it. just my 2 cents...
regards, nec
fulvioo
May 11 2004, 01:37 PM
very nice post thanks for all the bat files
$3b4$t!4N
May 11 2004, 05:38 PM
@ jpno5: that's a reverse SHELL! i need a REVERSE remote-DESKTOP software!!!!!!!!
Player
Aug 6 2004, 07:16 AM
QUOTE ($3b4$t!4N @ May 8 2004, 06:23 PM)
ok thank you... it works!
i'm also searching for a reverse remote-desktop software... a remote software which connects back to MY computer (i open a server, the client connects to ME)... i need this for computers which are behind routers
if network has my box firewalled or i am behind router which i do not have admin axx to, how do i find way so that boxes that are behind router as well are able to reverse connect to my box? thanks you
shinobi
Aug 6 2004, 11:04 AM
¿What´s the the netcat´s problem?
Remenber the swiss Knive...
nibbler
Sep 14 2004, 07:15 PM
can somebody please upload icmd.exe again?
thanks
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.