hi ppl.

I'm beginning work on a "legitimate" RAT that will be sold as a commericial product, although will have covert facilities.

One idea thats crossed my mind, is trying to use the new .net infrastructure, to run it on port 80. Has anyone tried something like this before, and if not what are your comments on the viability of this approach.

For those who dont know much about .net, the idea is that to ensure cross-platform and cross-server communication, port 80 would be used to get around the problem of firewall configuration.

Other ideas I have had is using other M$ ports, but I am not sure on whether running two services on one port will work.

running two or more services in one port works just fine...
but anyway... i don't think we really need this rat...
and much more sold with money... it sounds weird....

are you sure? I was pretty certain you couldn't have mor ethen one app listening in on any one port? (with the exclusion of packet sniffers)

maybe it varies from app to app?

I am pretty sure you can not bind a server, which your rat will be, to a port that is already bound to another service.

Also port sniffers do not bind to ports, they listen on the ethernet itself through your network card.