Full Version: Best Backdoor?
Pages: 1, 2, 3
iLLuSioN
Ive heard of nc , winshell , and wolf ... anyone know which is best?
i have tried nc but it wont passlock i did see a thread on nc with a password but just doesnt look great.. and one thats not detected by like av or something cuz wolf gets detected mad.gif
Christian
Im use Nc.
D0cSyS
u looking for something to just get u a shell on the box
or something more complex?
dmg
Winshell is nice and configurable. It can be crypted by morphine (that's a big advantage for me).

Wollf is IMHO the best backdoor. Only problem is AntiVirus detection. Hex editing is needed to make it undetected by most AV.

As for nc.exe; who would install a backdoor without password protection? That is plain stupid if you ask me.
decline
Why dont use a easy tool like radmin??
zero-maitimax
these are the best i think

optixpro
beast
bionet
aTahualPa
my favorite is shadow remote wink.gif

aTa
BuzzDee
yep shadow remote is gr8.
thats also my favourite. tongue.gif
the only thing which is really annoying is when u get error getting process list... blink.gif

sub7, optix, ... have many functions and - if the server file is well encrypted - it cant be found by avs... so these backdoors are not that bad

greetz

Snatch
QUOTE (BuzzDee @ Jan 19 2004, 12:53 PM)
yep shadow remote is gr8.
thats also my favourite. tongue.gif
the only thing which is really annoying is when u get error getting process list... blink.gif

sub7, optix, ... have many functions and - if the server file is well encrypted - it cant be found by avs... so these backdoors are not that bad

greetz

Dito smile.gif

Shadow is realy a great tool smile.gif

GreeTz
Snatch
Demoman
I use radmin....It isn't a real backdoor, but i think thats a really great tool to observe the admin, you can transfer files and you can have a shell. Thats a very nice solution.

Greetz Demoman
Loxy
I use an FTPd my bud Aphex coded, and allows exec (in case I need a shell) Installs as a system service on NT based OS, and doesn't display "FTP Server" as name, something more "hidden" ; ) It's very good imho.
silos
PSEXEC is easier to use than NC i think.
Faceless Master
I think the following are the best ones.
  • Lithium -Buy the newest server if you mean bussiness.
  • Y3k Pro (Great GUI + Trojan)
Regards
~Faceless Master
saetji
i use
1)radmin
2) nc withpass protection

psexec u need ipc$ open which means that u cant secure the bot
LittleHacker
I like NC the most too!
Sw0rdfish
anyone knows a irc bassed backdoor?
TriHFH
I use serv-u/WinShell/Optix Pro ph34r.gif
FireAlwaysWorks
I use my own code, it uses IRC btw. I like the added layer of anonymity as well as defeating NAT's and Proxies. If you are looking for one, I suggest netcat. AV's don't pick it up smile.gif. As far as no pass goes, well you could always hide it in a high port or what I like to do is make it look like a system process wink.gif. Anyway, well good luck. If you want an irc backdoor, I believe there is a butt-plug for B02k.

Peace
zero-maitimax
QUOTE (Sw0rdfish @ Jan 19 2004, 06:01 PM)
anyone knows a irc bassed backdoor?

sdbot
Diablotic
Umm I need sth undetected for AV. UPXing doesn't work. What do you suggest??!!
GhostCow
id'e go with winshell. its small and highly configurable.
with a upx or fsg + morphine combo, its really good. offers pass protection, file downloading, shutdown, restart, and remote uninstalling.
Svenno
I use NC and don't got probs
billy1816
I believe that sdbot is detected by av.
I don't uses remtoe that much, but I think radmin is a stable one enough to play raound with.
Trojan^kid
wink.gif
NRat 1.0
assasin 2
unknown00
i use remote anything biggrin.gif its kool...and jw anyone have link of shadow remote?
mRtWiStEr
in my opinion nc is the beser tongue.gif

mfg tWisTa
MrRobot
I'll have to say, the best of the cmd line tools is
CryptCat.
Its netcat but it use's encryption for data transmissions between host and target.

GUI:
Dunno tongue.gif
flashb4ck
i think netcat is the best solution
phaeton
eternity from wineggdrop is the best imho, socks server, ddos, tcp redirector, dll injects itself and its tiny.
captainil
wollf v1.6 is da best
Richie.666
I use nc
nolimit
Every non legit port open is more risk of discovery, I tend to try to use legit admin services as backdoors, such as termserv or ipc$. If you patch it right, ipc$ can be just as secure.
razeer
Recub is great.

After the victim exec the server.. explorer.exe will be infected.

Just ping the victims and they will call back biggrin.gif (great because can bypass firewalls)

results: command promt on victim machine.

Norton never alert if u can exec de server.

source code included..
THoRaX
i was wollf, but in the process list it will show a wrm.exe, so it is pretty easy to see.
now i am using netcat with password protection and it works good.
i will try shadow remote now, because some here said that one is really good. So let's take a look! smile.gif
sylver
i dont know shadow remote ?anyone could tell me his experiences?
wolf is cool-and also pass protected, and only some avīs detects it
cecrex
QUOTE (THoRaX @ Feb 25 2004, 05:08 PM)
i was wollf, but in the process list it will show a wrm.exe, so it is pretty easy to see.
now i am using netcat with password protection and it works good.
i will try shadow remote now, because some here said that one is really good. So let's take a look! smile.gif

you wanna tell me you didn't change the name of the file from 'wrm.exe' to some other name?

no wonder the admin will catch you.. rolleyes.gif
3plx
guyz i have a question
how can irun nc.exe
on port for example 666
that i can see th nc.exe working

how can i hide it
i tired some things and it never worked for me so plz help me
white
NC is the best ..
Joc00
QUOTE (3plx @ Feb 27 2004, 05:39 AM)
guyz i have a question
how can irun nc.exe
on port for example 666
that i can see th nc.exe working

how can i hide it
i tired some things and it never worked for me so plz help me

nc.exe -L -p 666 -t -d -e cmd.exe
will run nc listening on port 666 hidden
prog
I have found nc to be my best backup backdoor.

normally ill throw a mirc bot online that does all the remote commands. But incase that ever falls through I have nc open binded to cmd.exe
GhostCow
nc is not for me... i use winshell... the problem with nc is that mostly it isnt pas protected...
Eldarion
I use ProRAT/netcat/assasin 2... smile.gif
prog
I have been looking for a real good bat file that kills fw/av progs. I saw something like 450 but was unable to work it correctly from the instructions not translating correctly. Anyone know of one of these.

Normally after i get the mirc bot on there i kill the nc, theres no need for it. but ill keeep it there just incase i want the convenience.
Hawk12
nc i think isn't good for me, my favourite is winshell you can configurate it easy and you can start many backdoors on one maschine
Trojan^kid
NC ??
never used it
cia 1.22b
Beast 2.06
optix pro 1.32
are 3 of the best smile.gif
prog
It is a simple backdoor that opens a port to listen on. Allows you to bind itself to a file if wanted to. . .hint hint cmd.exe
NiteWorM
i prefer winshell, u can download via the telnet all u got to do is enter in the url of the file u want to get downloaded from the box it gives u shell access and lots of other crazy stuff. its very small so it dont take alot of time to send across either via exploiting tftp or some other way and it gives u the feature to make it auto setup itself all u got to do is run the program
prog
ehh, not really needed. I use custom bat files to do all my work. Sux tho sometimes it picks them up as virri.
guufa
I'm using a french backdoor called Abacab (coz i'm french).
He have many util functions, you can see them here: http://0data.site.voila.fr/clientabacab.htm
DumpZ
I use Serv-u/optix/radmin, and mostly i start the telnet service and create an new admin account for me
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.