i have tried nc but it wont passlock i did see a thread on nc with a password but just doesnt look great.. and one thats not detected by like av or something cuz wolf gets detected
|
Full Version: Best Backdoor?
Ive heard of nc , winshell , and wolf ... anyone know which is best?
i have tried nc but it wont passlock i did see a thread on nc with a password but just doesnt look great.. and one thats not detected by like av or something cuz wolf gets detected
Im use Nc.
u looking for something to just get u a shell on the box
or something more complex?
Winshell is nice and configurable. It can be crypted by morphine (that's a big advantage for me).
Wollf is IMHO the best backdoor. Only problem is AntiVirus detection. Hex editing is needed to make it undetected by most AV. As for nc.exe; who would install a backdoor without password protection? That is plain stupid if you ask me.
Why dont use a easy tool like radmin??
these are the best i think
optixpro beast bionet
my favorite is shadow remote
aTa
yep shadow remote is gr8.
thats also my favourite. the only thing which is really annoying is when u get error getting process list... sub7, optix, ... have many functions and - if the server file is well encrypted - it cant be found by avs... so these backdoors are not that bad greetz
Dito Shadow is realy a great tool GreeTz Snatch
I use radmin....It isn't a real backdoor, but i think thats a really great tool to observe the admin, you can transfer files and you can have a shell. Thats a very nice solution.
Greetz Demoman
I use an FTPd my bud Aphex coded, and allows exec (in case I need a shell) Installs as a system service on NT based OS, and doesn't display "FTP Server" as name, something more "hidden" ; ) It's very good imho.
PSEXEC is easier to use than NC i think.
I think the following are the best ones.
~Faceless Master
i use
1)radmin 2) nc withpass protection psexec u need ipc$ open which means that u cant secure the bot
I like NC the most too!
anyone knows a irc bassed backdoor?
I use serv-u/WinShell/Optix Pro
I use my own code, it uses IRC btw. I like the added layer of anonymity as well as defeating NAT's and Proxies. If you are looking for one, I suggest netcat. AV's don't pick it up
Peace
sdbot
Umm I need sth undetected for AV. UPXing doesn't work. What do you suggest??!!
id'e go with winshell. its small and highly configurable.
with a upx or fsg + morphine combo, its really good. offers pass protection, file downloading, shutdown, restart, and remote uninstalling.
I use NC and don't got probs
I believe that sdbot is detected by av.
I don't uses remtoe that much, but I think radmin is a stable one enough to play raound with. NRat 1.0 assasin 2
i use remote anything
in my opinion nc is the beser
mfg tWisTa
I'll have to say, the best of the cmd line tools is
CryptCat. Its netcat but it use's encryption for data transmissions between host and target. GUI: Dunno
i think netcat is the best solution
eternity from wineggdrop is the best imho, socks server, ddos, tcp redirector, dll injects itself and its tiny.
wollf v1.6 is da best
I use nc
Every non legit port open is more risk of discovery, I tend to try to use legit admin services as backdoors, such as termserv or ipc$. If you patch it right, ipc$ can be just as secure.
Recub is great.
After the victim exec the server.. explorer.exe will be infected. Just ping the victims and they will call back results: command promt on victim machine. Norton never alert if u can exec de server. source code included..
i was wollf, but in the process list it will show a wrm.exe, so it is pretty easy to see.
now i am using netcat with password protection and it works good. i will try shadow remote now, because some here said that one is really good. So let's take a look!
i dont know shadow remote ?anyone could tell me his experiences?
wolf is cool-and also pass protected, and only some avīs detects it
you wanna tell me you didn't change the name of the file from 'wrm.exe' to some other name? no wonder the admin will catch you..
guyz i have a question
how can irun nc.exe on port for example 666 that i can see th nc.exe working how can i hide it i tired some things and it never worked for me so plz help me
NC is the best ..
nc.exe -L -p 666 -t -d -e cmd.exe will run nc listening on port 666 hidden
I have found nc to be my best backup backdoor.
normally ill throw a mirc bot online that does all the remote commands. But incase that ever falls through I have nc open binded to cmd.exe
nc is not for me... i use winshell... the problem with nc is that mostly it isnt pas protected...
I use ProRAT/netcat/assasin 2...
I have been looking for a real good bat file that kills fw/av progs. I saw something like 450 but was unable to work it correctly from the instructions not translating correctly. Anyone know of one of these.
Normally after i get the mirc bot on there i kill the nc, theres no need for it. but ill keeep it there just incase i want the convenience.
nc i think isn't good for me, my favourite is winshell you can configurate it easy and you can start many backdoors on one maschine
NC ??
never used it cia 1.22b Beast 2.06 optix pro 1.32 are 3 of the best
It is a simple backdoor that opens a port to listen on. Allows you to bind itself to a file if wanted to. . .hint hint cmd.exe
i prefer winshell, u can download via the telnet all u got to do is enter in the url of the file u want to get downloaded from the box it gives u shell access and lots of other crazy stuff. its very small so it dont take alot of time to send across either via exploiting tftp or some other way and it gives u the feature to make it auto setup itself all u got to do is run the program
ehh, not really needed. I use custom bat files to do all my work. Sux tho sometimes it picks them up as virri.
I'm using a french backdoor called Abacab (coz i'm french).
He have many util functions, you can see them here: http://0data.site.voila.fr/clientabacab.htm
I use Serv-u/optix/radmin, and mostly i start the telnet service and create an new admin account for me
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
|
||||||||