[Local Injection]Introduction to RATs, Keyloggers and Stealers

Dawnc0re · 05-25-2012, 08:54 AM

Dawnc0re

In this tutorial I'll be introducing you to the most used softwares in the hacking world - RATs, Keyloggers and Stealers. I'll be explaining how they work and how to properly use them. We'll start with RATs first.

--RAT - Remote Administration Tool --

Remote Administration Tool is a program that is used for gaining remote access over your victim's computer. I'll explain how they work as simple as possible. Let's say that this program is made of tabs. The first tab is called Connections, the second is called Edit/Create Server, the third Settings. This is what is their purpose. In the connections tab, you'll be able to see a list filled with details about your victims (details as their IP, computer name, location, operating system, ...). From the Connections tab you can chose what victim you wanna to control(or use the others functions on them). That is what most of the RAT softwares have in the Connection tab. Now we proceed to the second tab called Edit Server or Create Server. Now before we continue, I'll explain what server is. Server is a file that establishes a connection between you and the victim. You create server using the RAT software. Now the process of creating a server is not quite simple. You'll probably need an No-IP account, then you'll need an open port, and so on. After the server is created, you'll need to send it to your victim and the victim must double-click (open)the file, which means you must convince him to open it. Once that he has open it, you'll be able to see his details in the connection tab. Now here are some functions that most of the RATs have that you can use on your victims:
-Control their computer Desktop
-Watch them through their camera
-DDoS a site from their computer
-Download and Execute
-Fun Functions
Some of the most popular RAT softwares are BlackShades, DarkComet and CyberGate.

Spoiler: Pictures

BlackShades RAT Version 4.2( Notice the tabs we were talking about?)

--Keyloggers--

Keyloggers are hacking programs that are used to steal the victim's keystrokes. Its the same thing like rats, you'll need to create a server and send it to your victim and expect that they'll open it. After they have opened your server, everything they type will be recorded and sent to the email address you specified while creating your server. Some of the newer keyloggers have more advanced functions like icon and extensions changer, FUD, run at startup etc. The recorded keystrokes will be sent to your email and you can explore them. By exploring, you might find passwords, logins, messages etc.

Spoiler: Pictures

Emissary Keylogger - The process of creating a server.

-- Stealers--

Stealers are softwares used for stealing passwords from your victim. It's same procedure for creating your server. You create a server adjusting it what kind of passwords do you want it to steal and to which hosting domain should the stolen passwords be sent to. The passwords are sent in form of logs. You can then download the logs in text format and explore through them.One of the most popular Stealers are iStealer and HackCommunity Stealer.

Spoiler: Pictures

HackCommunity Stealer made by The 7th Sage.The process of creating a server and testing the domain that is supposed to receive the logs.

Some of the explanations are complex. Sorry. I tried to explain the simplest i could. If your a newbie into the world of hacking softwares i suggest you visit THIS thread so you could have more understanding view of how these things work.

This tutorial was written by Dawnc0re - Local Injection Team