[zenith]

Nice explanation, however I think this is known as a HTTP RAT if it's using a web page? Also if someone decompiles your malware they can find the URL pretty easily. I am still a fan of standard RAT's which aren't reliant on a web server, also for the fact I dislike PHP. Correct me if I'm wrong. But my RAT I am working on doesn't require any web pages, only the client and the server (done in C#).

They can, but most people are retarded.

Trade off to that though is that it's extremely easy to find out who made the RAT

I remember one kid spreading his RAT like wildfire. Someone wiresharked it (I think this is what I've heard) and found his ip. Called the kids ISP and got him kicked off it.

Fun day.