A remote administration tool (RAT) that bypasses the security features of a program, computer or network to give unauthorized access or control to its user.

Technical Details

Poison Ivy variants are backdoors that are created and controlled by a Poison Ivy management program or kit.

The Poison Ivy kit has a graphical user interface and is actively developed. The servers (the actual backdoors) are very small and are typically under 10kB in size. The size can however be considerably different if a packer or protector has been used to obfuscate the file.

Installation

Once executed, the backdoor copies itself to either the Windows folder or the Windows\system32 folder. The filename and locations are defined by the creator of the backdoor when using the Poison Ivy kit to create the server program.Some variants of Poison Ivy are capable of copying themselves into an Alternate Data Stream.

A registry entry will be added to ensure the backdoor is started every time the computer is booted up. The server then connects to a client using an address defined when the server-part was created. The communication between the server and client programs is encrypted and compressed. Below is the screenshot of the client application:

Poison Ivy can be configured to inject itself into a browser process before making an outgoing connection to help in bypassing firewalls.

Activity

Backdoor:W32/PoisonIvy gives the attacker practically complete control over the infected computer. Exact functionality depends on the variant in question but the following are the most common operations available to the attacker. Operations:

Files can be renamed, deleted, or executed. Files can also be uploaded and downloaded to and from the system

The Windows registry can be viewed and edited

Currently running processes can be viewed and suspended or killed

Current network connections can be viewed and shut down

Services can be viewed and controlled (for example stopped or started)

Installed devices can be viewed and some devices can be disabled

The list of installed applications can be viewed and entries can be deleted or programs uninstalled

Other functionality includes viewing a list of open windows or starting a remote command shell on the infected computer. Poison Ivy variants can also steal information by taking screenshots of the desktop and recording audio or webcam footage. They can also access saved passwords and password hashes.

Some variants also have a keylogger. Additional features not provided by the Poison Ivy configuration kit can be added by third party plugins.

Menu

Search

Askmewuzup 

The Official Blog 

CyberGate RAT Setup

Hello Hackforums, I just would like to show you how to setup CyberGate RAT 1.03 Cracked Version by CharlyX. This RAT does not have any connection limits

Available

Included with purchase of the

RatPack

Or Big Hack Pack 

First I will list here the Features:

Managers:

File Manager

Process Manager

Service Manager

Device Manager

Window Manager

Regitry Manager

Installed Programs

Active Port list

Spy:

Screen Capture

Webcam Capture

Password Recovery

Keylogger

Audio Capture

Network Tools:

Socks 4/5 Proxy

HTTP Proxy

Send File

Download and Execute

Open Webpage

URL Redirection

Extras

Dos Prompt

Quick Search (for logs)

Chat

Extras (open-close CD-ROM etc.)

So now here is a picture of the RAT:

So let’s start. First what you need is:

– NO-IP Account

– Port Forwarding

What you don’t need:

– Flame here

– Any Skills 😀

I will do this step by step. Enjoy:

1. Download CyberGate RAT v.1.03.0 CharlyX Version from the Link above.

2. Open it and set the listening ports and password. You need to go to Control Center>Start>Control Center>Setting>Select listening ports. This should look like this:

3. Set your ports and click on the Button with the next to the Port TextBox. Now the RAT is listening. Then just press “OK”. Now we need to build a server, so we need to go to Control Center>Builder>Create Server and there should appear this window:

4. Click on “Add User” and set your Nickname. You can type there what you want.

5. When done, there will appear a window. This should look like this:

6. Now, the most important part: In the IP list, you enter your IP (to connect to you), your port which you have setted up in step 2 (to connect to your IP on this port) and the password you made in Step 2 (The RAT Client will accept the Connection). It should look like this:

7. Now go to Installation Tab and choose your options. You can install or not install, startup or not startup etc. If you want to test the Server on your PC, I recommend to NOT check the options. If you are going to infect another Computers, I recomment To check all the options.

8. After you setted up all the options, go to the last Tab named “Create Server”. You can bind the File there etc. However you can do this if you are going to infect etc. but now when you test on your PC.

9. Click on “Create Server” and save your server where you want. After done, you can test it or send it to another People.

Now, here is a FAQ:

Q: What is CyberGate?

A: CyberGate is a remote administrative tool or trojan for Windows operating systems. You can use CyberGate to manage computers, monitoring your child etc.

Q: Where can I get CyberGate?

A: There is an website for CyberGate, but you can download it from my thread.

Q: What operating systems are supported by CyberGate?

A: Windows 95/95B

Windows 98/98SE

Windows ME

Windows NT 4.0

Windows 2000

Windows XP

Windows Vista

Windows 7

Q: Will CyberGate slow my computer?

A: No. CyberGate won’t slow your computer, it is small program and works in background and has been optimized to minimize resource use.

Q: When I downloaded CyberGate, I can’t extract it, a problem occrus. What should I do?

A: That’s because of your anti virus, they detect it as unwanted applications so your anti virus could prevent downloading. Disable your anti virus and try again.

Q: When I have downloaded CyberGate, my antivirus detect it as virus. What should I do?

A: Well, since RATs are hacktools, and all the hack tools are detected as viruses, Turkojan is detected as virus also. To download and install CyberGate you will need to turn off your anti-virus.

Q: Why should I use no-ip?

A: If you don’t have a static IP, you’re IP will change each time your Internet reconnects so the server won’t be able to reach you. To prevent loosing victims because of your dynamic IP, you will need no-ip host.

Q: What should I do after I install my server?

A: After you install your server, you should spread it. For more help on spreading CLICK HERE

Q: I’ve created a server, but I don’t see it in the directory. Why?

A: That’s caused by your antivirus. The server is detected, and it won’t let it. I suggest you to remove your antivirus if you are going to use RATs.

Q: I’ve send my server to a friend on MSN, but he doesn’t connect.

A: That’s because he has an antivirus or firewall and it won’t let him to connect in your RAT. To make it FUD(Fully Undetectable), you should use a crypter.

Q: Is CyberGate illegal?

A: No. CyberGate is a legal RAT. The author of CyberGate created his program for legitimate purposes. For example, there are many legal activities. Parents can use keyloggers to protect their children from online abuse etc. Some people use it for stealing passwords, credit cards and more but it’s not a software which breaks the law, but the person who uses it.

Q: Can CyberGate be used for legitimate purposes?

A: Yes. You can monitor your children online activity.. to make sure they don’t visit pornographic websites. You can find out if someone uses your computer while you are away, ensure no one is accessing your personal files while you are away and more.

Q: How do I make my server FUD?

A: You should use a binder or crypter.

THATS IT! Yeye Please say thanks!

CREDITS: V~I~R~U~S

PLEASE REPORT IF LINK IS BROKEN!

Share this:

FacebookX

Leave a Reply

Write a Comment...

Reply

View Full Site

Blog at WordPress.com.

[BIN]PoisonIvyCrypter

[SRC]BIoDox

[SRC]Zombie Slayer

BlackShadesPublic Edition

Cybergate 1.8

DarkComet 5.3.1

FormSettings

JRat

Language

Loki Rat

Paradox Rat

Plugin

PoisonLvy !.0.0

Profiles

Setting

Tiny v0.2

Xtreame Rat

Xtreame Rat 3.5

njRAt.exe

Spy'iNet

What is a RAT (remote access Trojan)?

A RAT (remote access Trojan) is malware an attacker uses to gain full administrative privileges and remote control of a target computer. RATs are often downloaded along with seemingly legitimate user-requested programs -- such as video games -- or are sent to their target as an email attachment via a phishing email.

Once the host system is compromised, intruders use a backdoor to control the host, or they may distribute RATs to other vulnerable computers and establish a botnet.

Belonging to the family of Trojan horse viruses, RATs are specifically designed to disguise themselves as legitimate content.

How does a remote access Trojan work?

A RAT is typically deployed as a malicious payload using exploit kits, such as Metasploit. Once installed, the RAT gets connected to the command-and-control server, which the hackers control. The hackers achieve this connection by compromising an open TCP port on the target device.

A RAT can also be installed through phishing emails, download packages, web links or torrent files. Users are duped into downloading malicious files through social engineering tactics, or the RAT is installed by threat actors after they gain physical access to a victim's machine, such as through an evil maid attack.

Spear phishing attack with RATDuring the fourth step in a targeted spear phishing attack, a RAT is installed on the target system.

Because a RAT provides a backdoor and enables administrative control, it empowers the intruder to do almost anything on the targeted computer, including the following:

Monitor user behavior, such as keystrokes, through keyloggers and spyware.

Access confidential information, such as credit card and Social Security numbers.

Activate a system's webcam and record video.

Take screenshots.

Distribute viruses and malware, as well as launch ransomware

Format drives.

Delete, download or alter files and file systems.q