How to - Convert Quasar RAT into Shellcode with Donut.exe

แชร์
ฝัง
  • เผยแพร่เมื่อ 18 พ.ย. 2024

ความคิดเห็น • 45

  • @tlykuyiyhaa8382
    @tlykuyiyhaa8382 ปีที่แล้ว +3

    I'm going to try what you've done right now, I hope it works for me and thank you very much for the video

    • @wolfrevokcats7890
      @wolfrevokcats7890 11 หลายเดือนก่อน +1

      Did it work for you? Didn't work for me :(

    • @tlykuyiyhaa8382
      @tlykuyiyhaa8382 11 หลายเดือนก่อน

      @@wolfrevokcats7890 Yes, for me works, but you need change something, the video shows how to "start" but u need apply your

    • @Patel_jishan
      @Patel_jishan 10 หลายเดือนก่อน

      Did it work for you?

  • @MasculineMotivatorForMen
    @MasculineMotivatorForMen 11 หลายเดือนก่อน +3

    Got a
    "NMAKE : fatal error U1052: file 'Makefile.msvc' not found
    Stop."
    Any fix what so ever?

    • @MasculineMotivatorForMen
      @MasculineMotivatorForMen 11 หลายเดือนก่อน +1

      Fixed the Problem this was extremely helpful this video, as there are no videos remotely like this

    • @blvnt2
      @blvnt2 6 หลายเดือนก่อน

      @@MasculineMotivatorForMen how?

  • @BlazerGraphics
    @BlazerGraphics 2 หลายเดือนก่อน +2

    Is it used to bypass antiviruses???

  • @saritacontreras-mq3rr
    @saritacontreras-mq3rr ปีที่แล้ว +2

    Hello!
    When i put it nmake -f Makefile.msvc show error 'nmake' is not recognized as an internal or external command,
    operable program or batch file. Help me, please and thanks.

    • @gemini_security
      @gemini_security  ปีที่แล้ว +1

      Hi,
      make sure you have Visual Studio installed and you opened up the correct Command Prompt for Visual Studio. You will need C++ development tool installed in Visual Studio.
      You should be able to get more detailed troubleshooting and help if you Google the error.

    • @saritacontreras-mq3rr
      @saritacontreras-mq3rr ปีที่แล้ว

      @@gemini_security Thanks, when i open ConsoleApp1 show windows cmd, if i close this windows cmd lost connection in quasar. What I can do?

  • @filippodeluca9464
    @filippodeluca9464 9 หลายเดือนก่อน +1

    how do you have the commands and the tool bar below in the dashboard please help thanks... i dont have them

  • @Nahuel-os1hj
    @Nahuel-os1hj 3 หลายเดือนก่อน +1

    Is it used to bypass antiviruses?

  • @Coral_pepe
    @Coral_pepe 4 หลายเดือนก่อน +1

    thanx for the course man

  • @jibhax2119
    @jibhax2119 ปีที่แล้ว +1

    Awesome video as always, keep it up brother.
    Successfully compiled it, but getting some error while running the exe saying cannot find a file named {my_exe_name_.deps.json} to load.
    I am gessing its related to .NET runtime error.
    Could you please tell me which version of .Net you are using to compile also the version you have installed in your system?
    Thnaks

    • @wolfrevokcats7890
      @wolfrevokcats7890 11 หลายเดือนก่อน

      Had this problem before, I guess you must copy ConsoleApp1.exe to different folder.
      When you compile the app, it will generate a few file including ConsoleApp1.exe, ConsoleApp1.dll, ConsoleApp1.runtimeconfig.json, ConsoleApp1.deps.json.
      Copy loader.bin to that folder and run it. If 1 of the file missing, then that's it. "cannot find a file" error

  • @BabyTaxiVN
    @BabyTaxiVN ปีที่แล้ว +1

    nmake is not a recognized command batch file ??? 1:50
    Thanks you

    • @wolfrevokcats7890
      @wolfrevokcats7890 11 หลายเดือนก่อน +1

      Did you run it from "x64 Native Tools Command Prompt for VS 2022" or from normal CMD?

    • @DJ-Riggz
      @DJ-Riggz 2 หลายเดือนก่อน

      ⁠@@wolfrevokcats7890sorry old comment but I have same error and running from x64 native tools command line

  • @H088YHaX0R
    @H088YHaX0R ปีที่แล้ว +2

    Nice Video. I would launch the ConsoleApp1.exe in PowerShell like this < Start-Process -FilePath ".\ConsoleApp1.exe" -WindowStyle Hidden >, so you can close the PowerShell and not have the client disconnect from Quasar.

  • @bang1338
    @bang1338 ปีที่แล้ว +1

    nice, can i use c++ to launch shell code?

    • @gemini_security
      @gemini_security  ปีที่แล้ว

      I have not tried it personally but it should be possible!

  • @onur-i0x
    @onur-i0x ปีที่แล้ว +1

    it gives werfault with orcus and njrat. Could you help please

    • @gemini_security
      @gemini_security  ปีที่แล้ว

      I am not sure if Donut.exe supports all executable types. You can check out the official Github page and give it a read. You need to ensure that the file format type of "orcus" and "njrat" is supported by Donut.

    • @jibhax2119
      @jibhax2119 ปีที่แล้ว +1

      You can only convert exe to shellcode if the rat was written in c#. Donut doesn't support other languages yet for the shellcode.

    • @onur-i0x
      @onur-i0x ปีที่แล้ว

      @@jibhax2119 ım working on native stubs previously. ı hope gemini share tutorial to intagrate the code with sleep obf. Thanks. Also is it possible to set up custom dns server with any script ? I mean can we set payload using instead playit or any dns forward service?

    • @jibhax2119
      @jibhax2119 ปีที่แล้ว

      @@onur-i0x make it a little bit clear. By saying "custom dns server" do you mean tunneling or proxying for getting the reverse connection?

  • @demoneditz2429
    @demoneditz2429 ปีที่แล้ว +1

    Awesome Content

    • @gemini_security
      @gemini_security  ปีที่แล้ว

      Thanks. I'm glad you've found it to be useful and interesting!

  • @essabreahmed1391
    @essabreahmed1391 ปีที่แล้ว +1

    Great, thnks

  • @GenevieveTibona
    @GenevieveTibona 8 หลายเดือนก่อน +1

    Good job, but that is not bypass av

  • @clinton3098
    @clinton3098 6 หลายเดือนก่อน +1

    Guys could you tell me is it dangerous to use gitshub?

    • @Vix1n__
      @Vix1n__ 5 หลายเดือนก่อน

      No, it is perfectly safe, but very aware that some people post RATs (Remote Access Trojans) that gains info and can control your computer or iOS/android device.

  • @claudeorigi8764
    @claudeorigi8764 ปีที่แล้ว +1

    Hi mr gemini havoc c2 defender bypass thechnique video

    • @gemini_security
      @gemini_security  ปีที่แล้ว +1

      Hello,
      Once I have the time to setup Havoc c2 i will make a video on it. It is definitely on my to-do list.
      Cheers!

  • @j233wfyw
    @j233wfyw ปีที่แล้ว +1

    can you make a tutorial how to use quasar? i mean when im sending the client to my other laptop and run it nothing happens in my quasar host, it won't connect but when i run it my self the client is connected, i need help hope you understand my shitty english >_

    • @gemini_security
      @gemini_security  ปีที่แล้ว

      That seems like a network firewall problem. Can you even reach the other laptop in the first place? Maybe try setting up a web server and connecting to it, or ping the other laptop.

    • @j233wfyw
      @j233wfyw ปีที่แล้ว

      @@gemini_security it work, im using portmap and openvpn for port forwarding, thank you for your answer

    • @j233wfyw
      @j233wfyw ปีที่แล้ว

      but i want to ask you 1 thing, is there anyway to bypass microsoft defender for this quasar client so it can be undetectable?

  • @uzzairkhanniyazi5038
    @uzzairkhanniyazi5038 10 หลายเดือนก่อน +1

    Love you bro for helping

  • @DJ-jy5mu
    @DJ-jy5mu ปีที่แล้ว +1

    How can I run it to .exe because it is not working anytime I run it is 5k size

    • @wolfrevokcats7890
      @wolfrevokcats7890 11 หลายเดือนก่อน

      Which one? What error? Can you paste it here?
      My ConsoleApp1.exe is 137KB, ConsoleApp1.dll is exactly 5KB
      Your ConsoleApp1.exe code must be point to loader.bin file and it must be on the same directory