Thread: DarkComet-RAT v5.2.2

older version thread can be found right there : [REL] DarkComet-RAT 4.2F

DarkComet RAT (aka Fynlosky.A by Microsoft) is a Remote Administration Tool that runs in background and open a full access to a target computer locally or remotely without letting know the owner of the target machine of his presence. It is considered by most Antivirus Companies if not all as a Trojan also know as Microsoft Windows Backdoor.
This software allow a person (possibly an Hacker, Company owner, A Security Consultant etc...) to see in full streaming the desktop, the webcam, listen on the Micro, grab the passwords, manage the files all remotely to a single remote machine or to a bunch of remote machine at the same time.


Note about the new 5.2 version

In this version there is more system side changes than graphical or functional like each new release some bugs were identify and fixed and some part of the code been improved especially for this version the broadcast functions / auto refresh and the multi thread system.
Using now a method i call Thread Multiplexing for the Listener.
Also old connection are half compatible with this new version, it will be display in red then you will be able to broadcast some task, if you wan't to open control center you must update it !

Special thanks to CrazyBoris, $instincts$, Nacra, for the testing

Description of the most important changes :

WIFI NETWORKS : You can finally see the remote WIFI networks and interfaces ( you can't connect to one of them, just see them, why ? how could you know the password of a remote WIFI station ?, and why you would like to risk being disconnected by doing a such action).

MINIMALIST EDITOR : A tiny server editor is now available (called minimalist) it only propose the most basic settings to be sure you will be able to crypt the output application, and to use it without any problems.
It is reserved for newbies and/or people that just need a basic installation.

REMOTE EDITOR : A unique function in RAT scene, this function allow you to patch the original settings of an existing remote stub with new one.
To use this function, simply use the full editor then instead of clicking on the build button, go to Stub Finalization then Generate the patch.

MORE STABLE : Even if DarkComet is already one of the most stable and functional RAT, each release is even more bug free, profit of a version bug free.
To be sure to use correctly this soft, don't forget to read the FAQ at the end of this thread.

REMOTE CHAT : Yay, finally this function is there !, you can open a chat section between you and one of many remote users, simply and without bloating the size of the remote app as it comes as a plugin.

PASSWORD IMPROVEMENT : Password plugin was improved and now recover FireFox, 9, 10 and 11 (the latest) successfully.

To see the whole changes read the following changelog : http://pastelol.com/qmnLou

To download the latest version of DarkComet it happens here : http://darkcomet-rat.com/

changelog :

DarkComet RAT 5.2
-----------------
By DarkCoderSc

[Curent changes 5.2]

- [FIX ] Access violation bug fixed when having to much users
- [FUNC] Better auto refresh SIN done
- [FIX ] UPX compress bug fixed
- [FIX ] The connection is more stable, even if the password is wrong it will not freeze the whole thread
- [FUNC] Now keeping the old darkcomet version modules in the user list in red
- [FUNC] Broadcast function are now more fluides, not freezing the main GUI during the process
- [FUNC] Show thumbnails function work more smoothy, don't freezing the main GUI during the process
- [FIX ] A tiny bug fixed in password recovery
- [FUNC] DarkComet RAT support multi instance if you really wan't it
- [FUNC] Now the remote chat stay on the top of each windows
- [FIX ] The keylogger support now extra symboles such as ~#{[|`\^@]}
- [FIX ] Keylogger controler GUI treeview resizing bug fixed
- [FIX ] If we are after midnight the keylogger will successfully update the target logger file then it avoid problems if the remote user never restart his compute
- [FUNC] Add in broadcast function (users list > popup > broadcast function) Upload and execute quick function
- [FUNC] Persistent process added
- [FIX ] Better melt

[Previous Changes 5.1]
- [GUI ] Control center GUI change a little bit
- [FUNC] New functions added in control center >> Network category, called WIFI Access points, now you can see near wifi networks and hardware wifi card(s)
- [GUI ] Now in layout settings you can change the main windows GUI if you don't like the default one.
- [FIX ] Fix the ftp upload keylogger problem
- [SYS ] Edit server settings system was revised and optimized
- [FIX ] DNS/IP backups issue fixed
- [SYS ] DNS/IP backups algorythm revised and more reliable
- [SYS ] Big problem fixed in client / server system
- [SYS ] Loader environement is more lite, unused function / variables been track and clean also few important functions been optimized
- [SYS ] Sound capture multithreading revised
- [SYS ] Server listenner multithreading revised
- [GUI ] Edit Server GUI changed, it is now more user friendly, also some help is now available for basic functions
- [FIX ] Custom icon loader fixed
- [FUNC] Quick Download / Upload added, it will upload / download single file very simply / fast and 100% multithreaded (can load infinite instance for each users)
- [FUNC] Add new Server Function, Upload file and execute
- [FUNC] HTML Scripting upload / execute improved and using the new upload system
- [FUNC] Batch Scripting upload / execute improved and using the new upload system
- [FUNC] VBS Scripting upload / execute improved and using the new upload system
- [FUNC] Update server improved and using the new upload system
- [GUI ] Sound capture design change a little bit
- [GUI ] Toast interface been improved
- [FUNC] Add two quick actions in Toast, open control center and kill user process
- [FUNC] Plugin upload remade using the new upload system
- [GUI ] Password interface been improved
- [FUNC] Export password list function added
- [FUNC] New function added in Computer Information tab, it will dump a lot of information about the remote computer (cant take up to 3min)
- [FUNC][HOT] Now you can edit the remote server using generated patch from edit server (change the settings in edit server then in finalization generate a new patch then upload to the user and it will take effect at the next process startup)
- [FUNC] Add a notification when you wan't to uninstall the server from the SIN
- [FIX ] Bug fixed on SIN when there is no user and you click on some shortcut
- [FUNC] Minimal edit server added, very simple, fast to use and good for newbies or people that doesn't need tons of choices but just the most important
- [FUNC] New IA system, detect if an old instance of DarkComet running at the same installation path, if yes it will regenerate a new path then avoid kind of installation errors
- [FUNC] Update from file added in SIN popup (users)
- [FIX ][HOT] A very huge bug was fixed in the connection thread, this was affecting random users and explain why they can't get connections.
- [FIX ] Password grabber support now FireFox 9 , 10 and 11 (the latest version)
- [GUI ] Windows 7 only, a green icon appear in taskbar icon when there is a least one port that listen successfully
- [GUI ] Now you can disable the default main window layout with a normal one
- [FIX ] Keepalive thread bug fixed
- [FUNC] DarkComet Logs is stored in a different dir now
- [FIX ] An issue in webcam capture, you need to wait that all threads are correctly shutdown before doing another capture
- [GUI ] The webcam capture user interface changed
- [FUNC] Remote chat plugin added
- [FIX ] If my server isn't able to be join, then the SOCKET ERROR will be mute and it will simply not update the noip.
- [FIX ] Uninstall bug fixed if using remote cmd befores
- [FIX ] When you cancel a transfer, the file handler is release
- [FIX ] Remote messagebox function is now async, it will not block other tasks until the remote user click
- [FIX ] Buz function is now async, same as messagebox

---------------------------------------------------------------------

LENGEND:

[GUI] = User interface modification
[FUNC] = Function modification / add / remove
[FIX] = Bug fixed
[SYS] = System modification

Screens :























DarkComet RAT FAQ (Read it carefully)

Introduction:
An issue never happened without any reasons, i admit it can sometimes result of a bug in my side but most of the time it is an illusion to consider something that seems to not work like it should as a bug.
A real bug is an issue that occurred to every single users, not something that happened to some one but not an other one.

If you are sure that an issue was found and clearly identify, mail me at darkcodersc@gmail.com with a large description of the problem and the steps to reproduce the glitch.

Questions / Answers

Where to download the latest version of DarkComet RAT ?
To find the latest DarkComet just go to http://darkcomet-rat.com/ then click on download tab and chose the latest version (the latest is always the first on the page)

When i extract DarkComet i get an Error Message?
As DarkComet is concidered by most Antivirus softwares as a trojan backdoor, you must disable the resident shield of your Antivirus program then extract again.

Why DarkComet is flagged as a Malware ?
It is normal as DarkComet allow anybody to remote control any kind of machine around the world without a single authorization, so as some Hackers use it Antivirus must flag it.

Is DarkComet gathering some information on my computer ?
Absolutely not, when you use DarkComet you stay fully anonymous, i don't gather any personal information nor i stored your IP somewhere, the only communication between you and me (my website) is to get your External IP (WAN IP) for the noip updater, trace route and edit server "get WAN IP"

Is DarkComet usage illegal ?
Well it depends how you use it, if you use it to control remote machines without any authorization from the owner then yes, if you use it in your own network then it is fully legal.
Also the law is different between countries, check out the law of your resident country.

I execute a stub on myself it didn't show up in the list ?
First of all be sure to listen on the chosen port, if you chose in edit server the port 1604 then be sure your client listen to the same port.
Also the best choice to control yourself is to chose your LAN IP instead of WAN IP, the LAN ip can be found using the MS DOS command ipconfig, it looks like 192.168.1.xxx.

A friend execute the stub, but nothing show up ?
First like the previous question, be sure you listen to the chosen port, then unlike the last question when you wan't to control a remote user (not in the same network than you) you must be sure you forward your port (forwarding means your router will not filter on a target port and then block the incoming traffic), a lot of tutorials exists on google, when you successfully forward your ports check it at http://canyouseeme.org/ until it don't confirm your ports are open there is a problem in your side !
Last thing, you must disable firewalls in the controller side (DarkComet.exe), they might filter DarkComet program as it is flagged as malicious.

I wan't to crypt DarkComet but it never works ?
Create a stub using the minimalist editor or disable the FWB function in the full editor "first page"

Official website : http://darkcomet-rat.com/
Official forum : http://opensc.ws/

thx Dark for the release!!!

Fuck all the HF kids Moms who DDOSing your site

Its not only HF its some people that loosing money cause of me, i like to see them MAD like that ROFL !!! and i will continue

Very good job DarkCoder. I really like your projects.

New UI looks good. Also, pretty sure you can report the IPs that are flooding your server (then again, dunno how much you care). Also, file version is still 4.2.

Originally Posted by Joomla12

New UI looks good. Also, pretty sure you can report the IPs that are flooding your server (then again, dunno how much you care).

I will give this job to my hoster i don't pay 100€/months for a shit like that

One more thing. Could be just me but the No-IP updater isn't working properly. It says that it can't reach the no-ip server.

Yes since my website is down noip can't work, it needs to reach darkcomet-rat.com to get your WAN ip thats why it is slow and display a socket error message

The new DC5 works good for me.. very stable connection thx bro



i'm using dyndns.

GUI look amazing you are always the best