How to Keep Your Slaves Longer

[Newer]

# Tip 1 # Use a Dynamic IP (such as No-Ip or DynDns)

Ok, I know a lot of people at some time or another have wondered why use a No-Ip/DynDNS when setting up a RAT/Hostbooter. Well the reason is simple, most peoples IP addresses change often. If the bot you spreaded is told to connect to 192.168.1.1 and your IP changes to 192.168.1.2, it will connect, just not to the right IP! So in order to make sure that it will connect the right way, we use a dynamic dns. Usually, this is what tools like the No-IP DUC are used for, so on start up of your computer everyday it will update your No-IP host.

# Tip 2 # FUD-ing the Server

Of course we want the server to be completely undetectable to A/V programs for the best possible results, right? So if it is FUD, you typically get more installs, and then once it is installed, these tend to stay connected longer.

# Tip 3 # Setup your Server Correctly

# Tip 4 # Updating the Server

This method is rarely used, and that is wrong. The trick is, if you have a crypter, every so often, you want to update the computer with a new FUD server. This makes it where if the old server is detected, you will still be connected to the victim.

# Tip 5 # Giving Your Servers Dated ID's

This goes hand-in-hand with before. When updating the servers, it is not a bad idea to give it a new connection name. Say the server you used before is named Example. When making the new FUD server for updating, rename the server something like "Ex 29/Jan/2011". This will let you know when the last time you updated your server was.

# Tip 6 # Infect VIP Slaves With Multiple Servers

This is a pretty bad ass move. If you have infected somebody like a hot girl who walks around her house naked all day and you DEFINITELY do not want to lose her as your slave, try setting up multiple RAT's or use the same RAT, but ENTIRELY different connection information. This helps make your VIP a VIC. (Im sorry I had to say it...)

# Tip 7 # Always Use the Injection Option

Some people say that it makes it less stable or more detectable. I personally inject into default browser every chance I get