How to - Convert Quasar RAT into Shellcode with Donut.exe
Vložit
- čas přidán 20. 09. 2023
- Be better than yesterday
In this video, we will explore how we can convert .EXE payload files into shellcode with Donut.exe. The infamous Quasar RAT client .EXE file is used as an example.
This video provides step-by-step instructions and showcases how we can compile Donut.exe on a Windows x64 system, and use Donut.exe to turn the Quasar RAT client .EXE file (Client-built.exe) into a shellcode file. The video then demonstrates successful execution with the Quasar RAT shellcode file via a C# shellcode launcher program.
DISCLAIMER:
All content posted on this CZcams channel is SOLELY FOR Educational and Awareness purposes ONLY. Any actions and/or activities related to the material presented in this CZcams channel is entirely YOUR responsibility.
We DO NOT promote, support, encourage any illegal activities such as hacking, and we WILL NOT BE HELD responsible in the event of any misuse and abuse of the content resulting in any criminal charges.
Free Udemy Course on Introduction to Phishing:
www.udemy.com/course/intro-to...
Stay connected:
Twitter: / gemini_security
Udemy: www.udemy.com/user/gemini-88/
Github: github.com/gemini-security
Discord: / discord
References used:
Quasar RAT:
github.com/quasar/Quasar
Donut:
github.com/TheWover/donut
C# Shellcode Launcher:
github.com/mvelazc0/defcon27_...
Looking to donate?
BTC: 19HiqQ2Qw83mxK9dcdoWb8VfAcsNgmp52k
thanx for the course man
I'm going to try what you've done right now, I hope it works for me and thank you very much for the video
Did it work for you? Didn't work for me :(
@@wolfrevokcats7890 Yes, for me works, but you need change something, the video shows how to "start" but u need apply your
Did it work for you?
Great, thnks
Awesome Content
Thanks. I'm glad you've found it to be useful and interesting!
Got a
"NMAKE : fatal error U1052: file 'Makefile.msvc' not found
Stop."
Any fix what so ever?
Fixed the Problem this was extremely helpful this video, as there are no videos remotely like this
@@MasculineMotivatorForMen how?
how do you have the commands and the tool bar below in the dashboard please help thanks... i dont have them
Awesome video as always, keep it up brother.
Successfully compiled it, but getting some error while running the exe saying cannot find a file named {my_exe_name_.deps.json} to load.
I am gessing its related to .NET runtime error.
Could you please tell me which version of .Net you are using to compile also the version you have installed in your system?
Thnaks
Had this problem before, I guess you must copy ConsoleApp1.exe to different folder.
When you compile the app, it will generate a few file including ConsoleApp1.exe, ConsoleApp1.dll, ConsoleApp1.runtimeconfig.json, ConsoleApp1.deps.json.
Copy loader.bin to that folder and run it. If 1 of the file missing, then that's it. "cannot find a file" error
Hello!
When i put it nmake -f Makefile.msvc show error 'nmake' is not recognized as an internal or external command,
operable program or batch file. Help me, please and thanks.
Hi,
make sure you have Visual Studio installed and you opened up the correct Command Prompt for Visual Studio. You will need C++ development tool installed in Visual Studio.
You should be able to get more detailed troubleshooting and help if you Google the error.
@@gemini_security Thanks, when i open ConsoleApp1 show windows cmd, if i close this windows cmd lost connection in quasar. What I can do?
nice, can i use c++ to launch shell code?
I have not tried it personally but it should be possible!
nmake is not a recognized command batch file ??? 1:50
Thanks you
Did you run it from "x64 Native Tools Command Prompt for VS 2022" or from normal CMD?
How can I run it to .exe because it is not working anytime I run it is 5k size
Which one? What error? Can you paste it here?
My ConsoleApp1.exe is 137KB, ConsoleApp1.dll is exactly 5KB
Your ConsoleApp1.exe code must be point to loader.bin file and it must be on the same directory
Nice video ❤ ! I don't understand, what is entropy ???
Entropy is simply the amount of randomness I think in the code right ??
The donut.exe console menu will explain how specifying the entropy level will affect the output file.
@@gemini_securityFriend, how can I compile the .exe in release mode directly from Visual Studio? Without using the operator's builder.
Love you bro for helping
Nice Video. I would launch the ConsoleApp1.exe in PowerShell like this < Start-Process -FilePath ".\ConsoleApp1.exe" -WindowStyle Hidden >, so you can close the PowerShell and not have the client disconnect from Quasar.
That is a useful tip!
Good job, but that is not bypass av
que video objetivo amigo , obrigado pelo conteudo
Guys could you tell me is it dangerous to use gitshub?
No, it is perfectly safe, but very aware that some people post RATs (Remote Access Trojans) that gains info and can control your computer or iOS/android device.
Hi mr gemini havoc c2 defender bypass thechnique video
Hello,
Once I have the time to setup Havoc c2 i will make a video on it. It is definitely on my to-do list.
Cheers!
it gives werfault with orcus and njrat. Could you help please
I am not sure if Donut.exe supports all executable types. You can check out the official Github page and give it a read. You need to ensure that the file format type of "orcus" and "njrat" is supported by Donut.
You can only convert exe to shellcode if the rat was written in c#. Donut doesn't support other languages yet for the shellcode.
@@jibhax2119 ım working on native stubs previously. ı hope gemini share tutorial to intagrate the code with sleep obf. Thanks. Also is it possible to set up custom dns server with any script ? I mean can we set payload using instead playit or any dns forward service?
@@onurkacmaz2641 make it a little bit clear. By saying "custom dns server" do you mean tunneling or proxying for getting the reverse connection?
can you make a tutorial how to use quasar? i mean when im sending the client to my other laptop and run it nothing happens in my quasar host, it won't connect but when i run it my self the client is connected, i need help hope you understand my shitty english >_
That seems like a network firewall problem. Can you even reach the other laptop in the first place? Maybe try setting up a web server and connecting to it, or ping the other laptop.
@@gemini_security it work, im using portmap and openvpn for port forwarding, thank you for your answer
but i want to ask you 1 thing, is there anyway to bypass microsoft defender for this quasar client so it can be undetectable?