How to - Convert Quasar RAT into Shellcode with Donut.exe

Поділитися
Вставка
  • Опубліковано 28 гру 2024

КОМЕНТАРІ • 49

  • @tlykuyiyhaa8382
    @tlykuyiyhaa8382 Рік тому +3

    I'm going to try what you've done right now, I hope it works for me and thank you very much for the video

    • @wolfrevokcats7890
      @wolfrevokcats7890 Рік тому +1

      Did it work for you? Didn't work for me :(

    • @tlykuyiyhaa8382
      @tlykuyiyhaa8382 Рік тому

      @@wolfrevokcats7890 Yes, for me works, but you need change something, the video shows how to "start" but u need apply your

    • @Patel_jishan
      @Patel_jishan Рік тому

      Did it work for you?

  • @Coral_pepe
    @Coral_pepe 6 місяців тому +1

    thanx for the course man

  • @BabyTaxiVN
    @BabyTaxiVN Рік тому +1

    nmake is not a recognized command batch file ??? 1:50
    Thanks you

    • @wolfrevokcats7890
      @wolfrevokcats7890 Рік тому +1

      Did you run it from "x64 Native Tools Command Prompt for VS 2022" or from normal CMD?

    • @DJ-Riggz
      @DJ-Riggz 3 місяці тому

      ⁠@@wolfrevokcats7890sorry old comment but I have same error and running from x64 native tools command line

  • @khalilnacef8089
    @khalilnacef8089 Місяць тому +1

    Hey Gemini , you have high quality content i always wait for your videos it helped a lot in my carrer as a red teamer !, but why you don't add videos on your channel anymore , please don't stop !

  • @BlazerGraphics
    @BlazerGraphics 3 місяці тому +2

    Is it used to bypass antiviruses???

  • @Nahuel-os1hj
    @Nahuel-os1hj 5 місяців тому +1

    Is it used to bypass antiviruses?

  • @saritacontreras-mq3rr
    @saritacontreras-mq3rr Рік тому +2

    Hello!
    When i put it nmake -f Makefile.msvc show error 'nmake' is not recognized as an internal or external command,
    operable program or batch file. Help me, please and thanks.

    • @gemini_security
      @gemini_security  Рік тому +1

      Hi,
      make sure you have Visual Studio installed and you opened up the correct Command Prompt for Visual Studio. You will need C++ development tool installed in Visual Studio.
      You should be able to get more detailed troubleshooting and help if you Google the error.

    • @saritacontreras-mq3rr
      @saritacontreras-mq3rr Рік тому

      @@gemini_security Thanks, when i open ConsoleApp1 show windows cmd, if i close this windows cmd lost connection in quasar. What I can do?

  • @MasculineMotivatorForMen
    @MasculineMotivatorForMen Рік тому +3

    Got a
    "NMAKE : fatal error U1052: file 'Makefile.msvc' not found
    Stop."
    Any fix what so ever?

    • @MasculineMotivatorForMen
      @MasculineMotivatorForMen Рік тому +1

      Fixed the Problem this was extremely helpful this video, as there are no videos remotely like this

    • @blvnt2
      @blvnt2 7 місяців тому

      @@MasculineMotivatorForMen how?

  • @filippodeluca9464
    @filippodeluca9464 10 місяців тому +1

    how do you have the commands and the tool bar below in the dashboard please help thanks... i dont have them

  • @demoneditz2429
    @demoneditz2429 Рік тому +1

    Awesome Content

    • @gemini_security
      @gemini_security  Рік тому

      Thanks. I'm glad you've found it to be useful and interesting!

  • @jibhax2119
    @jibhax2119 Рік тому +1

    Awesome video as always, keep it up brother.
    Successfully compiled it, but getting some error while running the exe saying cannot find a file named {my_exe_name_.deps.json} to load.
    I am gessing its related to .NET runtime error.
    Could you please tell me which version of .Net you are using to compile also the version you have installed in your system?
    Thnaks

    • @wolfrevokcats7890
      @wolfrevokcats7890 Рік тому

      Had this problem before, I guess you must copy ConsoleApp1.exe to different folder.
      When you compile the app, it will generate a few file including ConsoleApp1.exe, ConsoleApp1.dll, ConsoleApp1.runtimeconfig.json, ConsoleApp1.deps.json.
      Copy loader.bin to that folder and run it. If 1 of the file missing, then that's it. "cannot find a file" error

  • @bang1338
    @bang1338 Рік тому +1

    nice, can i use c++ to launch shell code?

    • @gemini_security
      @gemini_security  Рік тому

      I have not tried it personally but it should be possible!

  • @essabreahmed1391
    @essabreahmed1391 Рік тому +1

    Great, thnks

  • @H088YHaX0R
    @H088YHaX0R Рік тому +2

    Nice Video. I would launch the ConsoleApp1.exe in PowerShell like this < Start-Process -FilePath ".\ConsoleApp1.exe" -WindowStyle Hidden >, so you can close the PowerShell and not have the client disconnect from Quasar.

  • @GenevieveTibona
    @GenevieveTibona 9 місяців тому +2

    Good job, but that is not bypass av

  • @claudeorigi8764
    @claudeorigi8764 Рік тому +1

    Hi mr gemini havoc c2 defender bypass thechnique video

    • @gemini_security
      @gemini_security  Рік тому +1

      Hello,
      Once I have the time to setup Havoc c2 i will make a video on it. It is definitely on my to-do list.
      Cheers!

  • @onur-i0x
    @onur-i0x Рік тому +1

    it gives werfault with orcus and njrat. Could you help please

    • @gemini_security
      @gemini_security  Рік тому

      I am not sure if Donut.exe supports all executable types. You can check out the official Github page and give it a read. You need to ensure that the file format type of "orcus" and "njrat" is supported by Donut.

    • @jibhax2119
      @jibhax2119 Рік тому +1

      You can only convert exe to shellcode if the rat was written in c#. Donut doesn't support other languages yet for the shellcode.

    • @onur-i0x
      @onur-i0x Рік тому

      @@jibhax2119 ım working on native stubs previously. ı hope gemini share tutorial to intagrate the code with sleep obf. Thanks. Also is it possible to set up custom dns server with any script ? I mean can we set payload using instead playit or any dns forward service?

    • @jibhax2119
      @jibhax2119 Рік тому

      @@onur-i0x make it a little bit clear. By saying "custom dns server" do you mean tunneling or proxying for getting the reverse connection?

  • @uzzairkhanniyazi5038
    @uzzairkhanniyazi5038 11 місяців тому +1

    Love you bro for helping

  • @clinton3098
    @clinton3098 7 місяців тому +1

    Guys could you tell me is it dangerous to use gitshub?

    • @Vix1n__
      @Vix1n__ 6 місяців тому

      No, it is perfectly safe, but very aware that some people post RATs (Remote Access Trojans) that gains info and can control your computer or iOS/android device.

  • @j233wfyw
    @j233wfyw Рік тому +1

    can you make a tutorial how to use quasar? i mean when im sending the client to my other laptop and run it nothing happens in my quasar host, it won't connect but when i run it my self the client is connected, i need help hope you understand my shitty english >_

    • @gemini_security
      @gemini_security  Рік тому

      That seems like a network firewall problem. Can you even reach the other laptop in the first place? Maybe try setting up a web server and connecting to it, or ping the other laptop.

    • @j233wfyw
      @j233wfyw Рік тому

      @@gemini_security it work, im using portmap and openvpn for port forwarding, thank you for your answer

    • @j233wfyw
      @j233wfyw Рік тому

      but i want to ask you 1 thing, is there anyway to bypass microsoft defender for this quasar client so it can be undetectable?

  • @DuyLe-bo3yd
    @DuyLe-bo3yd Місяць тому +1

    I tried using the loader.bin file instead to make it encode xor to poc.exe file according to this video but it doesn't run ua-cam.com/video/hWbfifU8TtA/v-deo.html&ab_channel=GeminiCyberSecurity.

  • @DJ-jy5mu
    @DJ-jy5mu Рік тому +1

    How can I run it to .exe because it is not working anytime I run it is 5k size

    • @wolfrevokcats7890
      @wolfrevokcats7890 Рік тому

      Which one? What error? Can you paste it here?
      My ConsoleApp1.exe is 137KB, ConsoleApp1.dll is exactly 5KB
      Your ConsoleApp1.exe code must be point to loader.bin file and it must be on the same directory