Original subtitles

Now in this lecture, I'd like to show you another tool that allow us to generate undetectable backdoors.

This tool is called TheFatRat and you can think of it as a tool that's similar to Veil-Evasion.

It doesn't use the same techniques as Veil-Evasion but it allow us to generate backdoors,

that if executed on the target computer, they give us full access to that computer.

Now, you might think why am I teaching you a tool that does exactly the same thing as Veil-Evasion.

Well, the reason is as I said before, when it comes to antivirus 'Evasion', we are going in a loop,

so antivirus programs release an update that render Veil and other programs maybe, detectable.

So you might have to modify the options of the payloads, like I said before

or you could just try to use a different tool.

So I'm showing you a different tool, just in case you're trying to generate a backdoor using 'Veil'

and it's getting detected then you can just come in and try a different tool.

And in this example, we're gonna be trying TheFatRat

and we'll see how that generates undetectable backdoors as well.

The case could be the opposite, you might be generating something using TheFatRat

and it gets detected and in that case you can go and try with Veil-Evasion.

Now, always you need to keep in mind that you want to make sure that these tools are always updated.

So you wanna make sure you have the latest update

and you should be able to bypass most, if not all antivirus programs.

The Fat Rat also has options to generate backdoors for other operating systems

such as Mac OS, Linux and Android and we'll talk about that later on in the course.

For now, we're gonna talk about installing Fat Rat

because it doesn't come pre-installed in Kali.

So the first thing you want to do is go to their website

and I'm gonna put it in the resources of the course

or you can just literally, go to google and search for The Fat Rat.

So to download something from 'Git' you an use the 'Git' command

and the first thing you want to do is click here and 'get the URL for the project.

So I'm going to copy this and that's all I need for now.

So I'm gonna close this window.

I'm going to open my terminal

and I'm going to install the fat rat in OPT, in the OPT path.

So to do that I'm going to use 'cd' to open and then I'm gonna go to '/opt'.

Now I'm gonna download or clone The Fat Rat and I've already copied its URL.

Now, to clone or download something from 'GitHub', all you have to do is just do 'git clone'

and then put the URL of that project that I just copied.

So I'm gonna hit Enter and that's gonna create a new directory for me.

Okay, now that the download is done, I'm gonna do 'Ls' to list the files or directories

and as you can see again, we have The Fat Rat right here.

So I'm gonna navigate into that and I'm going to do 'cd' to navigate into a directory

and then we're going to put the directory name, which is 'TheFatRat'.

If we do 'Ls' to list again, you can see all the files have been downloaded.

Now we need to set up the tool before we can use it.

So we have to run this setup script.

To do that we have to first change its permissions to executable.

You can do that using the 'chmod' command and then we're going to do '+x'

and put the filename that we want to change its permission and it's 'setup.sh'.

So the reason why we're doing this is because we want to execute that file,

we want to execute 'setup.sh' and right now, it's not executable.

So we're using the 'chmod' command to change its permission

and this is the permission that we want to use, which is the executable permission.

And we're doing it to this file.

Now, if I hit Enter and do 'Ls', you'll see that the file color has changed to green,

which means that it's an executable now.

So to run this file I'm just gonna do './' and I'm gonna put the file name.

So now, if I hit Enter that's gonna run the installer for me

and the Installer is first checking if I have, if there is anything missing

and as you can see so far, everything is installed by default.

And if there was anything missing, it will tell us that this is missing and I'm gonna install it for you.

Again, just like Veil-Evasion, it's checking for libraries and packages

that it's gonna need to use when generating the backdoors

and you can see, it just discovered that there is a dependency in Ruby, that's not met.

And it's downloading it and installing it automatically.

Okay, now it's finished everything and it's asking me if I want to create a shortcut for FatRat.

Basically, what this does is, it'll allow us to run TheFatRat command from anywhere within the system.

So we don't have to navigate into its directory.

We won't have to do 'cd/opt/TheFatRat' and then run The Fat Rat.

We'll be able to run this from anywhere.

So I'm just gonna say, 'Yes' and that's telling me that it's done and we can use it now from anywhere.

And that's it.

The installation is complete.

Now, if we run TheFatRat and hit Enter, you'll see the program starting up

and it's just giving us a note, not to upload the viruses or the backdoors

that we create to 'VirusTotal', upload them to 'NoDistribute'.

We're already doing that.

So we're gonna say yes, no problem and that's it.

Now the tool is ready to be used and we're going to talk about it in future videos.

For now we're just, we just had a look on how to install it

and as we did that, we actually learned a few Linux commands,

that's gonna come in handy on the long run.