[beeeeech]

I'm currently in my last semester for my bachelor's degree. My FYP(final year project) is either to:
1) Create a malware which would infect the systems in my university's lab, and gain access to its servers.
OR
2) Create a RAT(remote administration tool), and successfully plant it onto one of my faculty member's computer without detection of any sort.

Note: My project has been approved by the Head of Department, so there is no issue regarding any breach of terms or anything of that sort.

I am going to code either one of these in C++. My C++ knowledge consists of writing functions, creating algorithms and OOP. I won't say I am an advanced coder of C++; I fit into the intermediate category.

What I would like to know is, where should I start if I want to code a malware, or even write a RAT? I've never come across any hacking syntax codes, so I pretty much don't know anything about them.

Also, I am using "Codeblocks" compiler for now. If you guys have any suggestion for a better compiler for C++, do let me know as well.

Looking forward to a long discussion in the days ahead, I have pretty much a month to code all this >_<

[masters121]

First you have to decide what route you wish to go. This way you can focus your recon in that area.

I assume that no one meaning the faculty members know of your project. If that is correct then they would more than likely be the easiest targets. If they do know of the project might be a bit tuffer

[beeeeech]

My preference is the malware, so lets start with that.

Only the HOD, and a single faculty member(my project leader) know of my project.



EDIT: Aren't there any virus coders out there? Really hoping for some direction.

[ArkPhaze]

Have you done anything with asynchronous sockets before in C++?

[beeeeech]

Have you done anything with asynchronous sockets before in C++?

No, nothing of that sort.

Btw let me layout the structure of how the computers are configured in the lab.
1. All the PC's have Sophos antivirus installed.
2. They have "Auto-Purge" software installed (I will find out which one and let you know soon), which are configured to delete any data stored on the PC daily on shutdown in the evening.
3. All administrator access is restricted, task manager, control panel, cmd are all locked.

What my malware should be able to do?
1. Stay undetected from Sophos antivirus.
2. Stay hidden from the Auto-Purge software, and shouldn't be deleted.
3. Attach itself onto connected USB's
3. Infect the system and perform malicious activity (for e.g, display a text message across all computer screens at a specific time)
4. Spread itself to other computers in the lab via LAN

[ArkPhaze]

Would you expect to become an astronaut on day 1? Just wondering.

[beeeeech]

Would you expect to become an astronaut on day 1? Just wondering.

No i don't. I want some guidance as to how should i proceed in order to achieve my objectives. Would be a really helpful if you could tell me what should i learn right now, and then once im done with it, what should i learn next etc.

[ArkPhaze]

You should learn networking first. Work on dealing with sockets, opening a socket on a specific port, sending/receiving data, closing the socket. As far as I can tell just by asking you that first question, you don't have any of the per-requisites for writing malware. You are just like the rest of those starting programmers that want to write malware after a few weeks of learning a programming language, it doesn't work that way. Writing the code is only part of it, you need to know how various IP based protocols work first, and you need to know what the various protection measures are that come pre-packaged within the Windows OS. If you just neglect all that, then sure, you can write a piece of malware that will set the computer tower on fire in a purple flame... Until then, you still need to do lots of research before you even start IMO. Do you know when to use constexpr? const member functions? protected vs private? Class object inheritance? noexept? explicit reference passing through templates? C++ is a large language on it's own, and for any malware to be efficient, you need to know at least a few of the nuances of the language itself before you can write much, because lots of lower level work typically requires some pretty convoluted strategies. I'm just saying, a month to write what you're wanting to do? Forget it... Especially since you still don't have any experience with what is required to write such malware that you're talking about.

I'm prodding at the fact that you still don't know all of what C++ is about and malware in general. In some ways, you're talking like most of our presidents do when they promise improved environmental cleanliness with harmful emissions that damage the ozone layer, and most of all something along the lines of 'peace on earth' (as an extremist example). Until it happens, it's all talk.

Have you written any trampoline hooks?

[beeeeech]

I understand everything that you've said. Just to clear things up, I've been coding in C++ for the past 4 years. It's just that all of my coding was for the assignments and I never really played around with the language itself to learn and stumble upon new things.

Yes, I do have a month to write this code, and I know that it is achievable if I have a good mentor.

What I would like from you is, please list down a list of pre-requisites in your mind which you think I should learn so that I start ASAP. I'm going to work on networking for now.

You're right, until it happens its all talk. But thats the thing, I won't know till I try. And I know I'll give it my best as long as I have guidance.

My goal right now is to learn "opening a socket on a specific port, sending/receiving data, closing the socket" by this Saturday.

I haven't written any trampoline hooks. But I can learn about them later if you think they're necessary.

[BORW3]

I understand everything that you've said. Just to clear things up, I've been coding in C++ for the past 4 years. It's just that all of my coding was for the assignments and I never really played around with the language itself to learn and stumble upon new things.

Yes, I do have a month to write this code, and I know that it is achievable if I have a good mentor.

What I would like from you is, please list down a list of pre-requisites in your mind which you think I should learn so that I start ASAP. I'm going to work on networking for now.

You're right, until it happens its all talk. But thats the thing, I won't know till I try. And I know I'll give it my best as long as I have guidance.

My goal right now is to learn "opening a socket on a specific port, sending/receiving data, closing the socket" by this Saturday.

I haven't written any trampoline hooks. But I can learn about them later if you think they're necessary.

I am no expert but I think ou should first of familiarize yourself with TCP/IP network layers structures before going into sockets and all that, its most common layer strategy used, hell the internet is base on it.