i4info Provides the best hacking Material. Latest hacking tutorials and tools are available here. It is the best place for hackers.

Latest topics

» Private SQL Dorks [Daily Updates]
Today at 2:49 am by Admin

» Teen Patti Gold Hack & 3 Patti Chips Code Extra Bonus 2016
Sun Oct 23, 2016 8:23 pm by Admin

» SQL Vulnerable Website
Sun Oct 23, 2016 5:04 pm by Admin

» YouTube Video Downloader (YTD) PRO
Fri Oct 21, 2016 7:02 pm by Admin

» PDF Decrypter Pro
Fri Oct 21, 2016 7:00 pm by Admin

» 2016 Dorks list
Thu Oct 20, 2016 5:49 pm by Admin

» PHP Mailer Script
Mon Oct 17, 2016 5:38 pm by Admin

» The Ultimate Interview Guide: 30 Prep Tips for Job Interview Success
Sun Oct 16, 2016 5:32 pm by Admin

» How to track who visited my Facebook profile?
Sun Oct 16, 2016 12:59 am by awarii

October 2016


Calendar Calendar


free forum

Forumotion on Facebook Forumotion on Twitter Forumotion on YouTubeForumotion on Google+

Visitors Counter

Flag Counter

About Author

Muhammad Shahroze Rashid
Web Developer
Web Developer & Designer,Researcher and Technical writer. An Information Security Consultant and System Auditor, a keen Security researcher.
lahore, Punjab
[email protected]
DOB: 05/25/1992
Muhammad Shahroze Rashid
Muhammad Shahroze Rashid is a Web Developer and Designer, Android Developer, InfoGrapher, IT consultant and Researcher
Reviewed by Google
Date published: 01/19/2016
9 / 10 stars
Muhammad Shahroze Rashid
Muhammad Shahroze Rashid Web Developer & Designer,Researcher and Technical writer. An Information Security Consultant and System Audito

How to Setup Dendroid (Android RAT)



Was this Article Helpful?

[ 3 ]
75% [75%] 
[ 1 ]
25% [25%] 

Total Votes: 4


Posts : 438
Reputation : 3
Join date : 2014-12-10
Age : 24
Location : Pakistan

How to Setup Dendroid (Android RAT)

Post by Admin on Thu Sep 08, 2016 2:02 am

This Tutorial shows you how to set up the old (First leaked in March 2014) but functional Remote Administration Tool for Android "Dendroid". It was first offered on black markets for 300$, but after the leak you can get it for free: [You must be registered and logged in to see this link.] If you prefer Open-Source Tools you can either use the github Link: [You must be registered and logged in to see this link.]

If you need some pictures of the whole process you can use

First you need the Dendroid Source, given abouth.

Then you need the Android SDK and Eclipse with Android ADT: SDK Tools Only [You must be registered and logged in to see this link.] and Android ADT for Eclipse (Of course you need Eclipse too). Installation of them is explained later.

And at least you need a Webserver with PHP and MySql. For example [You must be registered and logged in to see this link.]

Setting Up the Web Panel
I will use bplaced.net as an example for setting up the webserver:

Create an Account (The username is the Domain of your Server)
Now You see the control panel of your Webserver
Navigate to [You must be registered and logged in to see this link.] and add a MySql database
Now go to phpmyadmin (phpmyadmin..bplaced.net)
Select your Database on the left side of phpmyadmin and then click on import at the top and add the Sql file located in Dendroid>Dendroid Panel>Other files. This should add the required Tables
Navigate to the Dendroid Panel Folder and then to the Folder "Panel". Open applysettings.php, blockbot.php ,deletebot.php ,deletefile.php ,deletepics.php ,functions.php, table.php, clearawaiting.php, clearmessages.php In your text editor of your choice. In every file you will see $url = "http://pizzachip.com/rat/"; Change this adress with the adress of your Webserver, for example: $url = "http://dendroid.bplaced.net";

Open get.php, get-functions.php, new-upload.php ,upload-pictures.php ,find the line { if($GET'Password' == "keylimepie") } Change keylimepie to your Database password assigned in Step 3

Open reg.php and delete the script. The whole Script has to be this:
$validDomain = "true";

Now control the files whether they are correct configured. If they are wrong configured Dendroid wont work!

If you are sure everything went right, you have to upload the content of the folder Dendroid Panel to your webserver. I suggest to use FileZilla, which is easy to understand. For example if you use bplaced, the login credentials are: Server: .bplaced.net Username: Password: Password of your bplaced account ,Leave the port field blank

On the left side you can see your files and on the right side you see the files of your webserver. Delete the Files of your webserver and then copy the content of your Dendroid Panel folder to the webserver.

Dendroid Setup

Navigate in your browser to your webserver .bplaced.net.
You should be greeted with a setup form.
The required Settings:
Database Username: Your username of the Sql Database
Database Password: Your Password of the Sql Database
Database Host: Host of your Sql Database (In bplaced.net: localhost)
Database Name: Your Database name (In bplaced.net: Username of your account)
Bot List Refresh Time & File List Refresh Time & Message Box Refresh Time: Set all to 10
Username: Use the username you want to use for logging in to the control panel
Password: Same for the Password
Bot Offline Time: 10
Time Zone: Is clear, isn`t it?
Message Box Font Size: 10

Now continue

Setting Up the Dendroid Apk

Now you have to open the SDK Manager you have downloaded at the start. You can download everything you want, but important is the API 10.

Set up the ADT for Eclipse. This is a good Tutorial for this: [You must be registered and logged in to see this link.] Follow the instructions till step 9.

Click File > New > Project > Android > Android Project From Existing Code > Next > Browse > Open the path to the Dendroid source then Dendroid Apk > Finish

Click the Drop Down Arrow for Dendroid > src > com.connect > Then click MyService To Open it.

Use base64encode.org to encode your url and the Password of your webserver. Change the variables encodedURL and backupURL to your encoded webserver URL, but pay attention that you use for example [You must be registered and logged in to see this link.] and not [You must be registered and logged in to see this link.]

This is required to get Dendroid running.
Paste the encoded Password in the Password Field.

Now click on project>properties. Here you have to ckeck the API level 10 or Android 2.3.3, to get compiling working.

Click on your project in the project Manager on the left side of Eclipse and press F2 to rename the Project to "Dendroid". Then Click File > Export > Android > Export Android Application > Select Dendroid.

Click Ok, then next. Now check "Create new keystore". The location and the password don't matter. Click next again, then use everything as name and password. The validity can be 1000 Years. Now you can change the destination of the output apk and finish the compilation.

Optional: Binding the Dendroid Apk to Another Apk
I recently developed a method to bind the Dendroid Apk with another Apk. You can find the Post here! The Hiding Apk will work as well as installed without Dendroid, so the victim wont identify the payload.


You just completed the setup of Dendroid apk. If you have Problems or get Errors when following these Instructions feel free to pm me. I will try to help as much as I can!

    Current date/time is Thu Oct 27, 2016 6:55 am