All about sub7seven and others trojans
Subseven 2.1.x
I chose 2.1 version because it has been the most stable version till 02/08/2002.
If you don't know what Subseven is, I'll explain briefly about it here : Subseven is a R.A.T, aka Remote Admin Tool.
You can use it to have full access to any system running MS Windows by executing a file called server.exe on it.
In this version we have only 3 files to explain about :
(Subseven.exe) which is the client, or what you will use to control the target machine.
(Edit server.exe) that's what you will use to configure your server.exe to suite whatever you want.
(Server.exe) and this is what you want to run on the target machine, not on yours.
Version : 1.0
The current most stable version. Basically, click on the section you need help with; I hope everything will be understandable and clear. You need to a have a little bit experience with s7's client because I am not going to explain every single thing. If you want to get a brief explanation about something just MouseOver it.
SubSeven Client supports all versions of Windows. You could use it under 9x, NT, 2k or XP. If you are having problems with XP, you have to do the following to fix some error problems.
1- Select your client executable or subseven.exe
2- Right click on it, then properties.
3- Click on Compatibility tab and check "Disable visual themes".
4- Select Run This program compatable for Windows 98/ME.
If you want to know more about the credits, click on the subseven icon in upper left, and if you want to get the latest news about subseven, click on read latest news. Finally, our status bar will be useful for us when we want know if the victim is connected or not. ( idle - ready for action ) that's what it says now.
I put this section here because its very simple and short and you are supposed to know how to deal with it.
1- You have to enter the IP address or ICQ uin to connect to a victim. If you dont know what an IP is, click here.
2- If you configured the server using editserver, you are supposed to know which port you used there.
3- Got static IP victims ? Click on the address book to save them.
4- Finally, the part that I am going to give you more explaination about. It will be the ip tools at the upper right near the " X ".
If you got your victim's host name or ICQ uin, you could use this tool to get the real IP. Just enter the hostname or the uin and resolve.
Subseven 2.1.4 Defcon Edit Server
This is the utility used to customise your servers to your own preferences. Click on the image in the area you need help with to view help. As before, in the client section, I hope everything will be easy for you to understand.
Options:
1-Start Up Methods
2-Notification Online
Notification methods include:
ICQ Notification
IRC Notification
E-Mail Notification
3-Installation
Port settings
Server password
Protect server port and password
IRC Bot
Server name
Melt server
Enable fake error message
Bind server
4-Protect server
5-Saving options
Save new settings
Save new copy of server with new settings
Quit without saving
BluePink 
