WEBVTT

00:00:01.540 --> 00:00:05.400
The Powershell‑RAT tool is available on GitHub, and we'll quickly

00:00:05.400 --> 00:00:10.510
see how to get it. First, I need to navigate to the Powershell‑RAT

00:00:10.520 --> 00:00:15.650
Git repo. Go to Code and Download ZIP.

00:00:18.540 --> 00:00:20.460
Once the ZIP file is downloaded,

00:00:20.940 --> 00:00:25.160
I'll go to the Downloads folder and then extract the ZIP file.

00:00:26.140 --> 00:00:27.660
Once this is completed,

00:00:28.230 --> 00:00:32.610
I'll navigate to the extracted folder path, and here we can see all

00:00:32.610 --> 00:00:36.360
the PowerShell scripts, as well as the main Python script that

00:00:36.360 --> 00:00:38.660
serves as the executable for this tool.

00:00:39.540 --> 00:00:42.950
I will then copy all the contents of this folder and

00:00:42.950 --> 00:00:45.850
copy it in the C:\Python36 folder.

00:00:46.640 --> 00:00:50.260
This folder path will be the executable path for this tool.

00:00:51.140 --> 00:00:55.220
The reason why I chose the C:\Python36 folder as the executable

00:00:55.220 --> 00:00:59.840
path is because this path is hard coded as an executable path

00:00:59.850 --> 00:01:01.660
in all the scripts of this tool.

00:01:02.510 --> 00:01:06.790
If you wish to set any other folder path as the executable path,

00:01:07.120 --> 00:01:11.760
you can do it provided you will need to perform two additional steps.

00:01:12.740 --> 00:01:13.450
First,

00:01:13.560 --> 00:01:17.280
you will have to replace the C:\Python36 folder path with

00:01:17.280 --> 00:01:19.810
your desired folder path in all the scripts.

00:01:20.400 --> 00:01:25.560
Second, you will have to add your desired folder path into system variables.

00:01:26.140 --> 00:01:29.850
You can check this link on how to add a folder to system

00:01:29.850 --> 00:01:34.890
variables. For now, we will use the default C:\Python36

00:01:34.890 --> 00:01:37.360
folder path as the executable path.

00:01:37.940 --> 00:01:41.240
Further in this entire course, we will refer the C path

00:01:41.240 --> 00:01:44.060
and 36 folder as the executable path.