Eagle Monitor RAT Reborn | Open Source & Modern Remote Access Tool

Fast, lightweight & easily customizable remote access tool written in C# coded from scratch.
Support project ?
BTC: 1JpBNGLNmYR6MANK7wcY3h1YF2vG92BM4r

What's new ?

• [Beta] Ransomware plugin (RSA 4096 + AES 256)
• Multiple hosts (and support of dynamic hosts)
• Offline keylogger fully independant
• Client built with MSBuild + CSC (instead of patching with DnLib)
• Directory size in file manager (only top files)
• ...

Current features

• Passwords recovery
• History recovery
• Autofill recovery
• Keywords recovery
• Remote camera viewer (+ save pictures)
• Remote microphone (auto saved)
• Remote desktop control (+ save pictures)
• Remote keyboard
• Remote mouse
• Remote chat
• Remote DotNet Code Execution (VB + C#)
• Process manager
• Kill process (native techniques)
• Suspend process (native techniques)
• Resume process (native techniques)
• ShellCode injection (NtWriteVirtualMemory + NtCreateThreadEx)
• ShellCode injection (NtMapViewOfSection + NtCreateThreadEx)
• Shutdown system
• Reboot system
• Suspend system
• Hibernate system
• Log out user
• BSOD
• Lock workstation
• Offline keylogger (automatically saved)
• Realtime keylogger (automatically saved)
• Managed pe execution (current process)
• Unmanaged pe execution (current process)
• Managed dll execution (current process)
• Unmanaged dll execution (current process)
• Shellcode execution (current process)
• Blur screenlocker
• Audio up
• Audio down
• Hide + show taskbar
• Hide + show desktop icons
• Set wallpaper
• File manager
• Delete file
• Download file
• Rename file
• Upload file
• Get information (CPU, hardware, system)
• Shortcuts (download, desktop and documents paths)
• Logs (automatically saved)

External depencencies

• GunaUI
• dnlib
• Newtonsoft.Json
• NAudio

Notes

• All saved stuff (logs, passwords...) are saved in csv format except offline keylogger
• All external dlls used are in folder "DLLs + Package"
• This remote access tool can also be used as stealer & payloads loader.
• Build the project in "release mode" only (change x64 bit for Server and clients)
• If you update with installer, you will have to backup your configs + logs (.dat, .json, Logs folder)
• Under license (AGPL)

Technical information

• Communication encrypted with RSM encryption (https://bhf.im/threads/438711/)
• Packets compressed with QuickLZ (http://www.quicklz.com/download.html)
• Automation tasks saved with binary format
• Settings saved with JSON format
• Server .NET 4.8
• Client .NET 4.5
• Tested on freshly installed W10 & W11 VM

DLLs

Dlls are same as exe. You have to change the config class. The entrypoint should be called as follows :

Client.EntryClass.Main()

Inspirations

• Webcam plugins : AsyncRat

• Keylogger (modded) : AsyncRat

• Unmanaged pe and dlls : schellingb

• Remote mouse & keyboard : Quasar

Known bugs

• Self destruct method (currently disabled)

Missing features (relative to previous versions)

• Mass tasks
• On connect tasks

Interface

I, the creator and all those associated with the development and production of this program are not responsible for any actions and or damages caused by this software. You bear the full responsibility of your actions and acknowledge that this software was created for educational purposes only. This software's intended purpose is NOT to be used maliciously, or on any system that you do not have own or have explicit permission to operate and use this program on. By using this software, you automatically agree to the above.