Fast, lightweight & easily customizable remote access tool written in C# coded from scratch.
Support project ?
BTC: 1JpBNGLNmYR6MANK7wcY3h1YF2vG92BM4r
- [Beta] Ransomware plugin (RSA 4096 + AES 256)
- Multiple hosts (and support of dynamic hosts)
- Offline keylogger fully independant
- Client built with MSBuild + CSC (instead of patching with DnLib)
- Directory size in file manager (only top files)
- ...
- Passwords recovery
- History recovery
- Autofill recovery
- Keywords recovery
- Remote camera viewer (+ save pictures)
- Remote microphone (auto saved)
- Remote desktop control (+ save pictures)
- Remote keyboard
- Remote mouse
- Remote chat
- Remote DotNet Code Execution (VB + C#)
- Process manager
- Kill process (native techniques)
- Suspend process (native techniques)
- Resume process (native techniques)
- ShellCode injection (NtWriteVirtualMemory + NtCreateThreadEx)
- ShellCode injection (NtMapViewOfSection + NtCreateThreadEx)
- Shutdown system
- Reboot system
- Suspend system
- Hibernate system
- Log out user
- BSOD
- Lock workstation
- Offline keylogger (automatically saved)
- Realtime keylogger (automatically saved)
- Managed pe execution (current process)
- Unmanaged pe execution (current process)
- Managed dll execution (current process)
- Unmanaged dll execution (current process)
- Shellcode execution (current process)
- Blur screenlocker
- Audio up
- Audio down
- Hide + show taskbar
- Hide + show desktop icons
- Set wallpaper
- File manager
- Delete file
- Download file
- Rename file
- Upload file
- Get information (CPU, hardware, system)
- Shortcuts (download, desktop and documents paths)
- Logs (automatically saved)
- GunaUI
- dnlib
- Newtonsoft.Json
- NAudio
- All saved stuff (logs, passwords...) are saved in csv format except offline keylogger
- All external dlls used are in folder "DLLs + Package"
- This remote access tool can also be used as stealer & payloads loader.
- Build the project in "release mode" only (change x64 bit for Server and clients)
- If you update with installer, you will have to backup your configs + logs (.dat, .json, Logs folder)
- Under license (AGPL)
- Communication encrypted with RSM encryption (https://bhf.im/threads/438711/)
- Packets compressed with QuickLZ (http://www.quicklz.com/download.html)
- Automation tasks saved with binary format
- Settings saved with JSON format
- Server .NET 4.8
- Client .NET 4.5
- Tested on freshly installed W10 & W11 VM
Dlls are same as exe. You have to change the config class. The entrypoint should be called as follows :
Client.EntryClass.Main()
-
Webcam plugins : AsyncRat
-
Keylogger (modded) : AsyncRat
-
Unmanaged pe and dlls : schellingb
-
Remote mouse & keyboard : Quasar
- Self destruct method (currently disabled)
- Mass tasks
- On connect tasks
I, the creator and all those associated with the development and production of this program are not responsible for any actions and or damages caused by this software. You bear the full responsibility of your actions and acknowledge that this software was created for educational purposes only. This software's intended purpose is NOT to be used maliciously, or on any system that you do not have own or have explicit permission to operate and use this program on. By using this software, you automatically agree to the above.