+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [VB.NET][RELEASE]HFMc PHP/SQL RAT[SOURCE] (/showthread.php?tid=1358536)
[VB.NET][RELEASE]HFMc PHP/SQL RAT[SOURCE] - GanjaMan-WS - Jun 7, 2011
As I lost interest of this RAT, I thought about releasing it to the community.
It only has some basic functions, as I was more interested in the traffic encryption, php-> vb and such.
Functions:
The client is coded by me, except for the
If anyone feels the need for credits, post/pm.
The PHP files are coded by me except for the Web Layout as that was ripped off a jquery sliding panel tutorial(link to tutorial).
It only has some basic functions, as I was more interested in the traffic encryption, php-> vb and such.
Functions:
- Show Messagebox
- Open Website Visible
- Download & Execute File
- Kick Client
The client is coded by me, except for the
- Random String Generation(GOOGLE)
- Rijndael Encryption/Decryption(I think it was pr0t0typ3, google for the PHP side)
- Retrieving the ProccesorID(hf)
- Country2IP & Flags, Other stuff(uBot cant remeber the creator.)
If anyone feels the need for credits, post/pm.
The PHP files are coded by me except for the Web Layout as that was ripped off a jquery sliding panel tutorial(link to tutorial).
The client is written in VB.net. It communicates with a webserver which is running PHP & MySQL. The client sends a useragent as client verification.
All data is encrypted/decrypted with the Rijndael method. (It uses a constant key for all clients. I know that sucks.)
There is some kind of mutex, not in the client but serversided. Only one HWID is allowed.
Not coded by a pro (especially the PHP code), so don't be a bitch. Comments & Ideas are welcome, just don't starting flaming over nothing.
Post here and PM me for the files(webfiles & vb project).
Screenshots
Actions
[img]http://i1089.photobucket.com/albums/i353/tmpasd123/scrnshot1.png[/img]
Users
[img]http://i1089.photobucket.com/albums/i353/tmpasd123/scrnshot2.png[/img]
Sending Command
[img]http://i1089.photobucket.com/albums/i353/tmpasd123/Untitled.gif[/img]
Setup Instructions
Extract the WEBFiles.rar file into/onto your webserver, after that edit the connect.php.
- $db_host = "addressofdbhost" EX. localhost
- $db_user = "dbusername" EX. root
- $db_pass = "dbpassword" EX. pwd
- $db_database = "nameoftheactualdatabase" EX. RAT
after that save changes and close the file.
Then open op your database management utility, after that create a database with the name you used in the "connect.php" file. ex. RAT
After that import the "tables.sql" or open it up, copy&paste and run the sql statements.
There should be 2 new tables in your db. 1: cusers 2: tz_members.
cusers should be empty as when a client disconnects it should be removed from the db.
In table tz_members should be one record, usr "test" and pass "098f6bcd4621d373cade4e832627b4f6" which is "test" hashed with md5.
Remember that so you can login after setting everything up.
If you want to add more users, you will have to do it by hand.
You are done with the db. Extract the "HFMcProject.rar" and start visual studio(or vb express) and open the project. After that open up the Mainform in the codeview.
You will see This:
[img]http://i1089.photobucket.com/albums/i353/tmpasd123/screenshot3.png[/img]
Edit those settings to your needs.
Now open up the "client.php" file.
You will see:
Code
$ky = 'z9WrEqe3RudaBuVubE_we$P!QUhej?Dr';
$iv = 'thubRa8U=pUr7Juk4sequtaW3preNAtA';
$uuseragent = '41lUr6a7LufroUxoEqOufoukoEjies7l';
if ($_SERVER['HTTP_USER_AGENT'] == $uuseragent )After that you are ready to start debugging and testing.
Want the links to your self created pages in the slidingpanel memberspanel(third screenshot) section ???
Open up "settings.php" and add yours.
PFFFF Done. now hf, its you're turn.
Ooh and some people may need to wait till tomorrow as its 00:15 AM here(GMT+02) and I'm going to bed...(Don't spam my inbox to much)
Any questions, just ask. I'll maybe even help over TV ;p
100th post lolz lucky.
* - E.T - Jun 7, 2011
Cool, i will pm you now ^^
* - SIM-99212 - Jun 7, 2011
This looks great!
It's definitely different than the web RAT I coded.
Mine has a VB.NET server and a web control panel. It uses text files to store info instead of mySQL.
Just one question: How do you remove disconnected servers, like if the server was killed by a the user in task manager or if the user turned off his computer?
Thanks for the source! It looks good.
* - GanjaMan-WS - Jun 7, 2011
Pmed both of you, Thanks for the reply.
* - K-Gee - Jun 8, 2011
This is a Bot, not a RAT...
* - Deceptive - Jun 8, 2011
(Jun 8, 2011 12:21 AM)K-Gee Wrote: This is a Bot, not a RAT...
You have no idea what you are talking about. I've seen other post from you, none are mostly related to the thread at all, some are completely offtopic and most are just low quality. Like right now, you bypassed the short post rule by adding three periods.
* - K-Gee - Jun 8, 2011
@TheMist: Its just the truth, so stfu HF Skid.
* - MoonWalker - Jun 8, 2011
This looks interesting. PMing now for the source.
Thanks.
* - GanjaMan-WS - Jun 8, 2011
@MoonWalker
Pmed you, and thank you for your comment.
@K-Gee
Go trash your own threads.
@TheMist
Ty, Mate.
EDIT: @ka0
Thanks mate, hope you will learn from it.
* - ka0 - Jun 8, 2011
Thank you for the link!!KEEP IT UP
* - Ousom - Jun 8, 2011
I'm new in this community, but i would like to have sources of this, i will send you a PM :)
* - Nuc - Jun 9, 2011
Thanks dude! Well written RAT
Nuc
* - ΔDemon - Jun 9, 2011
I'd like to take a look at this, please and thank you. ^.^
* - GanjaMan-WS - Jun 9, 2011
PMed all you guys.
Goodluck
* - ΔDemon - Jun 9, 2011
It's really great that you would share it, downloading as we speak - this guy's legit. ^.^