(Sep 27, 2025 06:47 AM)anogon Wrote:  Hi,

I recently finished my Cinnabar Loader project. It isnt very special, a normal loader, but since im still studying i would like to sell it to earn some money.

To sell it, of course, i need some feedback from other people, as my needs are not the same for others and i want to publish a good quality product.


Panel: PHP and uses Tailwind CSS. It will be self-hosted.
Bot: C++, stub size of 336kb. I will show detections on kleenscan later on this thread.

This is a showcase video using every functionality of the loader except execute powershell because i couldnt think of a command to execute lol:
https://vimeo.com/1122457199?share=copy

If you dont want to see the video, heres some screenshots:






As you can see, i really based on other loaders here, specially loadya, so thanks for the inspiration.

Now, detections:
https://kleenscan.com/scan_result/46bfce7c892ff8893d42055321fe07d4a3c3aab45d637d41377640b2d92f16f6


I have some questions like, what do i have to do to sell this here? Also, are features good or is it not enough? What would be a good price for a loader like this?

If someone can answer these, i would be very grateful. Any other feedback i didnt ask for and questions i didnt answer here are also welcome.

(Sep 27, 2025 07:01 AM)arlalala01 Wrote:  to sell here in the market premium section you have yo upgrade your user role to leet here : https://codecanyon.net/item/shopy-multivendor-ecommerce-food-grocery-pharmacy-one-stop-solution/42363182

It would be nice to can have some group of Loader for different operation and also have the possbility to can have cheduling. (this is overkill and pushing far but in the case you want to keep a group specific auled fud it allow you to drop many crypter payload and dont worry too much for this group. And it allow you to run a simple keylodder on a group and a botnet on another)

IT look good mate!

(Sep 27, 2025 07:22 AM)anogon Wrote:  I think i understood but can you correct me? Is it like the ID/Group option you can set on the builder options to separate bots obtained from different campaigns? or am i wrong. And also, thanks for the first advice.

(Sep 27, 2025 07:43 AM)arlalala01 Wrote:  This is examtly what i mean sir! To have a campain Social media K-Logger, Public spread test1, Botnet Instagram final, Spy on my Friend etc.

Allowing the user to can run many categorie/group/however we name it and for example run test with Venom rat, Venom final or just to run different copain over different network. usually you can name/group your victim with a rat, so you can make different group to drop different things. i never see this but it would be interesting to have a TASK for all group, then a grouo/task individual

(Sep 27, 2025 10:35 AM)lawdesu Wrote:  Do ur loader inject itself on another windows proceeess? also, how it handle the remote commands? it PID SPOOFING or something? also do the loader itself have his own persistence methods? panel looks good bro

(Sep 27, 2025 11:16 AM)anogon Wrote:  nice idea, im going to add this feature. Thanks!

---

No, the loader doesnt inject itself, although i can add it easily. The commands are retrieved from the gate.php script from the panel and the persistence is automatic: if it doesnt have admin permissions it uses the RUN key from the registry, if it has them, it adds a task to the task scheduler using the COM api to be more stealthy.

(Sep 27, 2025 11:23 AM)arlalala01 Wrote:  Thanks you you want anothers good one? i can blow your mind haha come in pv :)

(Sep 27, 2025 11:23 AM)arlalala01 Wrote:  Thanks you you want anothers good one? i can blow your mind haha come in pv :)

(Sep 27, 2025 11:38 AM)anogon Wrote:  Done

---

Ok, i added the feature.

(Sep 28, 2025 03:00 PM)SIM-63814 Wrote:  Looks amazing and like a promising project!

Would it be possible to add process-injection option in the builder for installed payload, by our choice such as inside explorer.exe, scvhost, cmd and some others?

And also in the builder to add Assembly info modifications, (assembly name, product, version numbers etc) so we can more randomize/make unique stub later when we obfuscate/crypt it? It's more easier when original RAT/loader have this option then when we add it with crypter later...

Nice and good luck!

(Sep 28, 2025 03:10 PM)anogon Wrote:  Hi, thanks for these opinions.

Process injection in the builder is possible of course but i dont find it useful as i think that task should be the crypter's, not the loader and i dont want to interfere in any crypter oprations.

The assembly option is also good but its easily configurable using a tool like resource hacker.

Although i dont find any of these options useful, im open to any opinions and if more people ask for these features, i dont have any problem adding them.

Thanks!

(Sep 30, 2025 12:27 PM)Maur0 Wrote:  Something that I dont understand, you want to sell malware and you dont have even windows activated?

(Sep 30, 2025 01:16 PM)anogon Wrote:  Does my windows activation affect the quality of my product? Dont make questions on themes other than the original post.

(Sep 30, 2025 01:29 PM)Maur0 Wrote:  I had bad experience with coders from south america