DO NOT DEAL WITH THIS MEMBER
Jul 18, 2026 04:48 PM
(This post was last modified: Jul 21, 2026 04:39 PM by Charlie Sheen.)
Freemason RAT is a browser‑native command center that lets you deploy, monitor, and control agents across Windows, Linux, Android, and macOS from a single dashboard. No complex infrastructure, no per‑agent limitations, and no per‑build caps.
Generate as many payloads as you need, whenever you need them. No per‑build fees, no token limits. Compile Windows EXE/DLL, Linux ELF, Android APK, macOS binaries, and PHP webshells server‑side, directly from your browser.
Fleet Dashboard
- Real-time agent status overview (active/idle/dead)
- Agent count, OS breakdown, geo map, health timeline
- Filter and search agents by name, IP, OS, status
Terminal (Operator Console)
- Send commands to any active agent
- Shell execution, file download/upload, screenshot capture
- Credential harvesting (SAM dump, browser passwords, Windows credman)
- Keylogging, persistence installation, privilege escalation
- Command palette (Ctrl+K) for quick access
- Command history and full-text search across all agent output
Payload Factory
- Generate agents for Windows (EXE, DLL, Service), Linux (ELF), Android (APK)
- Configure sleep, jitter, kill date, domain fronting, obfuscation level
- One-click build — downloads immediately
Crypter PRO — Encrypt Tab
- Upload any file (EXE, DLL, script) and encrypt with multi-layer cipher chain
- Key methods: embedded, computed (binary hash + seed), environmental (hostname + MAC)
- Presets: Standard (1 layer), Double Wrap (2 layers), Triple Threat (3 layers)
- Choose stub language: Go, C/MinGW, Nim
- Execution methods: CreateThread, RunPE, Process Hollowing, Fiber, APC, Threadless
- Anti-analysis: VM check, debugger check, sandbox detection, sleep delay
- Auto-compiled on server — encrypted payload downloads instantly
Crypter PRO — Persistence Tab
- DLL Sideloading (proxy DLL for Teams, Chrome, Slack, etc.)
- LNK Shortcut backdoor
- Registry Run Key persistence
- WMI Event Subscription (fileless)
- Windows Service DLL
- Installer Wrapper (trojanized setup)
- Office Template Macro (VBA)
- Startup Folder VBScript
- Linux Bash RC + Cron + Systemd
- All backdoors auto-compiled and encrypted server-side
Crypter PRO — EDR Bypass Tab
- Donut shellcode loader generation
- C/MinGW loader
- Go loader
- Nim loader
- Execution: CreateThread, Fiber, APC Queue, Threadless (EDR bypass)
- API hashing, WinHTTP stager, syscall variants
- Auto-compiled and encrypted on server
Crypter PRO — Binary Backdoor Tab
- Upload any EXE/DLL and backdoor it with your agent
- Preserves original icon, digital signature metadata
- 4 obfuscation levels: None, Light, Standard, Full
Files Tab
- Browse files downloaded from agents during operations
- Search, filter, download from browser
VNC Tab (Android)
- Real-time screen viewing for Android agents
- Stream at ~1 FPS for live monitoring
Loot Tab
- All captured credentials, screenshots, exfiltrated data
- Searchable by agent, type, date
What users get on every plan
- Unlimited payload generation
- Full Crypter encryption engine
- All persistence techniques
- EDR bypass loaders
- Binary backdooring
- Agent terminal with all commands
- All cipher chains and layers
Stealer / Credential Harvesting Functions
Available on the Terminal tab after selecting an active agent:
Windows Credentials
- creds — Run all credential modules at once
- creds browsers — Extract saved passwords from Chrome, Firefox, Edge, Brave
- creds windows — Windows secrets dump: SAM hive (local users), SECURITY hive (domain cached creds), Credential Manager (stored web/Windows creds)
- creds wifi — Extract saved Wi-Fi passwords from WLAN profiles
Browser Data
- Browser cookies — Extract cookies from
Chrome/Edge/Firefox profiles
- Browser history — Pull recent browsing history
- Browser autofill — Extract saved form-fill data (addresses, credit cards)
System Intel
- sysinfo — OS version, CPU, RAM, disk, hostname, domain-joined status
- netstat — Active network connections, listening ports, routing table
- ps — Running process list with PID, parent PID, path
- whoami — Current user context, group membership, privileges
Screenshot Capture
- screenshot — Capture screen of target machine, returned inline in terminal
- Right-click to save the screenshot image directly
Android Stealer (Android agents only)
- stealer:all — Run every enabled stealer module
- stealer:gps — GPS coordinates with accuracy and altitude
- stealer:contacts — Phonebook contacts list
- stealer:sms — SMS inbox (all received messages)
- stealer:calls — Call logs (incoming, outgoing, missed)
- stealer:camera — Front/rear camera capture
- stealer:apps — Installed applications list
- stealer:location — Last known location (WiFi/cell triangulation)
File Operations
- download <path> — Pull any file from target machine to C2 (appears in Files tab)
- upload <path> — Push a file from C2 to target machine
- fileget <path> — Read text file content inline in terminal
![[Image: 1.png]](https://i.ibb.co/VYJts0S9/1.png)
![[Image: 2.png]](https://i.ibb.co/1GBkLGVR/2.png)
![[Image: 3.png]](https://i.ibb.co/0jpRzQSw/3.png)
![[Image: 4.png]](https://i.ibb.co/5g6dzvXx/4.png)
![[Image: 5.png]](https://i.ibb.co/LDfp6YZS/5.png)
![[Image: 6.png]](https://i.ibb.co/Dg5kTpSr/6.png)
![[Image: 7.png]](https://i.ibb.co/hxhJQ5xC/7.png)
Price:
Basic
$49/mo
For individual operators getting started
1 user account
C2 platform access
Web dashboard
Basic C2 profiles
Community support
Payload generatio (EXE)
Stealer function
$99/mo
For professional red teams
5 user accounts
C2 platform access
Advanced C2 profiles
Custom payload generation(EXE,Andriod,LinuX)
API access
Stealer function
Priority support
$249/mo (Buy 1 and get another month free)
For large-scale operations
Unlimited users
C2 platform access
Crypter feature
Custom C2 profiles
On-premise deployment
Dedicated support
Full Platform Functionality
Contact:
Content deleted to prevent possible harm to our members. -Staff Start Contract
It doesn't work crypter ....I tried it and paid them $20... and nothing works. They said they'd refund my money or fix something, but they didn't do anything... I don't recommend it.
DO NOT DEAL WITH THIS MEMBER
Yo I contacted you on telegram I want to buy the Enterprise package to get one month free respond to my questions thank you.
DO NOT DEAL WITH THIS MEMBER
Jul 20, 2026 10:57 AM
(This post was last modified: Jul 20, 2026 10:58 AM by Freemasons.)
(Jul 20, 2026 12:59 AM)Okikklhb Wrote: It doesn't work crypter ....I tried it and paid them $20... and nothing works. They said they'd refund my money or fix something, but they didn't do anything... I don't recommend it.
Responded to your request.
(Jul 20, 2026 04:55 AM)ByteMe Wrote: Yo I contacted you on telegram I want to buy the Enterprise package to get one month free respond to my questions thank you.
You can start contract and yes you will have full access to crypter and side loading crypting on the platform.
|