Feb 29, 2020 11:03 AM
(This post was last modified: Feb 29, 2020 11:04 AM by DCU93451.)
I have been working on a web panel and client for a remote administration tool, Currently it just updates the client status to the time it was last online matches CPUid to each client identifier and puts them into a list on the web panel. Ofc web panel has a login page ect. all the communication from client to web panel is done via API.php (a php file in which uses GET to get the status and cpuID to check if the client already exists and if it does exist to update the status) the api.PHP is called every 5 seconds it also checks if their is a pending command in the command table inside database that matches the cpuID, if it does the client gets this response and using System.Text and some modifying of the resulted web request from api.php it figures out which command and with what parameters to run the function of said command) Currently the only 2 commands you can remotely send to the client are MessageBox and UDP DDOS, I did have a password stealer that used nirsoft to output to a text file containing all chrome passwords then upload into a text box on the web panel then delete itself but ofcourse that is detected by most AV. Currently the Client (in visual basic .net 4.5.2) is only 100 lines lone and fully undetected runtime and scantime.
So the question is what should i add next? or should i just sell the source and web panel as is to people as a sort of "BASE" for Rats/Botnet and WebPanels using php and an api?
EDIT: THIS IS MOSTLY JUST PHP FILES. ALLOT IS DONE SERVER-SIDE
So the question is what should i add next? or should i just sell the source and web panel as is to people as a sort of "BASE" for Rats/Botnet and WebPanels using php and an api?
EDIT: THIS IS MOSTLY JUST PHP FILES. ALLOT IS DONE SERVER-SIDE

