[BadByte]

Hi,

Before talking: https://www.kleenscan.com/scan_result/9f...adc41965e5
File size: 575.5 KB: Contains my Rat file .NET + ShellCode :)

I need feedback If you want to try this, I would like to develop this tool

How To ?  || Work Only .NET File || Tested On Windows 10/64 for moment || Beta

In the immediate future this project is a beta, it cannot be shared because in dev and cannot be used by everyone, the tool is not yet automated for the user (I will fix it)
I can Just Propose this like an Service And Free Service Because It's not automate But it's FUD but for How many Time ?

I can encrypt file for you and How ?

- Go to https://tomeko.net/online_tools/file_to_...hp?lang=en
- Encode your file in Base64 (For fisrt pass, it's already FUD with One_Base64_Pass and only Beta ;) )  || Multi pass Added  For Final Release if necessary
- Copy and Paste contains in "mybase64.dat" and Share me it on Anonfile
- My Tool will encrypt your file
- I re-Share this on Anonfile
[ I am automating this for the user, searching solution code ]

Your Encrypted File Contains:
- One Encrypted : Your R.A.T
- One PoC vs Notepad++:: If Process Injection Work Then Your File is Loaded in Memory But Need Injection to Load this // Beta ^^
- Incude One Downloader File: putty.exe will be downloaded and Executaded || Link can be changed by your like
(I’m going to change the way I work, I’m going to use DL for DL Rat_code)
- The most Important, you'll can Load your encrypted_file Only One Time on Host

Proof of Concept with Alert_AVG (Fulll Suite Updated Enabled) But so Later for Him, R.A.T already in Memory :)


I need feedback for AV detection.

I need to automate this tool but I need feedback and no one to test on different Os and Antivrus.
This Tools is FUD but it's code is rough, the use or the setting up / loading remains simple to set up

"Hoping not to break the forum rules and if this is the case please delete this thread"

[After Update]:: https://www.kleenscan.com/scan_result/c7...f59fb23f54

---

[Update]

- Protection Added: Hidden Process on Startup || No windows
When Console start the process is Hide. If you send Reconnect_Command to your Client, The re-connexion is OK :) and always Hide

[VisualSoft]

Good work on it, but why use shellcode for .net files?

[BadByte]

Ty.

I just wanted to try one to insert a shellcode within my code and vor if it was detected and no it was not, suddenly I continued like this, this tools in beta, it is F in scantime but I have a problem with the runtime now .. I'm working on it

I Updated my AGV-BUILD with the last and now the Engine lock access //shit
In The before build, loading by assemby wasn't lock by AV, now yes, Engine Updated.

(since many use cracked versions of antivirus and often cannot update builds then it is possible to infect some host.. )
it is also a question of target analysis after if your file does not allow to do everything, i think, it's factor too...

working on, but the scantime can be bypassed more or less easily but runtime so more hard

Last scantime:
(I have one but i know where is the DetectedSig, it's my resource... :p )

[BadByte]

Project Updated And Video to Show that.

Video:
https://anonfile.com/naidi0p8o8/loadthis_mp4

SigDetection:
https://www.kleenscan.com/scan_result/4e...88ede501b7

Happy Night :)

[pashkisss]

The result is impressive, it would be cool if you share it with me for testing :)
P.S. something wrong with link on yr last scan i guess, or it`s my own trouble

[BadByte]

working fine on Windows7 too
:)

[floysmith74]

Download link ? ???? thank you so much