[justvmexit]

XenosLoader
Xenos is an advanced loader written in JavaScript and C++.

Agent features

• Native executable written in C++ with CURL and nlohmann/json (widely used libraries)
  


• Agent is very bare bone and hard to detect heuristically.
  


• ~490kb uncompressed.
  


• String encryption for unicode and ascii.
  


• Communication is encrypted.
  


• Unetected on 0/26 anti-viruses as of 23-09-2021 (antiscan.me)
  


• Light-weight and fast task execution.
  


• Seperate encryption of all streamed images.
  


• Supports both HTTP and HTTPS.
  


• Standalone client with no additional files needed.
  


• Silent and undetected persistence.
  

Panel features

• Builder on the website.
  


• Easy management
  


• Light-weight with modern frameworks
  


• Easy task execution
  • Open website on zombie
    
  
  
  • Execute command on zombie
    
  
  
  • Stream and execute executable
    
  
  
  
  


• General information about zombies (IP, OS, Infected on, Last ping, etc.)
  

Screenshots






I am willing to give show code to trusted members and anyone in general for showcase

Pricing
Source-code: 800$

Contact
Telegram: t.me/UniResearcher
Or just via HF direct messages / convo
Start Contract

[CasePaste]

you here to sell stuff again which wont last a week before it shut down the sona product you sold to me end up being a trash anyway be warn guys

[justvmexit]

you here to sell stuff again which wont last a week before it shut down the sona product you sold to me end up being a trash anyway be warn guys

I shutdown Sona as there was literally 0 traffic in the network this isn't even MaaS it's just source-code lol?

[CasePaste]

I shutdown Sona as there was literally 0 traffic in the network this isn't even MaaS it's just source-code lol?

but you know people paid for it right and why you shut down when you know u have paid user for it ?

[Pernat1y]

Agent features

• Native executable written in C++ with CURL and nlohmann/json (widely used libraries)
  


• ~490kb uncompressed.

Those are not "features". Those are things to be avoided in malware and, especially, loaders.

[justvmexit]

Those are not "features". Those are things to be avoided in malware and, especially, loaders.

I know it may be but in this scenario what is the issue with CURL or nlohmann.
We are targeting Windows systems with a little more than 500kb's of space.
You could say that if I was targeting IoT which I am not.

Edit:
In any scenario, I could just switch to a more light-weight HTTP library if I need to.
I can easily make the size a lot smaller.

[justvmexit]

but you know people paid for it right and why you shut down when you know u have paid user for it ?

Because no reason to keep a service up if it's not being used and money isn't going in.

[int main()]

Because no reason to keep a service up if it's not being used and money isn't going in.

gl ever getting somewhere with an attitude like that lol

[justvmexit]

gl ever getting somewhere with an attitude like that lol

I mean it's gotten me pretty far.
It's simply because he is trying to defame my project, no?