[Pyrite]

Hi,

I recently finished my Cinnabar Loader project. It isnt very special, a normal loader, but since im still studying i would like to sell it to earn some money.

To sell it, of course, i need some feedback from other people, as my needs are not the same for others and i want to publish a good quality product.


Panel: PHP and uses Tailwind CSS. It will be self-hosted.
Bot: C++, stub size of 336kb. I will show detections on kleenscan later on this thread.

This is a showcase video using every functionality of the loader except execute powershell because i couldnt think of a command to execute lol:
https://vimeo.com/1122457199?share=copy

If you dont want to see the video, heres some screenshots:






As you can see, i really based on other loaders here, specially loadya, so thanks for the inspiration.

Now, detections:
https://kleenscan.com/scan_result/46bfce...b2d92f16f6


I have some questions like, what do i have to do to sell this here? Also, are features good or is it not enough? What would be a good price for a loader like this?

If someone can answer these, i would be very grateful. Any other feedback i didnt ask for and questions i didnt answer here are also welcome.

[DeathPenalty666]

Hi,

I recently finished my Cinnabar Loader project. It isnt very special, a normal loader, but since im still studying i would like to sell it to earn some money.

To sell it, of course, i need some feedback from other people, as my needs are not the same for others and i want to publish a good quality product.


Panel: PHP and uses Tailwind CSS. It will be self-hosted.
Bot: C++, stub size of 336kb. I will show detections on kleenscan later on this thread.

This is a showcase video using every functionality of the loader except execute powershell because i couldnt think of a command to execute lol:
https://vimeo.com/1122457199?share=copy

If you dont want to see the video, heres some screenshots:






As you can see, i really based on other loaders here, specially loadya, so thanks for the inspiration.

Now, detections:
https://kleenscan.com/scan_result/46bfce...b2d92f16f6


I have some questions like, what do i have to do to sell this here? Also, are features good or is it not enough? What would be a good price for a loader like this?

If someone can answer these, i would be very grateful. Any other feedback i didnt ask for and questions i didnt answer here are also welcome.

to sell here in the market premium section you have yo upgrade your user role to leet here : https://codecanyon.net/item/shopy-multiv...n/42363182

It would be nice to can have some group of Loader for different operation and also have the possbility to can have cheduling. (this is overkill and pushing far but in the case you want to keep a group specific auled fud it allow you to drop many crypter payload and dont worry too much for this group. And it allow you to run a simple keylodder on a group and a botnet on another)

IT look good mate!

[Pyrite]

to sell here in the market premium section you have yo upgrade your user role to leet here : https://codecanyon.net/item/shopy-multiv...n/42363182

It would be nice to can have some group of Loader for different operation and also have the possbility to can have cheduling. (this is overkill and pushing far but in the case you want to keep a group specific auled fud it allow you to drop many crypter payload and dont worry too much for this group. And it allow you to run a simple keylodder on a group and a botnet on another)

IT look good mate!

I think i understood but can you correct me? Is it like the ID/Group option you can set on the builder options to separate bots obtained from different campaigns? or am i wrong. And also, thanks for the first advice.

[DeathPenalty666]

I think i understood but can you correct me? Is it like the ID/Group option you can set on the builder options to separate bots obtained from different campaigns? or am i wrong. And also, thanks for the first advice.

This is examtly what i mean sir! To have a campain Social media K-Logger, Public spread test1, Botnet Instagram final, Spy on my Friend etc.

Allowing the user to can run many categorie/group/however we name it and for example run test with Venom rat, Venom final or just to run different copain over different network. usually you can name/group your victim with a rat, so you can make different group to drop different things. i never see this but it would be interesting to have a TASK for all group, then a grouo/task individual

[lawdesu]

Do ur loader inject itself on another windows proceeess? also, how it handle the remote commands? it PID SPOOFING or something? also do the loader itself have his own persistence methods? panel looks good bro

[Pyrite]

This is examtly what i mean sir! To have a campain Social media K-Logger, Public spread test1, Botnet Instagram final, Spy on my Friend etc.

Allowing the user to can run many categorie/group/however we name it and for example run test with Venom rat, Venom final or just to run different copain over different network. usually you can name/group your victim with a rat, so you can make different group to drop different things. i never see this but it would be interesting to have a TASK for all group, then a grouo/task individual

nice idea, im going to add this feature. Thanks!

---

Do ur loader inject itself on another windows proceeess? also, how it handle the remote commands? it PID SPOOFING or something? also do the loader itself have his own persistence methods? panel looks good bro

No, the loader doesnt inject itself, although i can add it easily. The commands are retrieved from the gate.php script from the panel and the persistence is automatic: if it doesnt have admin permissions it uses the RUN key from the registry, if it has them, it adds a task to the task scheduler using the COM api to be more stealthy.

[DeathPenalty666]

nice idea, im going to add this feature. Thanks!

---

No, the loader doesnt inject itself, although i can add it easily. The commands are retrieved from the gate.php script from the panel and the persistence is automatic: if it doesnt have admin permissions it uses the RUN key from the registry, if it has them, it adds a task to the task scheduler using the COM api to be more stealthy.

Thanks you you want anothers good one? i can blow your mind haha come in pv :)

[Pyrite]

Thanks you you want anothers good one? i can blow your mind haha come in pv :)

Done

---

Thanks you you want anothers good one? i can blow your mind haha come in pv :)

Ok, i added the feature.

[DeathPenalty666]

Done

---

Ok, i added the feature.

hehehe this is going to be a 3viLoader build to drive multiple operation! If you can get in what i sent you man this will be the sickest loader i've ever seen.

My rat using this principe to work with windoes-android rat and they even made a tools to make your apk auto infect device you plug in your combien (But they didnt added a MACRO to control the phone and auto turn usb debug on) it infect the android emulator you run on pc from the android phone infecter by the exe, infect device in the same changing station, hahaha with a macro cable i infecter the whole walmart demo tv's in 2min and never they woukd notice, doing the exe/apk with a macro built in (like the cable i added to do it) that things would be sick haha

[SIM-63814]

Looks amazing and like a promising project!

Would it be possible to add process-injection option in the builder for installed payload, by our choice such as inside explorer.exe, scvhost, cmd and some others?

And also in the builder to add Assembly info modifications, (assembly name, product, version numbers etc) so we can more randomize/make unique stub later when we obfuscate/crypt it? It's more easier when original RAT/loader have this option then when we add it with crypter later...

Nice and good luck!

[Pyrite]

Looks amazing and like a promising project!

Would it be possible to add process-injection option in the builder for installed payload, by our choice such as inside explorer.exe, scvhost, cmd and some others?

And also in the builder to add Assembly info modifications, (assembly name, product, version numbers etc) so we can more randomize/make unique stub later when we obfuscate/crypt it? It's more easier when original RAT/loader have this option then when we add it with crypter later...

Nice and good luck!

Hi, thanks for these opinions.

Process injection in the builder is possible of course but i dont find it useful as i think that task should be the crypter's, not the loader and i dont want to interfere in any crypter oprations.

The assembly option is also good but its easily configurable using a tool like resource hacker.

Although i dont find any of these options useful, im open to any opinions and if more people ask for these features, i dont have any problem adding them.

Thanks!

[Maur0]

Hi, thanks for these opinions.

Process injection in the builder is possible of course but i dont find it useful as i think that task should be the crypter's, not the loader and i dont want to interfere in any crypter oprations.

The assembly option is also good but its easily configurable using a tool like resource hacker.

Although i dont find any of these options useful, im open to any opinions and if more people ask for these features, i dont have any problem adding them.

Thanks!

Something that I dont understand, you want to sell malware and you dont have even windows activated?

[Pyrite]

Something that I dont understand, you want to sell malware and you dont have even windows activated?

Does my windows activation affect the quality of my product? Dont make questions on themes other than the original post.

[Maur0]

Does my windows activation affect the quality of my product? Dont make questions on themes other than the original post.

I had bad experience with coders from south america

[Pyrite]

I had bad experience with coders from south america

Dont assume my nationality based only on my language. Your "experience" doesnt include everyone so dont try to trash my work after 2 good reviews when you didnt even tested my product, and finally, im from europe, not south america.