search

qwqdanchun / DcRat

A simple remote tool in C#.
MIT License
916 stars 332 forks source link

Nice repo. #19

Closed xxopenxx closed 3 years ago

xxopenxx commented 3 years ago

Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section?

The encryption thing is very nice. :)

Keep it up, nice work

qwqdanchun commented 3 years ago

thank you .i will keep on coding

---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19)

Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section?

The encryption thing is very nice. :)

Keep it up, nice work

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

xxopenxx commented 3 years ago

thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working

qwqdanchun commented 3 years ago

it can run local host surely .if you use the correct certificate？

---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19)

thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

xxopenxx commented 3 years ago

it can run local host surely .if you use the correct certificate？ … ---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

Yeah im using correct certificate, maybe its my fault. I just can't connect when ip is 127.0.0.1, when i run it with my external ip on my pc it's working. So strange

qwqdanchun commented 3 years ago

can't find why. it's really strange

---Original--- From: @.> Date: Wed, May 5, 2021 22:56 PM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19)

it can run local host surely .if you use the correct certificate？ … ---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

Yeah im using correct certificate, maybe its my fault. I just can't connect when ip is 127.0.0.1, when i run it with my external ip on my pc it's working. So strange

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

xxopenxx commented 3 years ago

can't find why. it's really strange … ---Original--- From: @.> Date: Wed, May 5, 2021 22:56 PM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) it can run local host surely .if you use the correct certificate？ … ---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe. Yeah im using correct certificate, maybe its my fault. I just can't connect when ip is 127.0.0.1, when i run it with my external ip on my pc it's working. So strange — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

What about adding miner, like monero, eth, btc, doesnt matter. I saw this feature in async/limerat. It is possible in future?

qwqdanchun commented 3 years ago

usually,this feature is drop a xmrig on disk and run it. i will add it in the future

---Original--- From: @.> Date: Wed, May 5, 2021 23:49 PM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19)

can't find why. it's really strange … ---Original--- From: @.> Date: Wed, May 5, 2021 22:56 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) it can run local host surely .if you use the correct certificate？ … ---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe. Yeah im using correct certificate, maybe its my fault. I just can't connect when ip is 127.0.0.1, when i run it with my external ip on my pc it's working. So strange — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

What about adding miner, like monero, eth, btc, doesnt matter. I saw this feature in async/limerat. It is possible in future?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

xxopenxx commented 3 years ago

usually,this feature is drop a xmrig on disk and run it. i will add it in the future … ---Original--- From: @.> Date: Wed, May 5, 2021 23:49 PM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) can't find why. it's really strange … ---Original--- From: @.> Date: Wed, May 5, 2021 22:56 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) it can run local host surely .if you use the correct certificate？ … ---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe. Yeah im using correct certificate, maybe its my fault. I just can't connect when ip is 127.0.0.1, when i run it with my external ip on my pc it's working. So strange — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe. What about adding miner, like monero, eth, btc, doesnt matter. I saw this feature in async/limerat. It is possible in future? — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

I didnt know this, but nice to now :) But it will be great, if you can add this as a plugin in future

qwqdanchun commented 3 years ago

yes,will add it

---Original--- From: @.> Date: Wed, May 5, 2021 23:55 PM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19)

usually,this feature is drop a xmrig on disk and run it. i will add it in the future … ---Original--- From: @.> Date: Wed, May 5, 2021 23:49 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) can't find why. it's really strange … ---Original--- From: @.> Date: Wed, May 5, 2021 22:56 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) it can run local host surely .if you use the correct certificate？ … ---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe. Yeah im using correct certificate, maybe its my fault. I just can't connect when ip is 127.0.0.1, when i run it with my external ip on my pc it's working. So strange — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe. What about adding miner, like monero, eth, btc, doesnt matter. I saw this feature in async/limerat. It is possible in future? — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

I didnt know this, but nice to now :) But it will be great, if you can add this as a plugin in future

— You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

xxopenxx commented 3 years ago

Nice new fun plugin! Waiting for more, working great :) But i have a problem with schtask install, whenever i try to launch it. It just doesn't work for me, rat isn't installing and after restarting client pc rat is not installed, and not connected. :/

What can be a reason?

Second problem is with the chat, on client pc "button" with send message is cut in half (in server it's working), so it's very hard to spot this button, and click it. You can check it out. @qwqdanchun Thanks for updates.

xxopenxx commented 3 years ago

schtask does creating a client exe in appdata folder, but startup not working for me, it doesn't connect after computer restart. i know i can use normal install or install in build, but sad that doesn't work for me :/ doesnt launch in start of the pc

New normal install works fine, but i can't uninstall it. When im trying to uninstall normal install, i get this error " value with that name does not exist"

But i see uninstall from client control section works fine.

qwqdanchun commented 3 years ago

can you check the schtask,to find if it has already installed.

---Original--- From: @.> Date: Thu, May 6, 2021 08:10 AM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19)

schtask does creating a client exe in appdata folder, but startup not working for me, it doesn't connect after computer restart.

rat exe doesnt appear in task manager after restart too, so it's just doesnt launch after restart idk why. But exe is installed in appdata

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

qwqdanchun commented 3 years ago

i will check the chat bottom later. it's helpful if you can send me a capture of the client screen

---Original--- From: @.> Date: Thu, May 6, 2021 08:00 AM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19)

Nice new fun plugin! Waiting for more, working great :) But i have a problem with schtask install and new normal install, whenever i try to launch it. It just doesn't work for me, rat isn't installing and after restarting client pc rat is not installed, and not connected. :/

What can be a reason? I don't have even logs in dcrat that i installed it by schtask or normal install. It does nothing for me

Second problem is with the chat, on client pc "button" with send message is cut in half (in server it's working), so it's very hard to spot this button, and click it. You can check it out. @qwqdanchun Thanks for updates.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

AbdouDzGamer commented 3 years ago

What is schtask install ? Thanks for great work man please take care of this project cause i was everyday checking and waiting for an update

xxopenxx commented 3 years ago

@qwqdanchun https://imgur.com/a/x0tDQhn You see? Button is cut in a half, and hard to spot it in the right down corner.

schtask install appear in appdata but it's just exe file for me, it doesn't launch after restart. It doesn't appear in process hacker on taskmgr. So its just doesnt launch :/

qwqdanchun commented 3 years ago

win+R and input taskschd.msc you can find all schtasks on your computer.

check if you can see one name"Adobe Acrobat Update Task"

xxopenxx commented 3 years ago

win+R and input taskschd.msc you can find all schtasks on your computer.

check if you can see one name"Adobe Acrobat Update Task"

I see it in taskschd.msc, it's working now lol. But cilent is not dissapearing in appdata ,after schtask uninstall or uninstall from user control. It stays there after schtask install

qwqdanchun commented 3 years ago

schtask uninstall won't delete file. it only delete schtask .

system control-client control-uninstall will stop client running and delete it

xxopenxx commented 3 years ago

schtask uninstall won't delete file. it only delete schtask .

system control-client control-uninstall will stop client running and delete it

thanks, all great now. From what i see :) only the chat button is bugged

qwqdanchun commented 3 years ago

not able to recreate this

however, i will try to fix it in next commit

xxopenxx commented 3 years ago

not able to recreate this

however, i will try to fix it in next commit

https://imgur.com/a/TQFdBfP It's working better now! Thanks, it's kinda not full visible, but butter than previous :D

qwqdanchun commented 3 years ago

sorry, still can't recreate the bug

if you can add more details?

xxopenxx commented 3 years ago

sorry, still can't recreate the bug

if you can add more details?

As you can see in screen above from imgur, the button is visible now but not fully, it's visible in 60%, if you know what i mean But it was not visible at all in previous commit so i guess you can make it full visible, and make button appear a bit upper?

i see that you add some fun functions in latest commit? :) It will be in full release? Beacuse i downloaded auto build and it isnt here, like blank screen for example

qwqdanchun commented 3 years ago

the autobuild will build everytimes i commit.so all the function will be there.

image Chat looks like this on my computer and those computer i test.

xxopenxx commented 3 years ago

ike

Very strange, but thanks for the information. So i guess it's my bad. I tested it on 2 win 10 clients, with newest update. Maybe beacuse of resolution or font. But if it's working properly, im sure now thats a problem from my side 😄 Idk why in mine clients the chat windows are cut a bit. maybe beacuse of polish fonts

xxopenxx commented 3 years ago

@qwqdanchun You know maybe why, when i use uninstall, payload dissapear from install folder correctly, but the original client.exe that client launched, doesn't dissapear and it's still there? Original client file should dissapear too, but it can be problem with my pc's.

Example: client launched a payload from desktop and it's working fully correctly, cilent exe goes to appdata, but the original file from desktop doesn't delete from desktop, after uinstall. What can be a reason? Admin privilages

qwqdanchun commented 3 years ago

which uninstall do you use

---Original--- From: @.> Date: Mon, May 10, 2021 07:05 AM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19)

@qwqdanchun You know maybe why, when i use uninstall, payload dissapear from install folder correctly, but the original client.exe that client launched, doesn't dissapear and it's still there? Original client file should dissapear too, but it can be problem with my pc's.

Example: client launched a payload from desktop and it's working fully correctly, cilent exe goes to appdata, but the original file from desktop doesn't delete from desktop, after uinstall. What can be a reason? Admin privilages

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

xxopenxx commented 3 years ago

Client Control ---> uninstall

qwqdanchun commented 3 years ago

this will only delete the exe which is running

xxopenxx commented 3 years ago

this will only delete the exe which is running

What uninstall i can use to delete all the files?

qwqdanchun commented 3 years ago

the program can not know where is the position it used to be

---Original--- From: @.> Date: Tue, May 11, 2021 00:29 AM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19)

this will only delete the exe which is running

What uninstall i can use to delete all the files?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

xxopenxx commented 3 years ago

https://imgur.com/a/99FCczT

Just to let you know, i launched a fresh USA windows 10 rdp, not vm, not local host. And chat button is bugged still there, as you can see. Don't know the reason. It's now 100% not my fault, beacuse it's USA rdp using ngrok

You tested it on some rdps? Maybe it's only working with your fontidk 😄

xxopenxx commented 3 years ago

@qwqdanchun Working perfect! Very big button. 😆 Sorry for being pushy, i just wanna let you know about small bugs like that. Don't know much of programming so at least i can help with things like that

qwqdanchun commented 3 years ago

don't know why.it works well on my computer. finally i use any.run to test it. lol

---Original--- From: @.> Date: Tue, May 11, 2021 08:44 AM To: @.>; Cc: @.**@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19)

@qwqdanchun Working perfect! Very big button. 😆 Sorry for being pushy, i just wanna let you know about small bugs like that. Don't know much of programming so at least i can help with things like that

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.