• XSS.stack #1 – первый литературный журнал от юзеров форума

Spectre 5.0 RAT | Botnet | HiddenBrowser

В этой теме можно использовать автоматический гарант!

YdqKduT.png


Hello, I'm the developer of the tool and I'm releasing the v5.

v2 (previous version reference) thread
https://xss.pro/threads/47974/

FEATURES
* C++ RAT (BOT)
* PHP/AJAX C2 SERVER (WEB PANEL)
* NOT BASED ON ANOTHER MALWARE

RAT/BOT
(+) UPLOAD + DOWNLOAD FILES

(+) DOWNLOAD + EXECUTE
* EXE / BAT / VBS

(+) HARVEST / FIND FILES
* FIND
* BY FILENAME / EXTENSION / FILENAME+EXTENSION
* FOLDERS: PREDEFINED / CUSTOM
* OPTIONAL "MAX FILE SIZE" VALUE (AVOID UPLOADING HUGE FILES)
* UPLOAD FILES FROM SEARCH RESULTS
* HARVEST
* ZIP FOUND FILES AND UPLOAD THE PACKAGE

(+) PASS RECOVERY
* CHROME / FIREFOX / EDGE / FILEZILLA

(+) BROWSERS DATA
* FIREFOX AUTOFILL+HISTORY+COOKIES
* CHROME AUTOFILL+CREDIT CARDS+HISTORY+COOKIES
* EDGE AUTOFILL+CREDIT CARDS+HISTORY+COOKIES

(+) CLIPBOARD STEALER
* LIVE MODE + DOWNLOAD/DELETE DATA
* SAVES ACTIVE WINDOW (PROGRAM)

(+) CLIPPER/SWAPPER
* REPLACES BITCOIN/ETHEREUM/MONERO ADDRESSES WITH YOURS

(+) KEYLOGGER
* OFFLINE MODE
* HOOKING API METHOD (MORE ROBUST. NOT ASYNC)
* ON/OFF SWITCH
* 3 PREDEFINED INTERVALS TO SEND THE LOGS
* SAVES ACTIVE WINDOW (PROGRAM)

(+) UPDATE
"NEW VERSION" MODE
* UPDATE TO NEW BOT+PANEL (WITH NEW FEATURES)
* CONFIRMS NEW BOT CONNECTED TO THE NEW C2 SERVER BEFORE KILLING OLD (AVOID LOSING YOUR BOTS)
"ReFUDED" MODE
* REPLACE THE CURRENT RUNNING BINARY FOR THE REFUDED ONE
(!) THIS FEATURE WILL NOT CRYPT YOUR BINARY. ONLY DOES THE UPDATE/DEPLOY

(+) SCREENSHOTS

(+) KILL BOT

(+) MULTIPLE C2 SERVERS LIST
* BUILT WITH 5 C2 SERVERS' URLS. 1 MAIN + 4 BACKUPS.
* IF THE MAIN SERVER GETS BANNED THE BOT WILL CHECK THE NEXT SERVER UNTIL IT FINDS ONE ONLINE. YOU DONT LOSE YOUR BOTS. THEY WILL MIGRATE TO ANOTHER SERVER.

(+) SINGLE/GROUP/MASS COMMANDS
* SET A COMMAND FOR A SINGLE BOT, FOR A GROUP OR FOR ALL (MASS)

(+) MULTIPLE COMMANDS FOR EACH BOT (COMMANDS QUEUE)
* IF THE TARGET IS OFFLINE COMMANDS WILL BE EXECUTED WHEN ONLINE
* SHOWING PENDING COMMANDS

(+) PC INFO
* INSTALLED PROGRAMS + HARDWARE INFO

(+) VISIT URL
* USING HEADLESS BROWSERS (CHROME/FIREFOX IF INSTALLED)

(+) ANTI-ANALYSIS
* IF ANALYSIS TOOLS ARE RUNNING THE BOT EXITS
* UNIQUE MUTEX FOR EACH BUILD
* UNIQUE DATA FOLDER FOR EACH BUILD
* BINARY STRINGS OBFUSCATED

(+) (NEW) HIDDEN BROWSER
* BROWSE USING THE TARGET PC/IP
* FIREFOX/CHROME/EDGE (IF INSTALLED)
* BROWSER DEFAULT USER PROFILE IS USED
* ACCESS THE SESSIONS, PWDS SAVED, BOOKMARKS, HISTORY, ETC.
* IN "BETA". CONNECTION IS HTTP (NOT SUPER FAST)

(+) (NEW) SCREENSHOT BURST
* TAKE MULTIPLE SCREENSHOTS WHEN AN APP IS FOCUSED AND MATCHES THE TITLES/STRINGS SPECIFIED
* CONFIGURE 3/5/10 SCREENSHOTS BURST

(+) (NEW) PROCESSES LIST+KILL

(+) (NEW) SHELL/CMD
* RUN CMDS AND GET THE OUTPUT
* NOTE: NOT A FULL INTERACTIVE REVERSE SHELL

C2 WEB PANEL
* LIST TARGETS
* SET COMMANDS
* LIST+DOWNLOAD FILES
* STARTUP. CONFIG THE MODULES FOR THE FIRST TIME EXECUTION.
* TARGETS' LOG (ACTIVITY/COMMANDS EXECUTED)
* DARK/LIGHT THEME
* SECURE LOGIN WITH USER/PASSWORD AND "2FA" CODE
* CREDENTIALS ARE HARDCODED AND HASHED. NO DATABASE USED. CANT BE cracked[.]
(+) (NEW) COUNTRY INFO+FLAG
(+) (NEW) SAVE ALIASES (FOR BOT NAMES)
(+) (NEW) CANCEL COMMANDS
(+) (NEW) DELETE BOT
(+) (NEW) DOWNLOAD ALL FILES AS ZIP

PANEL SCREENSHOTS (PREVIEW)

PANEL SCREENSHOTS (FULL)
7Z PASS D5F6V8J3S6H4

PROS
+ SECURE. THE PANEL RUNS FROM A HOSTING/VPS. NOT ON YOUR COMPUTER
+ SECURE. LOGIN USING TOR BROWSER (JAVASCRIPT FULL TURNED ON)
+ NO SETUP. AVOID VPNS WITH PORT FORWARDING OR TUNNELING. YOU GET READY ACCESS TO THE PANEL
+ GET FILES ALL THE TIME. NO NEED TO HAVE YOUR PC TURNED ON ALL DAY (AVOID CRASHES, INTERNET/VPN DISCONNECTIONS, ETC)
+ MULTIPLE FEATURES COMING ON FUTURE VERSIONS

CRYPTING
(*) NOT "FUD". NEEDS CRYPTING/PROTECTING FOR ANTIVIRUS EVASION
(*) A CRYPTER WITH "NATIVE" SUPPORT SHOULD BE USED (FOR A C++ APP)
(*) STARTUP/PERSISTENCE SHOULD BE SET ON THE CRYPTER

CAVEATS / NOTES
(*) C2 PANEL NEEDS JAVASCRIPT FULL TURNED ON
(*) EXE SIZE IS ~470kb
(*) TESTED ON WINDOWS 7/8/10

ASSETS YOU RECEIVE
* RAT BINARY
* ACCESS TO THE C2 PANEL
* README


PRICING
RAT+PANEL
* 1 MONTH 70 USD
* 3 MONTHS 180 USD
* 6 MONTHS 350 USD

+ UNIQUE HOSTING/DOMAIN COST
* 1 MONTH 35 USD
* 3 MONTHS 50 USD
* 6 MONTHS 85 USD

(*) UPDATES (TO NEW VERSIONS) INCLUDED
(*) DEMO AVAILABLE. 30 USD FEE REQUIRED (DISCOUNTED LATER FROM THE PLAN PRICE)
(*) MONERO / BTC ACCEPTED
(*) PRICES MIGHT INCREASE ON PLAN RENEWAL ON NEWER VERSIONS

TERMS OF SERVICE
* EACH CLIENT GETS A UNIQUE DOMAIN+HOSTING SERVICE (NOT SHARED).
* YOUR PLAN STARTS ONCE THE HOSTING+DOMAIN IS SETUP AND YOU GET ACCESS. IF THERE IS A DELAY BETWEEN THE PAYMENT AND THE SETUP YOU WON'T LOSE ANY TIME OF USING THE TOOL.
* YOUR PANEL URL WILL BE RANDOMLY GENERATED. IT CANNOT BE CHANGED OR CHOSEN.
* IF YOUR MAIN URL GETS BLOCKED DUE TO A SPAM/MALWARE COMPLAINT (SUCH AS SPAMHOUSE), YOUR BOTS WILL MOVE TO THE NEXT EMBEDDED URL. WE WILL NEED TO REGISTER THE NEW DOMAIN AND IN SOME CASES GET A NEW HOSTING PLAN. NEW DOMAIN/HOSTING COSTS ARE NOT INCLUDED.
* NO FTP/CPANEL WILL BE PROVIDED DIRECTLY TO THE HOSTING SERVICE.
* IF UNSURE OF THE PRODUCT FIRST TEST USING THE DEMO.
* REFUND IS ONLY DONE (IN SPECIAL CASES) FOR THE "TOOL" PRICE ONLY. NOT THE HOSTING/DOMAIN COSTS. TEST USING THE DEMO FIRST TO AVOID ISSUES.
Do you have telegram, or can I provide you my tox via pm
?
 
Пожалуйста, обратите внимание, что пользователь заблокирован
talked to the owner on jabber and I can say that he is a good guy, competent coder and is working hard on getting this project to the best it can be. GLWS and I am excited to see how you develop this further, as we talked about:)
Give it a try, its a very HQ stealer for the price.
 


Напишите ответ...
Верх