Nice repo. about dcrat HOT 34 CLOSED

schtask uninstall won't delete file. it only delete schtask .

system control-client control-uninstall will stop client running and delete it

from dcrat.

from dcrat.

from dcrat.

from dcrat.

not able to recreate this

however, i will try to fix it in next commit

from dcrat.

the autobuild will build everytimes i commit.so all the function will be there.

Chat looks like this on my computer and those computer i test.

from dcrat.

from dcrat.

from dcrat.

thank you .i will keep on coding
…
---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working

from dcrat.

from dcrat.

it can run local host surely .if you use the correct certificate？
…
---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

Yeah im using correct certificate, maybe its my fault. I just can't connect when ip is 127.0.0.1, when i run it with my external ip on my pc it's working. So strange

from dcrat.

can't find why. it's really strange
…
---Original--- From: @.> Date: Wed, May 5, 2021 22:56 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) it can run local host surely .if you use the correct certificate？ … ---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe. Yeah im using correct certificate, maybe its my fault. I just can't connect when ip is 127.0.0.1, when i run it with my external ip on my pc it's working. So strange — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

What about adding miner, like monero, eth, btc, doesnt matter. I saw this feature in async/limerat. It is possible in future?

from dcrat.

usually,this feature is drop a xmrig on disk and run it. i will add it in the future
…
---Original--- From: @.> Date: Wed, May 5, 2021 23:49 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) can't find why. it's really strange … ---Original--- From: @.> Date: Wed, May 5, 2021 22:56 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) it can run local host surely .if you use the correct certificate？ … ---Original--- From: @.> Date: Wed, May 5, 2021 22:37 PM To: @.>; Cc: @.@.>; Subject: Re: [qwqdanchun/DcRat] Nice repo. (#19) thank you .i will keep on coding … ---Original--- From: @.> Date: Wed, May 5, 2021 21:58 PM To: @.>; Cc: @.***>; Subject: [qwqdanchun/DcRat] Nice repo. (#19) Just want to thanks for this great open source rat, waiting for more, maybe fun plugins in malware section? The encryption thing is very nice. :) Keep it up, nice work — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. You know maybe what can be a reason that i can't connect to a local host with this rat? Build with external ip works, but local host on my pc, vm doesnt work at all. Quasar, Async working. Maybe its my fault but idk. Ports are not the problem beacuse external working — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe. Yeah im using correct certificate, maybe its my fault. I just can't connect when ip is 127.0.0.1, when i run it with my external ip on my pc it's working. So strange — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe. What about adding miner, like monero, eth, btc, doesnt matter. I saw this feature in async/limerat. It is possible in future? — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or unsubscribe.

I didnt know this, but nice to now :) But it will be great, if you can add this as a plugin in future

from dcrat.

Nice new fun plugin! Waiting for more, working great :)
But i have a problem with schtask install, whenever i try to launch it. It just doesn't work for me, rat isn't installing and after restarting client pc rat is not installed, and not connected. :/

What can be a reason?

Second problem is with the chat, on client pc "button" with send message is cut in half (in server it's working), so it's very hard to spot this button, and click it. You can check it out.
@qwqdanchun
Thanks for updates.

from dcrat.

schtask does creating a client exe in appdata folder, but startup not working for me, it doesn't connect after computer restart.
i know i can use normal install or install in build, but sad that doesn't work for me :/ doesnt launch in start of the pc

New normal install works fine, but i can't uninstall it. When im trying to uninstall normal install, i get this error "
value with that name does not exist"

But i see uninstall from client control section works fine.

from dcrat.

from dcrat.

from dcrat.

What is schtask install ? Thanks for great work man please take care of this project cause i was everyday checking and waiting for an update

from dcrat.

@qwqdanchun https://imgur.com/a/x0tDQhn
You see? Button is cut in a half, and hard to spot it in the right down corner.

schtask install appear in appdata but it's just exe file for me, it doesn't launch after restart. It doesn't appear in process hacker on taskmgr. So its just doesnt launch :/

from dcrat.

win+R and input taskschd.msc
you can find all schtasks on your computer.

check if you can see one name"Adobe Acrobat Update Task"

from dcrat.

win+R and input taskschd.msc
you can find all schtasks on your computer.

check if you can see one name"Adobe Acrobat Update Task"

I see it in taskschd.msc, it's working now lol. But cilent is not dissapearing in appdata ,after schtask uninstall or uninstall from user control. It stays there after schtask install

from dcrat.

schtask uninstall won't delete file. it only delete schtask .

system control-client control-uninstall will stop client running and delete it

thanks, all great now. From what i see :) only the chat button is bugged

from dcrat.

not able to recreate this

however, i will try to fix it in next commit

https://imgur.com/a/TQFdBfP It's working better now! Thanks, it's kinda not full visible, but butter than previous :D

from dcrat.

sorry, still can't recreate the bug

if you can add more details?

from dcrat.

sorry, still can't recreate the bug

if you can add more details?

As you can see in screen above from imgur, the button is visible now but not fully, it's visible in 60%, if you know what i mean
But it was not visible at all in previous commit so i guess you can make it full visible, and make button appear a bit upper?

i see that you add some fun functions in latest commit? :) It will be in full release? Beacuse i downloaded auto build and it isnt here, like blank screen for example

from dcrat.

ike

Very strange, but thanks for the information. So i guess it's my bad. I tested it on 2 win 10 clients, with newest update. Maybe beacuse of resolution or font. But if it's working properly, im sure now thats a problem from my side 😄 Idk why in mine clients the chat windows are cut a bit. maybe beacuse of polish fonts

from dcrat.

@qwqdanchun You know maybe why, when i use uninstall, payload dissapear from install folder correctly, but the original client.exe that client launched, doesn't dissapear and it's still there? Original client file should dissapear too, but it can be problem with my pc's.

Example:
client launched a payload from desktop and it's working fully correctly, cilent exe goes to appdata, but the original file from desktop doesn't delete from desktop, after uinstall. What can be a reason? Admin privilages

from dcrat.

from dcrat.

Client Control ---> uninstall

from dcrat.

this will only delete the exe which is running

from dcrat.

this will only delete the exe which is running

What uninstall i can use to delete all the files?

from dcrat.

from dcrat.

https://imgur.com/a/99FCczT

Just to let you know, i launched a fresh USA windows 10 rdp, not vm, not local host. And chat button is bugged still there, as you can see. Don't know the reason. It's now 100% not my fault, beacuse it's USA rdp using ngrok

You tested it on some rdps? Maybe it's only working with your fontidk 😄

from dcrat.

@qwqdanchun Working perfect! Very big button. 😆 Sorry for being pushy, i just wanna let you know about small bugs like that.
Don't know much of programming so at least i can help with things like that

from dcrat.