Articles

Metasploit Framework Windows Tutorial
Remote Desktop Connection
Windows Processes That May Be Dangerous
How-To use NetCat a Tutorial
Common Linux Commands
Common Ports
Netcat Commands
HTTP Response Codes
War-Google Hack Terms
Wardriving
Avoiding Social Engineering and Phishing Attacks
Intrusion Detection on Linux
Linux Intrusion Detection
Penetration Testing Guide
Penetration Testing Tools
Social Engineering Fundamentals, Part I: Hacker Tactics
Social engineering (computer security)
The Psychology of Social Engineering

The Archives

General GSO
GovernmentSecurity.org News & Suggestions
In The News
Open Topic
General Security Information
Trash Can
Exploit & Vulnerability Mailing List Archives
Trial Member Forum
Product and Program Reviews GSO Tutorials
System Security
Windows Systems
Beginners Section
Linux & Unix Systems
File Downloads
Exploit Research & Discussion Trojan & Virus Errata
Networking Security / Firewall / IDS / VPN / Routers
System Hardening
E-Mail Security
Wifi Security
Trial Member Uploads
Upload discovered Trojans & Mal ware
GSO Programming Section
C , C++ , VC++
Visual Basic.NET
Perl /CGI
Java/Javascript
PHP/XML/ASP/HTML
Assembly + Other
The Cork Board
Network Security Consultant Directory
Network Security Jobs
The Archives
Encryption Information
General Network Security
Internet Anonymity
HTTP Protocol Security
Linux Security
MS IIS Information
Exploit Articles
Programming / Tool Design
GSO Software Projects
Public Downloads
Microsoft Security Questions and Papers

Full Version: Ziplock Rat
chris105
Hey all,

The code is really dirty I know, havnt had time to work on this particular one recently, I think going for reverse connect and IRC in seperate projects was a mistake as they are both at different levels but I think someone will get some use out of these and learn a bit. Both of them came with builders that brainbuster helped me on but I cant find them atm, I will upload them if I find them. Hopefully development will move faster now you guys have got the source and I hope to see lots of suggestions and improvements as well as constructive criticism, by that I mean by all means point out what is wrong with the source but give a possible solution do not just criticise, anyway.

WARNING: Reverse connect is currently set to connect to localhost:81 however once the RAT is started and setupf() is called it cant be killed by taskmanager (simply because of its name) so use a tool like pskill to kill it and then remove prexec.exe from your system, alternatively for test in sub form_load() comment out setupf().

Client (requires winsock control)
IRC
Reverse connect (81)

are included (oh and I would like to credit authors of the numerous code snippets I adapted and lobbed in or lobbed in in their entirety)
chris105
Any comments yet anyone? bugs? (bout a million to choose from so take your pic lol)
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2005 Invision Power Services, Inc.