posted in RAT sources, Tools & sources on Feb 15th, 2010
Name
Trj.Casper
Type
RAT
Author
Unknown
Written in
C
Description
This sourcecode dates back to 2004. It is quite old and its functionality is rather limited. The intresting part in this source code is the injection section which represents the biggest part of it. It contains an injection function based on the CreateRemoteThread call and all required functions to make it completely run in [...]
read full post »
posted in RAT sources on Jan 24th, 2010
Name
FBI RAT
Type
RAT
Author
Albinoskunk
Written in
C
Description
After calling for your submissions this is the first RAT source that reached me. It was coded by Albinoskunk. The source is based on Aryan v0.5, it was improved at some places and contains all relevant components of a RAT, client, server, GUI and what I consider as the most interesting part in [...]
read full post »
posted in Bot sources, RAT sources on Dec 4th, 2009
Name
Realmbot
Type
RAT, Bot
Author
Unknown
Written in
C/C++
Description
This is a variant of the REalmbot created by Lindem in 2006. Also here many of the typical bot functions were implemented. Services control, user control, process control, key logger (in a rather unelegant way), an FTP and HTTP server, port redirection, etc. The structure is a little chaotic. Reading through the code [...]
read full post »
Name
Win32/Rbot
Malware type
RAT, Worm
Author
Unknown
Written in
C
Description
Rbot is an IRC controlled backdoor (or “bot”) that can be used to gain unauthorized access to a victim’s machine. It can also exhibit worm-like functionality by exploiting weak passwords on administrative shares and by exploiting many different software vulnerabilities, as well as backdoors created by other malware. There are many variants [...]
read full post »
posted in RAT sources, Tools & sources on Oct 13th, 2009
RAT name
PsyRAT 2
Author
Psyphen
Written in
C
Description
Many of the typical RAT functions were implemented. Simple and straightforward. As the author stated the code is not very structured but LOC is low and you will find the paragraphs you’re intrested in.
It contains server and client but unfortunately the stub is compiled and comes without source code.
Questions
In case you [...]
read full post »