narayanr7 / HorusEyesRat_Public

Remote Acess Tool Written in VB.NET

HorusEyesRat

Remote Acess Tool Written in VB.NET

Features :

• Supports DNS (No-IP for example)
• Multi-Threaded
• Asynchronous
• Packets Serialization
• Multi Ports Listener
• Automation Tasks when client is connected
• Save Settings for automation tasks
• Blur ScreenLocker
• Monitor Rotation (0 , 90 , 180 , 270 degrees)
• Hide & Show Taskbar
• Hide & Show Desktop Icons
• Hide & Show Cursor
• Swap & Normal State Mouse Buttons
• Lock & Unlock Keyboard
• Empty Bin
• Native Injection : You can inject an unmanaged DLL (C++ , C , D...)
• 32 & 64 bit stubs
• Mass Tasks: Passwords Recovery , History Recovery , Wifi Passwords Recovery
• Tasks Manager : Kill , Resume , Pause
• Passwords Recovery (+35 web browsers based on chromium)
• History Recovery (+35 web browsers based on chromium)
• Wifi Passwords Recovery
• Power : Log out , Reboot , Shutdown , Hibernate , Suspend
• BSOD
• Increase Volume
• Decrease Volume
• Mute | Unmute Volume
• Save all passwords | history recovered
• Export History | Passwords as .csv file
• Installation : Set a task in TaskScheduler | Hidden from startup + copy file in local user path hidden
• Ability to change your client priority
• Ability to ask for privileges
• Check UAC at different levels (if enable or not)

Sources :

• Passwords Recovery : Modded Library Based on : https://github.com/0xfd3/Chrome-Password-Recovery
• Wifi Passwords Recovery : Modded Library Based on : https://github.com/r3nhat/SharpWifiGrabber
• Loading Unmanaged DLLs in Managed EXE : Class comes from : https://github.com/schellingb/DLLFromMemory-net with manual mapping for those dlls.
• Code I used to test the loading of dll in memory (in C++ but also worked in D Lang) :

BOOL APIENTRY DllMain( HMODULE hModule,
                       DWORD  ul_reason_for_call,
                       LPVOID lpReserved
                     )
{
    switch (ul_reason_for_call)
    {
    case DLL_PROCESS_ATTACH:
        MessageBoxA(NULL, "Hello World!", "Dll says:", MB_OK);
    case DLL_THREAD_ATTACH:
    case DLL_THREAD_DETACH:
    case DLL_PROCESS_DETACH:
        break;
    }
    return TRUE;
}

Note for injection:

• 32 bit dlls (in c++ or whatever you want) is for 32 bit stub
• 64 bit dlls (in c++ or whatever you want) is for 64 bit stub
• Don't inject a 32 bit dll in 64 bit stub and vice-versa (you can try if you want but the server will give you an error :))

Preview :