Showing posts with label Multi-platform. Show all posts
Showing posts with label Multi-platform. Show all posts

Monday, 30 July 2012

NetWire first Multi-platform RAT

NetWire claim to be the first Multi-platform RAT, it can generate output for Windows, Linux, Solaris and Mac OS X.
But the client work only in Windows.


Netwire team clashing DarkComet:

Safengine Licensor... :)

Allright, the disclaimer:

Main interface

Password generator feature:

Application proxifier:

Settings (General/Ports/Passwords):



Platform choice:

Windows profil:

Linux:

Solaris:

Mac OS X:

Server creation (General):

Server creation (Installation):

Server creation (Advanced):

Server build:

After opening servers:

Scree, capture/keylogger on linux:


Copy to %APPDATA% execute/close the current exe, add a startup entry

Writing Host.exe in %APPDATA%

Delete original file feature:

I don't know for other platform but the windows version is pretty easy to understand how it's work with a debugger.


The current version of Netwire (1.2.0.1) suffer of a bug on the Host ID lenght who can conduct to corrupted output for every platform



The password recovery feature can also crash the Host:


I've not tested/debuggd on Solaris and Mac OS X because i don't have both os and also the knowledge, anyway netwire seem pretty interesting.
I'm also curious to see the new project of DarkCoderSc.




Edit 31 Jul 2012:
Netwire 1.2.0.2 is out, fixing the Host ID bug who can produce corrupted Host.
I also got a mail from WorldWiredLabs about Dugidox, i've make a mistake.
The guys who advertised this on Hackforum was an affiliate of WorldWiredLabs but not from the WWL team.