Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add RAT category and add fileless-xec into it #426

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

ariary
Copy link
Contributor

@ariary ariary commented Nov 22, 2021

What is RAT tools category?

A remote access Trojan (RAT) is a malware program that includes a back door for administrative control over the target computer.

I think this kind of tools could not be placed into other category and are part of the arsenal of a pentester.

What is fileless-xec?
fileless-xec could be used as a stealth dropper (kind of trojan that has been designed to "install" some sort of malware to a target system). It enable us to retrieve a remote binary file and execute it in one step without dropping binary on disk.

  • The binary file is not mapped into the host file system
  • The execution program name could be customizable
  • Bypass 3rd generation firewall could be done with http3 support
  • Bypass network restriction with icmp support
  • Handle different type of connection with remote (client or server)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant