1.3 KiB
skylink
A R.A.T. (Remote Administration Tool) made mostly as an in-joke between some friends of mine. Originally intended for learning purposes, they volunteered to install the initial prototype (A.K.A. Skylink 0.1) on their computers, which I used for some pranks, but it was unreliable and held together by hopes and prayers, so here I am making a rewrite! This uses the same tech stack (Rust, Tokio, Tokio-tungstenite) however this is only the client, as the C2 server is being rewritten in Python. Much like 0.1, this version of Skylink uses JSON over WebSockets to communicate with a C2 server, however this time the WebSocket implementation is far more reliable and the JSON protocol is different, being easier to understand. It is intended to run as NT AUTHORITY/SYSTEM, even if it uses WebSockets, because more privileges means more potential for tomfoolery. For example, running as SYSTEM lets me enable test mode, install BugCheck2Linux and cause a BSOD.
roadmap
- reliable websockets
- run_as_user
- basic commands
- download and execute
- dnx python
- windows service
- criticality
- screenshot functionality
- test payloads with arguments
- get more ideas from The Group(TM) i guess
- hardening/obfuscating???