Eagle Monitor RAT Reborn V3.2.2.0
the creator and all those associated with the development and production of this program are not responsible for any actions and or damages caused by this software. You bear the full responsibility of your actions and acknowledge that this software was created for educational purposes only. This software’s intended purpose is NOT to be used maliciously, or on any system that you do not have own or have explicit permission to operate and use this program on. By using this software, you automatically agree to the above.
Passwords recovery
History recovery
Keywords recovery
Remote Powershell
Remore CMD
Remote camera viewer (+ save pictures)
Remote microphone (auto saved)
Remote desktop control (+ save pictures)
Remote keyboard
Remote mouse
Remote chat
Remote DotNet Code Execution (VB + C#)
Process manager
Kill process (native techniques)
Suspend process (native techniques)
Resume process (native techniques)
ShellCode injection (NtWriteVirtualMemory + NtCreateThreadEx)
ShellCode injection (NtMapViewOfSection + NtCreateThreadEx)
Shutdown system Reboot system
Suspend system
Hibernate system
Log out user
BSOD
Lock workstation
Offline keylogger (automatically saved)
Realtime keylogger (automatically saved)
Managed pe execution (current process)
Unmanaged pe execution (current process)
Managed dll execution (current process)
Unmanaged dll execution (current process)
Shellcode execution (current process)
Blur screenlocker
Audio up
Audio down
Hide + show taskbar
Hide + show desktop icons
Set wallpaper
File manager
Delete file
Download file
Rename file
Upload file
Get information (CPU, hardware, system)
Shortcuts (download, desktop and documents paths)
Logs (automatically saved)
Client Features :
Anti-Debug (will cause BSOD if debugged)
AMSI patching
ETW patching
Randomize PE from PEB
External depencencies
GunaUI
dnlib
Newtonsoft.Json
NAudio
Notes
All saved stuff (logs, passwords…) are saved in csv format except offline keylogger
All external dlls used are in folder “DLLs + Package”
This remote access tool can also be used as stealer & payloads loader.
Build the project in “release mode” only (change x64 bit for Server)
Under license (AGPL)
Kill process (native techniques)
Suspend process (native techniques)
Resume process (native techniques)
ShellCode injection (NtWriteVirtualMemory + NtCreateThreadEx)
ShellCode injection (NtMapViewOfSection + NtCreateThreadEx)
Shutdown system Reboot system
Suspend system
Hibernate system
Log out user
BSOD
Lock workstation
Offline keylogger (automatically saved)
Realtime keylogger (automatically saved)
Managed pe execution (current process)
Unmanaged pe execution (current process)
Managed dll execution (current process)
Unmanaged dll execution (current process)
Shellcode execution (current process)
Blur screenlocker
Audio up
Audio down
Hide + show taskbar
Hide + show desktop icons
Set wallpaper
File manager
Delete file
Download file
Rename file
Upload file
Get information (CPU, hardware, system)
Shortcuts (download, desktop and documents paths)
Logs (automatically saved)
Client Features :
Anti-Debug (will cause BSOD if debugged)
AMSI patching
ETW patching
Randomize PE from PEB
External depencencies
GunaUI
dnlib
Newtonsoft.Json
NAudio
Notes
All saved stuff (logs, passwords…) are saved in csv format except offline keylogger
All external dlls used are in folder “DLLs + Package”
This remote access tool can also be used as stealer & payloads loader.
Build the project in “release mode” only (change x64 bit for Server)
Under license (AGPL)
