JSRat-Py

April 21, 2016 ยท View on GitHub

This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.

Added support to handle client invocation via either rundll32 or regsvr32 methods

References & Original Project:
regsvr32: https://gist.github.com/subTee/24c7d8e1ff0f5602092f58cbb3f7d302
rundll32: https://gist.github.com/subTee/f1603fa5c15d5f8825c0
http://en.wooyun.io/2016/01/18/JavaScript-Backdoor.html
http://en.wooyun.io/2016/02/04/42.html

Video Demos:
https://youtu.be/0nx04OaIG04
https://youtu.be/tGIndE7aexI

Big Thanks to SubTee!