JSRat-Py
April 21, 2016 ยท View on GitHub
This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.
Added support to handle client invocation via either rundll32 or regsvr32 methods
References & Original Project:
regsvr32: https://gist.github.com/subTee/24c7d8e1ff0f5602092f58cbb3f7d302
rundll32: https://gist.github.com/subTee/f1603fa5c15d5f8825c0
http://en.wooyun.io/2016/01/18/JavaScript-Backdoor.html
http://en.wooyun.io/2016/02/04/42.html
Video Demos:
https://youtu.be/0nx04OaIG04
https://youtu.be/tGIndE7aexI
Big Thanks to SubTee!