EgoDrop

An experimential Linux RAT for learning post-exploitation.
Still in development.

Continuously update: version-0.2

Introduction

This is an experimental RAT(Remote Access Trojan) for Linux platform. C# GUI based server and C++ based payload.

Goal of Learning

• How to establish a secure, encrypted communication channel.
• How to build a rootkit.
• How to implement keylogger on Linux platform.
• InfoSpyder.
• How to implement a communication through DNS tunnel.
• How to implement remote plugin.
• How to do beacon like CobaltStrike, Havoc Post Exploitation framework.
• Smooth file transfer.
• Virtual terminal based on xterm (Capable to do ssh).
• VPN.

Todo List

• File Manager
  • Upload
  • Download
• Service Manager
• Process Manager
• Simple Plugins Manager

Done

• RSA + AES TCP communication.
• TLS communication.
• HTTP communication.
• Chain
• File Manger
  • View Image
  • Read/Write
• Virtual Terminal
• Proxy

Screenshot

Topology

Terminal(Virtual terminal, but is capable to use ssh or vim.)

Demonstration