DuplexSpy

DuplexSpyCS (CS stands for CSharp) is a open source RAT base on C/S

Continuously update: Branch-Version2.1.0

Documents

The online documents are here:
DuplexSpy
Fileless Execution
DLL and shellcode injector and loader
Remote Plugin
Proxy

Introduction

DuplexSpy is a open-source Windows RAT for learning offensive security techniques.
It incorporates features inspired by other tools as well as my own personal experience. Compared to the previous version, I removed several features that I considered unnecessary and added a number of new ones.
Throughout this development process, I learned a great deal, and I sincerely hope that this project can be useful to others who are interested in offensive security or malware research.

If you encounter any issues or have suggestions, please feel free to open an issue on the repository page.

Disclaimer

This project was developed as part of my personal interest in studying cybersecurity. However, it may potentially be misused for malicious purposes.
Please do NOT use this tool for any illegal activities.
The author is not responsible for any misuse of this software.

Warning

Your antivirus software may detect and automatically delete certain files (such as shellcode text files used for demonstration purposes). This behavior is expected.

Murmur

As a college student, developing a GUI-based remote access tool entirely on my own—and performing proper quality assurance (QA)—has been a significant challenge for me.
Due to limited time, experience, and resources, this project may still contain defects or design flaws that I have not yet discovered.
Nevertheless, I believe that I have successfully built a RAT that incorporates a variety of offensive techniques and practical features.

If you find this project helpful or informative, I would truly appreciate a ⭐ on the repository. Your support would be a great motivation for me to continue improving this tool.

Acknowledgement

To all cybersecurity experts, researchers and remote access tool authors, respect!

Feature

• Client Config
• Information
• Manager
  • File Manager
  • Task Manager
    • DLL Injection
    • Shellcode Injection
  • Registy Editor
  • Service Manager
  • Connection View
  • Window Manager
• Terminal
  • Piped Shell
  • Xterm Shell See this
  • WQL Console
• Remote Desktop
• Camera View
• Audio
  • Capturing Microphone Signal
  • Capturing Speaker Signal
  • Play Sounds
• FunStuff
  • Hide/Show Mouse
  • Lock/Unlock Mouse
  • Hide/Show Tray
  • Hide/Show Taskbar
  • Hide/Show Clock
  • Hide/Show StartOrb
  • Change Wallpaper
  • Lock/Unlock Screen
• Proxy (click here to learn more about this feature)
• Plugins (click here to learn more about this feature)
• Mics
  • DLL Loader
  • Shellcode Loader
  • Fieless Execution (click here to learn more about this feature)
  • Run Script
  • Chat Message
  • KeyLogger
• Batch
  • Multi Desktop
  • Multi Webcam
  • Open URL
  • Lock Screen (See this)

Anticipation (Coming soon, in v3.0.0)

• Quality Assurance (Debug)
• More Plugins
• DNS Tunneling

Network Architecture

Screenshot

Main

File Manager

Display Image File

This RAT is able to view image file.

Task Manager

Reg Edit

Service Manager

Connection View

Window Manager

Monitor

Shell

Piped Shell

Xterm Shell

WQL Console

Keylogger

Multi Desktop

Proxy

LockScreen

RunScript

Fileless Execution

Plugins