Set of fake Java applications with hidden backdoors made to learn about socket programming and backdoors.
Each application triggers a reverse shell when executed, opening a PowerShell session. It also allows transfering files in both directions and taking screenshots (use help command for more info).
None of the applications is blocked by WindowsDefender
- RAW: Just the backdoor, without any masking application
- CSGOHacks: Fake application to gain cheats for the game "Counter Strike: Global Offensive"
- KeyGen: Fake key generator for some programs from the Adobe Suite
- YoutubeMP3: Fake YouTube to mp3 converter
- The attacker must run the Attacker project launched from launcher/main.java. It will create a server listening by default on port 5123 (this can be easily changed in main.java).
- The application for the victim must be configured by specifying the attacker's IP and port. Then, it must be packed into a .jar file. I recommend using any application to convert the .jar to .exe such as Launch4j, although the vicitm still needs to have Java installed. When the victim executes the application, it will connect to the attacker's machine and will open the PowerShell session.