Villain-Unleashed new features demo 2023 

Thanks so much!! 🤩

Thanks for the support!

Thank you 💚

Thank you!

Good to be back

So, what's the bug mate?

@@HaxorTechTones I hosted the c2 under my domain with a real cert, not self signed. hence i picked the hoax/https cmd with curl. The payload simply doesn't execute in the current version without a simple modification on windows 10. The problem lies in the iterational part of the payload, i already feel like i said too much. let's not get it signatured too early. it's a byte too short. the easiest way to understand it is to know the difference between pasting the payload into the cmd and launching it out of a bat file - that's how i spotted it. each of the ways of starting it gave me different errors so i pinpointed it rather quickly, but if you still wanna know i insist on different channels of communication

im having the same issue, have you figured it out?

@@philxdes1573 The problem was that I had a bad configuration of kali linux in virtual studio code. Try going to the settings of the machine, to the network option and change the first option to bridge adapter.

Hi, thanks! Not yet, working on it. Stay tuned!

Make sure to add the file name to the path you want the file to be uploaded, not only the dir.

@@HaxorTechTones It seems better but still not working, when I keep my hard disk name it says : the generic path isn't resolved when I just type the path from /users, as you did, it says : non-conforming character (translate from french, hope you will get it :/)

Ok just got it !!! The problem was that I kept writing the full path, like I was in C:/Users/TheGuyIAm and I kept writing C:/Users/TheGuyIAm/Desktop/TheFileIWant when I should have written /source_path \desktop\TheFileIWant

@@HaxorTechTones And thx ! You're the best !

One last question, I tried connecting to an FTP server using Villain but kept blocking at the connection step, is it normal or ?

It shouldn't be doing this, never had that issue. You need to provide some info, maybe open an issue on github with screenshots. Does the shell session stop working or does villain mark the connection as lost? Are you sure there's no event occurring that leads to the session loss?

@@HaxorTechTones ok so I forgot to mention that i am using ngrok and it seems that the problem occurs only when using ngrok, because I don't have this problem inside my LAN.

i dont think so...

You can use TCP socket based reverse shell commands to do that, those are reusable. The hoaxshell ones are one timers

Hey, thanks! That's kind of complex to pull off. I might make a video about it in the future :)

@@HaxorTechTones thanks bro😃

Hi, in an automated manner, like, "download /path/to/file", not yet unfortunately, but the feature will be added in a future update :)

​@@HaxorTechTonesYoooo! You are the best

Hi, thanks! Currently, I don't. kind of figuring out the direction of the project.

ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-grSBdZdUya0.html

not yet ¯\_(ツ)_/¯

@@HaxorTechTones ok bro

Can we download files using the shell?

@@osmanali176 you can do it manually from within powershell... you can make a script that uploads files to dropbox using dropbox api... theres a tutorial here youtube.

@@johnazure can you share me the link?

No, you would have to work on persistence by e.g., injecting a malicious periodically executed task or backdoor a startup service. The content on this channel is for authorized assessments. Don't try weird monkey stuff against machines you do not have permission to test.

@@HaxorTechTones i know i just ask and im 14 year im begener in hacking can if a make that file auto run file

The trick is to edit the payload templates and replace the commands with obfuscated versions of them. I'll make a how-to video about it soon.

@@HaxorTechTones thanks bro I am waiting for it😁

dig a little bit ;)

You are breaking my heart. Why?

Nothing like that I just want the older version

I am just more comfortable with the older one that’s all

@t3l3machus so can I have it...

I will add it in the github "releases" soon

👍

Because the payload is getting caught by your anti-virus. Check out this video on how to bypass it -> ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-grSBdZdUya0.html