BetterBackdoor - A backdoor with a multitude of features

Typically, backdoor utilities such as NetCat have 2 main functions: to pipe remote input into cmd or bash and output the response. This is useful, but it is also limited. BetterBackdoor overcomes these limitations by including the ability to inject keystrokes, get screenshots, transfer files, and many other tasks.

Features

BetterBackdoor can create and control a backdoor.

This created backdoor can:

Run Command Prompt commands
Run PowerShell scripts
Run DuckyScripts to inject keystrokes
Exfiltrate files based on extension
Exfiltrate Microsoft Edge and WiFi passwords
Send and receive files to and from victim's computer
Start a KeyLogger
Get a screenshot of victim's computer
Get text copied to victim's clipboard
Get contents from a victim's file (cat)

This backdoor uses a client and server socket connection to communicate. The attacker starts a server and the victim connects to this server as a client. Once a connection is established, commands can be sent to the client in order to control the backdoor.

To create the backdoor, BetterBackdoor:

Creates 'run.jar', the backdoor jar file, and copied it to directory 'backdoor'.
Appends a text file containing the server's IPv4 address to 'run.jar'.
If desired, copies a....

Read the rest of this story with a free account.

Already have an account? Sign in

Author

Hakin9 TEAM: Hakin9 is a monthly magazine dedicated to hacking and cybersecurity. In every edition, we try to focus on different approaches to show various techniques - defensive and offensive. This knowledge will help you understand how most popular attacks are performed and how to protect your data from them. Our tutorials, case studies and online courses will prepare you for the upcoming, potential threats in the cyber security world. We collaborate with many individuals and universities and public institutions, but also with companies such as Xento Systems, CATO Networks, EY, CIPHER Intelligence LAB, redBorder, TSG, and others.