Future Work

Future Work

• Major

  • http payload encryption
  • TLS
  • New modules
    • upload files
    • dialog box popup for creds
    • keylogger
    • rootkit to hide the stager process and the stager file : https://www.youtube.com/watch?v=6CFnK20EyUU -
  • A better way to show the module output
  • Stager for android
  • Unit test
    • Server starts
    • Modules

• Medium

  • Funny names of victims and meaningful victim ID
  • Debug mode for the stager
  • search
  • Delay and Jitter
  • Execute the module code in memory instead of writing to files

• Minor

  • Modules should have admin required attribute and based on that they should be allowed to execute
  • Don't send powershell command to linux victim or give warning that it might not work
  • Modules selectable by number or regex
  • Check if powershell script execution is disabled in victim during staging itself.