4.0.4

• Improved local IPV4 retrieval in Linux agent
• Updated ui.png

4.0.3

Improved screenshot by RuBublik

4.0.2

• Improved collection methods
• Added spawn command

4.0.1

• Fixed bug in sanitize_data()
• Increased UAC timeout
• Small fixes

4.0.0

• Fixed bug in 'assembly' command
• Added 'critical' command to set the implant process as critical (termination or even crash causes immediately to BSOD)
• Added support to patch AMSI & ETW on process start
• Improved UPX obfuscation
• Printing bytes sent to implant when calling home
• Some more refactor and improvements

v3.1.0

1. Added keylogger (threaded)
2. Added Evil Lsass Twin dump method
3. Added visible windows enumeration
4. Added Lsass protection assessment
5. Improved UAC command
6. Some more improvements

v2.0.0

1. ‌Patch ETW/AMSI better with indirect syscalls
2. ‌Shellcode injection better with indirect syscalls
3. ‌Patch environment.exit for assemblies so they won't terminate the agent process
4. ‌Loaded modules command (PS module)
5. ‌Config: reloc_on_exec
6. ‌Fixed audio bug
7. ‌msgbox in new thread
8. ‌Getting full path of agent process

v1.0.0

config.c2_address = localhost