quantumcore/remote_hacker_probe

Threat Emulation and Red Teaming Framework, The Hacking Software for normal people.

The Remote Hacker Probe is a Threat Emulation and Red Teaming Framework built to be easy to use.

• The Remote Hacker Probe is Feature Rich! Including, Keystroke Logging, Reflective DLL Injection, Reverse Shell, Password Recovery, etc.
• Remote Hacker Probe Core is open source and will be improved over time.
• Fast and Lightweight, Remote Hacker Probe is coded in Java meaning it will run anywhere in a JRE and Client in C++ for Native Windows.

The Remote Hacker Probe had 2 versions, Open Source and Professional Version. That have been merged into one and the source code of the Professional Version is also now open source. For more information click here.

Please do not use the Remote Hacker Probe or any Software for Black Hat Activity. The Remote Hacker Probe is a Personal Development Project and is made for Authorized Penetration testing, Demonstrations and Reasearch. The Author is not responsible for any sort of misuse or damage caused by the program.

---

Installation & Usage

1. Download Java 11+. Most preferrably Java 15.
2. Download the Zip Attached in the Latest Release.
3. Run the file run-on-linux.desktop OR run-on-windows.bat
4. Getting Started with Remote Hacker Probe or see Video.

---

Server Features :

• Visually Appealing and Theme able Graphical User Interface featuring Dark, Light, Solarized Dark and Solarized Light themes.
• Built for ease and usability, Remote Hacker Probe is extremely easy to use and Set up.
• The Server is coded in Java meaning it is Cross Platform! It will run anywhere in a Java Runtime Environment (JRE).
• Event Logging.
• High Speed File Upload / Download.

Main Features :

Probe Client :

The Probe Client is a Standalone EXE containing all malicious code. This is the file used to take remote control over a Computer.

• Reflective DLL Injection (Custom + Read Output / Pass Parameters to DLL)
• Download, Upload, Delete and browse the entire file System.
• Reverse Shell, Full Access to the command line.
• Scan Remote Network for hosts.
• Port scan hosts in the Target Network.
• Scan Remote Network for hosts vulerable to Eternal Blue
• Get Process Information by Process name.
• Geolocate Client using IP Address.
• Shutdown / Restart the Remote PC.
• Grab screenshot of the Remote PC.
• Record Microphone input.
• Add to Startup Persistence on command.
• Display Message box.
• Open URLS in the default browser.
• USB Infection.
• Active Window logging.
• UAC Status shown in main table.
• Client Path shown in main table.
• Keylogger.
• Password Recovery.
  • Pidgin.
  • FileZilla.
  • Vault & IE.
  • WinSCP.
  • WiFi.
  • Credential Manager.
• Task Manager.

Reflective Loader Client :

The Reflective Loader Client is stripped of most features except Reflective DLL Injection. IT establishes connection and runs Payloads in memory from the server. Using the Reflective Loader Client you have the advantage of running Completely in memory.

• Reflective Probe Payload (Runs the Probe Client in memory)
• Message Box Payload (Displays a Message Box as the process it was injected into)
• Open URL Payload (Opens a url as the process it was injected into)
• Elevation Payload (Triggers UAC Prompt for the Process it was injected into as ‘WindowsDefender.exe’)
• Add / View Windows Defender Exclusions.
• Reverse Shell.
• Task Manager.
• Reflective DLL Injection (Custom + Read Output / Pass Parameters to DLL)

---

Tutorials and Posts

• Getting Started with Remote Hacker Probe
• Getting Started with Remote Hacker Probe(Video)
• Running Completely in Memory using Remote Hacker Probe’s new DLL Loader Payload
• Beginners guide to Reflective DLL Injection to write your own dlls.
• V.2 Changelogs
• End of Remote Hacker Probe

---

Bugs

• Remote Shell Upload Vulnerability in RHP Server, Fixed. ✔️
• Unauthorized File Upload to RHP Server, Fixed. ✔️
• Reflective Loader fails. ✔️
• JavaSE 16 GUI Bug.

---

Screenshots

Thanks to

• Passcat Project.
• Swing Authors.
• @stephenfewer (https://github.com/stephenfewer/ReflectiveDLLInjection)
• @bhassani (https://github.com/bhassani/EternalBlueC)

Developer

Hi my name's Fahad. You may contact me, on Discord or My Website

LICENSE

VIEW LICENSE

The Developer is not responsible for any misuse or Damage caused by the program. This is created only to innovate InfoSec and YOU. 👈

Donate

Help me with my future projects. Thank you. Donate with Crypto

remote_hacker_probe's Issues

problem open source code

hi,what did you use to do the source code project? i imported with eclips and i get more than 100 errors

UI problem

After starting RHP.jar (java -jar RHP.jar) on both Windows 10 and Fedora 34, all I get is window without any elements.
Latest Java 16 JDK is installed on both OSes.
I know that this project is not updated, but it would be nice to have a fix...

Windows version has no upgrade, build or settings buttons

I downloaded the app on java se 17 and everything works fine, the app opens perfectly, but there are not buttons along the top to use the tool. pls help

Vm

Should I run this in a VM or will it be fine if i run it with out a VM

Ngrok and local

Thank you for your work! Great project ! I have a question sir. When connecting ngrok form build , what to do with the local network settings ? I can't connect ngrok as well as locally. Thank you.

how do i disinfect a computer?

Serious issue with remote hacker probe

It's too swag

It doesn't like Java SE 16 very much?

when i run the run-on-linux.desktop, it won't do anything.
So i ran java -jar RHP.jar in the terminal, it gives me error:

Error: LinkageError occurred while loading main class rhp.MainWindow
        java.lang.UnsupportedClassVersionError: rhp/MainWindow has been compiled by a more recent version of the Java Runtime (class file version 60.0), this version of the Java Runtime only recognizes class file versions up to 55.0

I installed the latest version of Java SE 16, i know the reccommendation is Java 15 but downloading it require register and that's a hassle

dns does not work

it doesn't work with ddns, it works with ip addresses

Doesn't seem to open

Hey, I've stuck this on a fresh virtual machine. I downloaded and installed Java and the RHP icon has changed to the java logo as expected, but when I either open the "run on Windows" bat file, or directly open the RHP file in Java, nothing happens.

Well, to be more specific, run on windows bat brings up cmd for a fraction of a second and the nothing, and RHP shows a loading icon on the mouse, also for a fraction of a second, but that's it. I've tried twice, with seperate virtual machines, with antivirus off on both my host machine and the guest machine (downloaded to host and moved to guest).

Am I being stupid here?

Thanks

Bind Error

Whenever I start the program it says Bind Error : java.net.BindException: adress already in use: bind.
I can't seem to fix this issue.

Windows 11 is wrong

When connecting to a windows 11 device, it comes up as windows 10 in connected list

Ngrok

Hello!
Can I connect via ngrok?

Some questions.

Hello, I’m Alpha. I’m new to pen testing, and came across this repo. I have a question, what do you use to configure the client? Do I use my public or private IP address? What port do I put it as? Also, does the client only work on computers connected to the same network as I? Please give a step-by-step explanation as I am very new to pen testing and don’t know much.Thank you!

Suggestion

Hi I know you might be busy
This is just a suggestion
can you add support for
IRC,HTTP so it doesn't just rely on port forwading Like Saefko Attack systems
where I live port forwading is pain in the ass
expecting a reply
Thanks.

Awesome Project Man

.

No connection

After building a client with 0.0.0.0:1234 and running, i dont receive any connection

client won't reconnect after server restart

When i stop the server and run it again (i'm talking about stop/killing the application and run it again. Not rebooting the machine). Clients won't connect back to the server unless i execute the evil file once more.
Is this a bug or a feature 😅

Connection Reset - why :(

i am getting this error when a client connects

[INFO] New connection from : /REDACTED:65366
java.net.SocketException: Connection reset
        at java.base/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:323)
        at java.base/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:350)
        at java.base/sun.nio.ch.NioSocketImpl$1.read(NioSocketImpl.java:803)
        at java.base/java.net.Socket$SocketInputStream.read(Socket.java:976)
        at java.base/java.io.InputStream.read(InputStream.java:218)
        at rhp.Server.getInformation(Server.java:158)
        at rhp.Server$1.run(Server.java:267)
        at java.base/java.lang.Thread.run(Thread.java:831)

this is the settings i use

java --version
java 16.0.2 2021-07-20
Java(TM) SE Runtime Environment (build 16.0.2+7-67)
Java HotSpot(TM) 64-Bit Server VM (build 16.0.2+7-67, mixed mode, sharing)

Developement Updates

Dear Sir,
There is no doubt that this project is a great worship, but i am wondering if you have a plan to encrypt the communication channel. As is seen form the source code, it is using plain socket now and can not evade from AVs.
Faithfully.