DuplexSpyCS (CS stands for CSharp) is a open source RAT base on C/S
Continuously update: Branch-Version2.0.0
The online documents are here:
DuplexSpy
Fileless Execution
DLL and shellcode injector and loader
Remote Plugin
Proxy
DuplexSpy is a open-source Windows RAT for learning offensive security techniques.
It incorporates features inspired by other tools as well as my own personal experience. Compared to the previous version, I removed several features that I considered unnecessary and added a number of new ones.
Throughout this development process, I learned a great deal, and I sincerely hope that this project can be useful to others who are interested in offensive security or malware research.
If you encounter any issues or have suggestions, please feel free to open an issue on the repository page.
This project was developed as part of my personal interest in studying cybersecurity. However, it may potentially be misused for malicious purposes.
Please do NOT use this tool for any illegal activities.
The author is not responsible for any misuse of this software.
Your antivirus software may detect and automatically delete certain files (such as shellcode text files used for demonstration purposes). This behavior is expected.
As a college student, developing a GUI-based remote access tool entirely on my own—and performing proper quality assurance (QA)—has been a significant challenge for me.
Due to limited time, experience, and resources, this project may still contain defects or design flaws that I have not yet discovered.
Nevertheless, I believe that I have successfully built a RAT that incorporates a variety of offensive techniques and practical features.
If you find this project helpful or informative, I would truly appreciate a ⭐ on the repository. Your support would be a great motivation for me to continue improving this tool.
To all cybersecurity experts, researchers and remote access tool authors, respect!
- Client Config
- Information
- Manager
- File Manager
- Task Manager
- DLL Injection
- Shellcode Injection
- Registy Editor
- Service Manager
- Connection View
- Window Manager
- Terminal
- Piped Shell
- Xterm Shell See this
- WQL Console
- Remote Desktop
- Camera View
- Audio
- Capturing Microphone Signal
- Capturing Speaker Signal
- Play Sounds
- FunStuff
- Hide/Show Mouse
- Lock/Unlock Mouse
- Hide/Show Tray
- Hide/Show Taskbar
- Hide/Show Clock
- Hide/Show StartOrb
- Change Wallpaper
- Lock/Unlock Screen
- Proxy (click here to learn more about this feature)
- Plugins (click here to learn more about this feature)
- Mics
- DLL Loader
- Shellcode Loader
- Fieless Execution (click here to learn more about this feature)
- Run Script
- Chat Message
- KeyLogger
- Batch
- Multi Desktop
- Multi Webcam
- Open URL
- Lock Screen (See this)
- Quality Assurance (Debug)
- More Plugins
- DNS Tunneling
This RAT is able to view image file.























