Q
quasar/Quasar
Quasar
Quasar is an encrypted TCP-based remote administration tool for Windows that combines command-and-control capabilities with credential extraction, keystroke logging, file and registry management, desktop monitoring, and SOCKS5 reverse proxy tunneling. It operates through a modular framework where individual capabilities are loaded as plugins communicating over an encrypted command channel.
The tool distinguishes itself by integrating credential recovery from browsers and FTP clients, keystroke capture with full Unicode support, and a SOCKS5 reverse proxy for routing network traffic through the remote machine. It provides direct access to the Windows registry, process and service management, and real-time desktop frame streaming over the encrypted connection.
Additional capabilities include remote file transfer and management, command execution, and stored credential recovery from common applications. The project is implemented in C# and provides a built-in file manager for browsing and editing remote systems.
Features
- Remote Windows Administration Tools - Controls and monitors Windows machines remotely over an encrypted TCP connection for system management and troubleshooting.
- Credential Recovery - Extracts saved passwords from browsers and FTP clients on remote Windows systems.
- Keystroke Logging - Captures and records keyboard input on a remote machine with full Unicode support.
- Encrypted TCP Command Channels - Establishes persistent encrypted TCP connections for bidirectional command and control of remote machines.
- Keystroke Logging - Captures keyboard input on a remote Windows machine with full Unicode support for monitoring or forensic purposes.
- Keystroke Loggers - Captures and logs keyboard input on remote Windows machines with full Unicode support.
- Stored Credential Extractors - Extracts saved passwords from browsers and FTP clients on remote Windows systems for credential recovery.
- Browser Credential Extractions - Extracts saved passwords from browser and FTP client credential stores on remote Windows machines.
- Remote Access Tools - Provides encrypted TCP-based remote control of Windows machines for executing commands and managing files.
- Remote Administration Tools - Provides encrypted TCP command and control of remote Windows machines with file transfer, registry editing, and desktop monitoring.
- Remote Command Execution - Executes shell commands and power operations on remote Windows machines over an encrypted TCP channel.
- Remote File Managers - Provides a built-in file manager for uploading, downloading, and managing files on remote Windows systems.
- Remote Computer Controllers - Establishes encrypted TCP connections to remote Windows machines for command and control.
- Virtual File System Layers - Provides a virtual file system interface over the encrypted channel for remote file operations.
- Remote Process and Service Managers - Enumerates, starts, and terminates remote processes and services through system-level API calls relayed over the command channel.
- Remote Desktop Frame Captures - Captures and streams individual screen frames from the remote machine over the encrypted connection for real-time viewing.
- Remote Desktop Frame Captures - Streams real-time desktop frames from remote Windows machines for monitoring and remote assistance.
- SOCKS5 Proxy Tunneling Clients - Tunnels network traffic through the remote machine by implementing a SOCKS5 proxy that routes through the encrypted channel.
- Reverse SOCKS5 Proxy Tunnels - Routes network traffic through a remote Windows machine via a SOCKS5 reverse proxy for secure access or anonymization.
- Reverse SOCKS5 Traffic Proxies - Routes network traffic through a remote machine using a SOCKS5 reverse proxy for secure access or anonymization.
- Plugin-Based Architectures - Loads individual remote administration capabilities as separate plugins communicating over the command channel.
- Remote Registry Editors - Browses, edits, and transfers files and registry entries on a remote Windows system through a built-in file manager.
- Remote Registry Editors - Enables browsing and modifying the Windows registry on remote machines over an encrypted connection.
- Remote Process Management - Lists, starts, and terminates processes and services on remote Windows machines through the encrypted command channel.
- Remote Registry Hive Editors - Provides direct read and write access to the remote Windows registry through the encrypted command channel.
- Command And Control Frameworks - Lightweight remote administration tool built with C#.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
