stewart-jimmee / win_jelly Goto Github PK

Full source code to a Portable Executable gpu remote access tool (RAT) PoC developed by a member of our team.

Requirements for use:

• CUDA SDK/drivers installed
• NVIDIA Card
• Windows API

Technical Details: According to our Windows developer, this project demonstrates a test to see if memory on GPU is resident after reboot. It copies a dll to gpu memory and deletes the dll from disk (this dll could come over a network and NEVER touch disk). Later, even after reboot, the dll gets searched in gpu memory, and when found, gets loaded and executed again; but not touching disk of course. The executable code is literally in gpu at this point.