>_0xFORUM
Sign in
pinned

Hydra Remote / x64 C++ / HVNC - session clone Chrome / Browser + Mail client Recovery / Indirect Syscalls / Auto Tasks

in Tools85 replies1.3k views
โ€ฆ

Hydra Remote Overview

Remote administration platform for Windows 10 and 11.

Hydra Remote


Hidden Desktop (HVNC)

  • Hidden desktop session running in parallel โ€” the user's visible session stays open and untouched.
  • Browsers: Chrome, Edge, Brave, Firefox, Vivaldi
  • Mail clients: Microsoft Outlook (classic) + (New), Mozilla Thunderbird, Foxmail.
  • Cloned user profiles: existing logins, cookies and sessions carry over into the hidden session.
  • Chrome App-Bound encryption bypass โ€” cookie and credential decryption works inside the hidden session.
  • Browser extensions can be installed and used inside the hidden session.
  • Profile Replace: transfers the hidden browser profile onto the real profile (original renamed to old, automatic numbering if it exists). Requires the hidden session to be stopped; user-side browser processes are terminated automatically.

HVNC

Remote Desktop (VNC)

  • Live screen view with optional mouse and keyboard control.
  • Adjustable quality and frame rate.

Keylogger

  • Logs grouped per process; text is reconstructed as typed (backspace and corrections applied).
  • Survives reboots once enabled.
  • Offline buffering: keystrokes are stored locally and sent on the next connection.
  • All keyboard layouts and languages.

Password & Data Recovery

  • Browsers: passwords, cookies, autofill, credit cards, history โ€” Chrome, Edge, Brave, Opera, Vivaldi, and Firefox-based browsers.
  • Mail clients: stored account passwords โ€” Microsoft Outlook (classic), Mozilla Thunderbird, Foxmail, Mailmaster, SeaMonkey.

File Execution

  • Execute from disk: .exe, .bat, .cmd, .ps1, .js, .vbs with optional arguments.
  • Execute in memory: x86 and x64 PE binaries, loaded without touching disk. Injection uses indirect syscalls only (works under user-mode hooks).

Crypto Clipper

  • BTC, XMR, LTC, TRX, ETH, SOL.
  • Replaces copied wallet addresses in the clipboard; per-coin toggles.

Proxy

  • SOCKS5 and HTTP proxy through any connected client, configurable port.
  • Usable as Windows system proxy; HTTPS traffic supported.

System Management

  • File Manager: browse, download, upload, manage files.
  • Process Manager: view and control processes.
  • Registry Manager: browse and edit the registry.
  • Remote Shell: command-line access.
  • Webcam: live capture.

Auto Tasks

  • Actions executed automatically when clients connect.
  • Task types: Recovery, CMD command, Drop & Execute, Exec in Memory, Clipper, Keylogger.
  • Targeting: New Clients Only, Once Per Client, Every Connect.
  • Tasks can be toggled, edited, duplicated; execution count per client is tracked.

Auto Tasks

Client Builder

  • Per-build C2 host and port, optional backup hosts (comma-separated host:port list).
  • Optional installation mode: client copies itself to AppData and registers autostart. Disabled by default.
  • Unique mutex generated per build.
  • Output: obfuscated Hydra Remote Client.exe, ~650 KB x64, fully static, no dependencies, Windows 10/11.

Connection & Infrastructure

  • Automatic reconnect with backoff; survives sleep mode, network switches and dropped connections.
  • Backup hosts: client cycles through fallback C2 addresses if the main server is unreachable.
  • Multi-port listeners: the server can listen on several ports simultaneously.
  • Per-installation encryption: each server generates its own communication key (comm.key) โ€” no shared keys between users.

Pricing

  • 1 Month 150$
  • 3 Months 400$
  • 6 Months 750$

Send PM or Buy from Marketplace

Legal notice: Hydra Remote is intended for authorized penetration testing and administration of your own systems only. Usage on systems without explicit permission is illegal. The developers assume no liability for misuse.

ctorsold, ilktern and qs and 1 others
// 85 REPLIES ยท page 1/8

first impression: interface is cleaner than i expected. still finding
my way around. remote session is usable. wouldnt call it perfect

@irpmj:
remote session is usable. wouldnt call it perfect

thats fair. first build has rough edges. docs are also being rewritten
because too much of the workflow was assumed.

same
took a bit to get the workflow. after that its fine

@irpmj:
still finding my way around

docs are thin. had to guess two things myself

which two?

session settings and where saved configs actually live

both are on the docs list. i'll make the locations clearer instead
of assuming people will find them.

quality slider on remote view doesnt do much here

@stackstr:
quality slider on remote view doesnt do much here

frame rate does more than quality for me. not sure if thats on purpose

tried it. better. still a dumb label if quality isnt the thing that
matters

@stackstr:
still a dumb label if quality isnt the thing that matters

fair UI complaint. quality is affecting the stream, just not nearly
as much as frame rate on slower hardware. we'll revisit the wording.

โ€ฆ
Sign in to reply. Guests can read reversing, pentesting, coding and greyhat threads.