This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.
Added support to handle client invocation via either rundll32 or regsvr32 methods
References & Original Project:
regsvr32: https://gist.github.com/subTee/24c7d8e1ff0f5602092f58cbb3f7d302
rundll32: https://gist.github.com/subTee/f1603fa5c15d5f8825c0
http://en.wooyun.io/2016/01/18/JavaScript-Backdoor.html
http://en.wooyun.io/2016/02/04/42.html
Video Demos:
https://youtu.be/0nx04OaIG04
https://youtu.be/tGIndE7aexI
Big Thanks to SubTee!