Premium Tool — 03

Vortex Web Premium RAT.

A web-based remote administration platform with live device management, credential extraction, and a persistent dashboard server. Every connected client reports through the same port with SocketIO auto-reconnect and stable device IDs.

$60one-time · permanent

Buy via Telegram Buy via Discord

Builder Features

Auto-detect IP

Detects your local network IP automatically.

Custom exe name

Rename the output executable.

Custom icon

Embed a .ico file into the built exe.

Run as Administrator

Embeds UAC elevation manifest.

Auto-start on boot

Adds Admin Panel to Windows startup registry.

ChromeElevator bundling

Includes ChromeElevator.exe for elevated extraction.

Dual output

Creates RemoteAdmin.exe (client) + Admin Web.exe (dashboard server).

Dashboard Features

Live Stream

Real-time screen viewing, 1-30 FPS, snapshot capture.

Terminal

Interactive PowerShell/CMD terminal.

Media Vault

Browse screenshots, screen recordings, audio clips, webcam photos.

Files Tree

Remote file manager — browse, upload, download, delete.

Device Fleet

Grid view of all connected targets with OS, IP, hardware info.

24/7 Server

Admin Web.exe runs persistently, auto-starts on boot.

Data Persistence

All captures, credentials, and history saved to data/ folder.

Recon Tab — Credential Mining

Browser Passwords

Browser, Profile, Table

Saved passwords from Chrome, Edge, Brave, Opera, Vivaldi.

Domain Cookies

Domain input, Browser, Profile, Table

Cookies filtered by domain.

Full Cookie Dump

One-click

All cookies from all browsers as .json download.

Discord Tokens

Browser, Profile, Table

Discord & Google auth tokens.

Credit Cards

Browser, Profile, Table

Saved credit card numbers, expiry, CVC.

Roblox Security

One-click

.ROBLOSECURITY cookies from all browsers.

Steam Session

One-click

steamLoginSecure cookies + SSFN files.

WiFi Passwords

One-click

Saved WPA/WPA2 network keys.

Command Studio

77+ commands

System17

shellExecute arbitrary shell command on target.

sysinfoFull CPU, RAM, Disk, GPU, OS specs.

admincheckCheck if running with admin privileges.

whoamiUser identity and SID token.

datetimeLocal machine date and time.

idletimeUser inactivity time.

listprocessAll running processes.

prockillForce kill process by name.

installedEnumerate installed software.

servicesList all Windows services.

shutdownTrigger system shutdown.

restartTrigger system reboot.

logoffLog off current user.

lockLock workstation.

sleepPut system to sleep.

startupAdd persistence (registry + startup folder).

rmstartupRemove all persistence entries.

File System17

cdChange directory.

dirList files/folders in current directory.

currentdirPrint working directory.

drivesEnumerate all mounted drives.

searchFind files by name pattern.

downloadExfiltrate file from target.

uploadUpload file to target.

uploadlinkDownload URL to target PC.

deleteRemove file or directory.

copyCopy file or directory.

moveMove file or directory.

renameRename file or folder.

mkdirCreate new directory.

openfileExecute file with default app.

encryptEncrypt file with XOR key.

decryptDecrypt file with XOR key.

filetreeBrowse file system via file manager tab.

Interaction12

messageShow alert message box.

fakeerrorShow fake Windows error dialog.

voiceSpeak text via TTS engine.

writeInject keystrokes into focused window.

wallpaperChange desktop wallpaper.

websiteOpen URL in default browser.

audioPlay audio file on target.

popupSpam popup dialog boxes.

volumeupIncrease system volume by 10%.

volumedownDecrease system volume by 10%.

muteToggle system mute.

monitors_offTurn off all monitors.

Capture9

screenshotCapture screen snapshot.

clipboardRead clipboard text content.

setclipboardWrite text to clipboard.

getcamsEnumerate webcam devices.

selectcamSelect webcam by index.

webcampicCapture webcam photo.

recordRecord microphone audio (seconds).

keylogStart keystroke logger.

stopkeylogStop keylogger and retrieve log.

Network Recon6

wifilistScan nearby WiFi networks.

wifipasswordsExtract saved WiFi passwords.

ipconfigNetwork adapter configuration.

netstatActive network connections.

envSystem environment variables.

geolocateIP-based geolocation of target.

Security Control16

blocksiteBlock website via hosts file.

unblocksiteRemove website block.

disabletaskmgrLock Task Manager.

enabletaskmgrUnlock Task Manager.

disabledefenderDisable Windows Defender.

enabledefenderEnable Windows Defender.

disablefirewallTurn off Windows Firewall.

enablefirewallTurn on Windows Firewall.

hidetaskbarHide taskbar.

showtaskbarRestore taskbar.

hidedesktopHide desktop icons.

showdesktopRestore desktop icons.

swap_mouseSwap mouse buttons.

unswap_mouseRestore mouse buttons.

bluescreenTrigger BSOD crash.

critprocMark process as critical (kill = BSOD).

Architecture

The builder produces two executables: RemoteAdmin.exe (client, deployed to target machines) and Admin Web.exe (dashboard server, runs on your machine on port 4444). All clients connect to the same IP and port over SocketIO with auto-reconnect and stable device IDs derived from hostname, user, and MAC address. The server auto-starts on boot and runs 24/7. All captures, credentials, and command history persist in the data/ folder.

Builder Machine                    Target Machines
+----------------+         +--------------------+
| Admin Web.exe  |<--------| RemoteAdmin.exe    |  (Machine 1)
| (Dashboard)    |         +--------------------+
| Port 4444      |         +--------------------+
| Auto-start     |<--------| RemoteAdmin.exe    |  (Machine 2)
| 24/7 online    |         +--------------------+
+----------------+         +--------------------+
                           | RemoteAdmin.exe    |  (Machine 3)
                           +--------------------+

Screenshots

Data is hidden in screenshots for privacy and security.