Supporting research
Technical notes
Detailed write-ups for the Launcher, Core, network protocol, runtime behavior, and detection tooling.
Launcher and Core
Component reconstruction, protocol behavior, screenshot paths, and session handoff.
Runtime and provenance
Process, memory, persistence, sample identity, limitations, and prior reporting.
Tools and detections
Offline decoders, screenshot test harnesses, Wireshark support, and detection guidance.
Citation
Version 1.1.0 · 09 September 2026
Ivan Immanuel Shaji. (2026). PackClient: Reverse Engineering a Modular RAT Framework (Version 1.1.0). https://ivanimmanuel-dev.github.io/PackClient/