> SYSTEM_OVERVIEW

👥
0 TOTAL_CUSTOMERS
✅
0 ACTIVE_CUSTOMERS
🔑
0 SERIAL_KEYS
💻
0 DESKTOP_INSTANCES

// SYSTEM_STATUS

MODE: WINDOWS DESKTOP
TUNNELS: CLOUDFLARE
AUTH: SERIAL_KEY + TOTP
DOCKER: REQUIRED

// RECENT_CUSTOMERS

NO_CUSTOMERS_YET

> ORDER_MANAGEMENT

🌐 VIEW_LANDING_PAGE
📦
0 TOTAL_ORDERS
⏳
0 PENDING
✅
0 APPROVED
💰
$0 USD_REVENUE

// PENDING_ORDERS

ORDER_ID REFERENCE NAME DOMAIN EMAIL PAYMENT STATUS DATE ACTIONS

> CUSTOMER_MANAGEMENT

NAME EMAIL SERIAL_KEY STATUS CREATED ACTIONS

> DOMAIN_&_TUNNEL_INFO

// LINK GENERATION (DESKTOP MODE)

🔗 How Phishing Links Work in Desktop Mode

  1. Cloudflare Tunnel (Auto): Each time a customer starts Platform Control, a random tunnel URL is generated automatically (no domain needed).
  2. Custom Domain (Optional): If a customer has their own domain, they can configure a Cloudflare named tunnel with a token in the desktop app.
  3. Each Customer Is Isolated: Each Windows instance generates its own tunnel, own Docker containers, own sessions.

// REGISTERED_DOMAINS

> TUNNEL_CONFIGURATION

// HOW IT WORKS (WINDOWS DESKTOP)

The desktop app uses Cloudflare Tunnels instead of traditional Nginx + SSL setup.

  1. Customer opens the STARKILLER desktop app on Windows
  2. Goes to PLATFORM_CONTROL and selects a target
  3. Clicks START — Docker containers + tunnel start automatically
  4. A random Cloudflare URL is generated (e.g. random-name.trycloudflare.com)
  5. Customer sends that URL to victims — no domain or DNS needed

For named tunnels with real Cloudflare tokens, the customer can configure their token in the desktop app's Platform Control panel.

// LEGACY NGINX CONFIGS (VPS MODE)

These configs are only needed if deploying on a VPS with a real domain. Desktop mode uses tunnels instead.

> SETTINGS

// AUTHENTICATION_INFO

🔐 TOTP + Password Authentication Active

SuperAdmin uses Password + Google Authenticator for login.

Customer Login (Desktop App): Serial Key + TOTP Code
SuperAdmin Login (This Panel): Password + TOTP Code

To reset your TOTP secret, edit:
superadmin/data/superadmin.json

Generate new secret:
node -e "console.log(require('otplib').authenticator.generateSecret())"

// PLATFORM_MODE

⚡ WINDOWS DESKTOP MODE

Customers run STARKILLER as a Windows .exe application.
Phishing links are generated via Cloudflare Tunnels (no domain required).
Each customer is fully isolated with their own Serial Key + TOTP credentials.

SuperAdmin responsibilities:
• Create customer accounts (Serial Key + TOTP auto-generated)
• Manage customer limits (containers, RAM)
• Activate / Suspend accounts
• Regenerate credentials if needed

> SOFTWARE_UPDATES

// PUBLISH_DESKTOP_PATCH

Publish the current admin/ and Files/ tree. Clients press UPDATE — only changed files download straight into the program. No zip, no installer, no extract.

Or select the folders from this PC (when the panel is on a VPS):

// LIVE_PACKAGE

Loading…