Quima.DEV
FAQ

Frequently Asked Questions

Everything you need to know about Quima Control. Can't find an answer? Contact us directly.

General

What is Quima Control?

Quima Control 2.0 is an advanced Java-based Remote Administration Tool (Java RAT) designed for cross-platform control. It features a JavaFX-powered server (Java 17), 74 modules on Windows and 46 on macOS/Linux, built-in Tools (GeoIP, port scan, Base64, DDNS, webhooks), a VBS/COM client builder with 3-slot binder, and AES-256 encrypted C2.
General

Why is Quima Control built with Java?

Java provides true cross-platform compatibility. The client is compiled with Java 8 bytecode, ensuring it runs on any JVM across Windows, macOS, and Linux — one codebase, every platform. Java also provides robust networking, strong encryption APIs, and mature runtime performance.
General

What Java version is required?

The server ships with a bundled Java 17 runtime (custom jlink image). The client is compiled with Java 8 bytecode, so it runs on Java 8 and all newer versions (11, 17, 21, etc.). Native build formats (NATIVEBAT/NATIVEVBS on Windows, NATIVEAPP on macOS, NATIVESH on Linux) include auto-JRE download, so the target doesn't need Java pre-installed.
General

What built-in server tools are included?

Under Tools in the server menu you get:
  • IP Lookup / GeoIP — resolve any IP to location & ISP
  • Open Port Control — TCP port scanner
  • Base64 Encoder/Decoder — instant encode/decode
  • DDNS Checker — validate dynamic DNS hostnames
  • Webhook Notifications — Telegram & Discord alerts
  • Notifications / Sounds — in-panel desktop alerts
General

How do webhook notifications work?

Open Tools → Webhook Notifications. Configure Telegram (bot token + chat ID) and/or Discord (webhook URL), choose which events to notify (🟢 connect / 🔴 disconnect), then use the built-in test buttons. Settings are saved locally and messages are sent asynchronously — the panel stays responsive.
Platform

Which operating systems are supported?

Quima Control supports 3 platforms:
  • Windows — Full support with 74 modules (EXE, JAR, BAT, VBS, NativeBat, NativeVbs)
  • macOS — 46 modules (JAR, .command, .app.zip, NativeApp)
  • Linux — 46 modules (JAR, .sh, .desktop, NATIVESH)
Android is not currently supported as a client target.
Platform

What build output formats are available?

The builder supports multiple output formats:
  • Universal: JAR (runs everywhere with Java)
  • Windows: EXE, BAT, VBS, NativeBat (no Java required), NativeVbs (no Java required)
  • macOS: .command, .app.zip, NativeApp (no Java required)
  • Linux: .sh, .desktop, NativeSH (no Java required)
Platform

Can the client run without Java installed on the target?

Yes, on all platforms. The Native build formats automatically download and configure a JRE at runtime:
  • Windows: NativeBat, NativeVbs
  • macOS: NativeApp
  • Linux: NativeSH
The target machine doesn't need Java pre-installed.
Modules

How many modules are included?

Quima Control includes 74 modules for Windows and 46 modules for macOS/Linux across 18 categories including System, Surveillance, Network, Recovery, Red Team, Evasion, File Manager, Remote Desktop, and more. All plans include every module — no restrictions.
Modules

What module categories are available?

Modules are organized into 18 categories: System Options, Surveillance, Network, Recovery, Red Team, Evasion, File Manager, Remote Desktop (RDP), Remote Shell, Process Manager, Registry Editor, Keylogger, Clipboard, Audio, Webcam, Screen Capture, Chat, and more.
Modules

How does the File Binder work?

The dedicated Binder tab lets you attach up to 3 decoy files (image, PDF, document, etc.) to the built output. When the client starts, it extracts each decoy to a temp folder and opens it with the OS default handler while the client runs hidden in the background.
Modules

How are plugins loaded?

Modules are lazy-loaded — the full 19 MB plugin base is not pushed on connect. The client checks a local disk cache first, then an optional HTTPS plugin mirror (CDN bundle + manifest hash), and falls back to C2 transfer when a module is first opened. This keeps the initial stub lightweight.
Security

What is the VBS/COM launch engine?

For BAT/VBS/NATIVE* Windows outputs, the production-default VBS/COM launch engine extracts and runs the payload using pure VBScript and COM — no PowerShell and no -EncodedCommand. Optional XOR encryption adds a JScript helper via cscript. PowerShell mode remains available for debugging but is not recommended for production.
License

What license plans are available?

We offer 4 plans: 3 Months ($450), 6 Months ($800), 12 Months ($1,200), and 5 Years ($2,500). Every plan includes full access to all 74 modules, all platforms, client builder, ProGuard + ASM, updates, and priority support.
License

Are there any feature restrictions between plans?

No. Every plan grants identical access to all features — 74 modules, all platforms, client builder, ProGuard + ASM obfuscation, updates, and priority support. The only difference is the license duration.
License

Can I transfer my license to another PC?

Yes. Contact our support team via Telegram or email and we'll transfer your license to a different machine. License transfers are included with all plans at no additional cost.
License

How do I receive my license after purchase?

Delivery is instant. After payment verification (seconds), you receive:
  • Direct download link
  • RAR password
  • License key
Everything appears on-screen immediately and is also sent to your email.
License

Can I upgrade or extend my license?

Yes. You can upgrade or extend your license at any time by contacting us via Telegram or email. Remaining time from your current plan will be credited toward the new plan.
Security

What encryption does Quima Control use?

Quima Control uses AES-256 encryption for all communications between server and client. Additionally, it supports TCP + SSL transport mode for an extra layer of security. All data in transit is fully encrypted.
Security

What obfuscation options are available?

The client builder includes a multi-stage pipeline:
  • ProGuard — class/method rename and dead-code removal
  • String Encryption — per-string XOR with per-character key mixing (ASM)
  • Junk Method Injection — random dead-code methods per class
  • Polymorphic Build — unique class names per build
  • Stub Obfuscation — VBS outer wrapper modes (None / Standard / Hex / Hex2)
  • XOR Payload — encrypted JAR inside BAT/VBS/NATIVE wrappers
Security

What transport modes are supported?

Quima Control supports 4 transport modes: TCP, TCP + SSL, HTTP, and HTTP + SSL. You can configure the transport mode during client build to match your deployment requirements.
Support

How do I get updates?

Updates are included with all plans. When a new version is released, you'll be notified and can download the latest build directly. No additional cost during your license period.
Support

How can I contact support?

You can reach us through Telegram or email for support. All license holders receive priority response times regardless of their plan tier.
Support

Is there a refund policy?

Due to the nature of digital software products, all sales are final once the license key and download link have been delivered. Please review our Terms of Service for full details before purchasing.

Still Have Questions?

Our team is ready to help you with any questions about Quima Control.

Contact Us