It is my mistake of naming and the accurate name of this should be JSRat.
Learn from Casey Smith @subTee
Blog about it:
《Use SCT to Bypass Application Whitelisting Protection》
Other nice github:
[+] Fix the time-out bug and some other bugs. [+] Get rid of the cmd black box. [+] Hide the "systeminfo" black box. [-] Leave a bug in Upload and Download Mode. [+] Add code to work behind a proxy server. [+] Add the way of using sct to start it. [+] Add the way of using wsc to start it.