____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____
_____ _ _ _ _
| __ \ | (_) | | | |
| |__) |__ _ __| |_ _ _ _ __ ___ | | _____ _ _| | ___ __ _ __ _ ___ _ __
| _ // _` |/ _` | | | | | '_ ` _ \ | |/ / _ \ | | | |/ _ \ / _` |/ _` |/ _ \ '__|
| | \ \ (_| | (_| | | |_| | | | | | | | < __/ |_| | | (_) | (_| | (_| | __/ |
|_| \_\__,_|\__,_|_|\__,_|_| |_| |_| |_|\_\___|\__, |_|\___/ \__, |\__, |\___|_|
__/ | __/ | __/ |
|___/ |___/ |___/
____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____
--> Coded by: Mehul Jain
--> For windows only
____ ____ ____ ____ ____ ____ ____
______ _
| ____| | |
| |__ ___ __ _| |_ _ _ _ __ ___ ___
| __/ _ \/ _` | __| | | | '__/ _ \/ __|
| | | __/ (_| | |_| |_| | | | __/\__ \
|_| \___|\__,_|\__|\__,_|_| \___||___/
____ ____ ____ ____ ____ ____ ____
--> Applications and keystrokes logging
--> Screenshot logging
--> Drive tree structure
--> Logs sending by email
--> Password Recovery for
• Chrome
• Mozilla
• Filezilla
• Core FTP
• CyberDuck
• FTPNavigator
• WinSCP
• Outlook
• Putty
• Skype
• Generic Network
--> Cookie stealer
--> Keylogger stub update mechanism
--> Gather system information
• Internal and External IP
• Ipconfig /all output
• Platform
____ ____ ____ ____ ____
_ _ _____ ___ _____ _____
| | | / ___|/ _ \| __ \| ___|
| | | \ `--./ /_\ \ | \/| |__
| | | |`--. \ _ | | __ | __|
| |_| /\__/ / | | | |_\ \| |___
\___/\____/\_| |_/\____/\____/
____ ____ ____ ____ ____
--> Download the libraries if you are missing any.
--> Set the Gmail username and password and remember to check allow connection from less secure apps in gmail settings.
--> Set the FTP server. Make the folder Radium in which you'll store the new version of exe.
--> Set the FTP ip, username, password.
--> Remember to encode the password in base64.
--> Set the originalfilename variable in copytostartup(). This should be equal to the name of the exe.
--> Make the exe using Pyinstaller
--> Keylogs will be mailed after every 300 key strokes. This can be changed.
--> Screenshot is taken after every 500 key strokes. This can be changed.
--> Remember: If you make this into exe, change the variable "originalfilename" and "coppiedfilename" in function copytostartup().
--> Remember: whatever name you give to "coppiedfilename", should be given to checkfilename in deleteoldstub().
____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____
_____ _ _ _ _
|_ _| | (_) | | | |
| | | |__ _ _ __ __ _ ___ | |_ ___ __ _____ _ __| | __ ___ _ __
| | | '_ \| | '_ \ / _` / __| | __/ _ \ \ \ /\ / / _ \| '__| |/ / / _ \| '_ \
| | | | | | | | | | (_| \__ \ | || (_) | \ V V / (_) | | | < | (_) | | | |
\_/ |_| |_|_|_| |_|\__, |___/ \__\___/ \_/\_/ \___/|_| |_|\_\ \___/|_| |_|
__/ |
|___/
____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____
--> Persistance
--> Taking screenshots after a specific time. Making it keystrokes independent.
--> Webcam logging
--> Skype chat history stealer
--> Steam credential harvestor