Blank-c / Blank-Grabber

The most powerful stealer written in Python 3 and packed with a lot of features.
MIT License
741 stars 205 forks source link

How can I FUD this software? #139

Closed maestra1336 closed 1 year ago

maestra1336 commented 1 year ago

How can I FUD this software?

Blank-c commented 1 year ago

No you can't. Its possible, but you can't.

maestra1336 commented 1 year ago

Why can't we?

Blank-c commented 1 year ago

The point is, this stealer is used by many people (cuz its open source). So most of the AVs know its working, behaviour, signature. And crypter made in almost any language are already detected as false positive, so if you use them, the undetected apps will also get detections. Some languages like nim, V, etc. would be less detected as compared to C, C#, etc. since the former compiles the source code directly to machine code without any dependency, unlike the latter.

Also antiviruses are much improved these days and perform various checks on the application too.

So with the knowledge we have, I believe its utterly impossible to make it FUD.

You can try to reduce detections tho, by compiling pyinstaller bootloader, finding some way to hide the imports, it will be hard. Someone told me that you can use cx_freeze insead of pyinstaller to reduce detections, maybe try that too.

ghost commented 1 year ago

use nuitka and ez fud

maestra1336 commented 1 year ago

I see. So after creating your thief, how can I get the output as .py and not .exe?

Blank-c commented 1 year ago

The stealer is made while asumed to be used as an exe file, so using it as python file may have some problems. Like, it won't steal passwords and cookies, it won't have discord injection, it may have importing problems.

But if you still wants to proceed, here is how:

1) Copy the main.py, requirements.txt and pyaes.zip file from the Data folder to any other clean folder.

2) Open it with any text editor and edit the WEBHOOK variable to enter a webhook.

3) Now use any obfuscator (Don't use BlankOBF, it will limit the python version of the code) to obfuscate the main.py file.

If you want to convert it from Pyinstaller to nuitka, try to read and understand the code in run.bat file in the Data folder and convert it as per your need. Make sure you might not end up breaking the exe.

ghost commented 1 year ago

I see. So after creating your thief, how can I get the output as .py and not .exe?

you can just use some obfuscator fud ones and py will be fud but still you cant make exe fud with pyinstaller and you need to include hidden no console script inside py and dont use hide console thing in any compiler bc it gives more detections and use old version of nuitka like 1.1

Blank-c commented 1 year ago

Someone suggested using cx_freeze, so maybe you can try that. But like I said, you need to see the pyinstaller command I use and convert it. If you don't know what it does, then you possibly can't do it yourself.

ghost commented 1 year ago

Someone suggested using cx_freeze, so maybe you can try that. But like I said, you need to see the pyinstaller command I use and convert it. If you don't know what it does, then you possibly can't do it yourself.

but cx freeze has a lib folder with exe and exe doesnt work without lib and when they check lib they will think its malware