mategol / PySilon-malware

Advanced RAT written in Python language, fully controllable through Discord with dedicated GUI builder to make preparation easier.
https://pysilon.net
MIT License
815 stars 136 forks source link

Discord bot can be taken over due to token being traced back in the payload #565

Open EmberZz-dev opened 1 month ago

EmberZz-dev commented 1 month ago

The payload contains the discord token, maybe an older version but I can open it with VScode and discover the discord token

yasiutrotter commented 1 month ago

How exactly can you do that? I'm a victim myself...

tiagorangel2011 commented 1 month ago

How exactly can you do that? I'm a victim myself...

You could, for example, setup an HTTP proxy, run the file again and then look for the tokens

python312 commented 4 weeks ago

You could run it through a pyinstaller decrypter

python312 commented 4 weeks ago

To combat the discord token issue obfuscate the source_prepared.py file to prevent reading that value.