目录导航
多功能Python键盘记录工具:Radium
所谓键盘记录,通常指的是记录下用户在键盘上所进行的按键操作,即记录下用户按过哪些键。这种键盘记录活动一般都是在后台悄悄进行的,所以使用键盘的用户通常并不会意识到自己的打字操作受到了非法监控。除此之外,攻击者还可以利用键盘记录来了解目标用户使用计算机的习惯
____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____
_____ _ _ _ _
| __ \ | (_) | | | |
| |__) |__ _ __| |_ _ _ _ __ ___ | | _____ _ _| | ___ __ _ __ _ ___ _ __
| _ // _` |/ _` | | | | | '_ ` _ \ | |/ / _ \ | | | |/ _ \ / _` |/ _` |/ _ \ '__|
| | \ \ (_| | (_| | | |_| | | | | | | | < __/ |_| | | (_) | (_| | (_| | __/ |
|_| \_\__,_|\__,_|_|\__,_|_| |_| |_| |_|\_\___|\__, |_|\___/ \__, |\__, |\___|_|
__/ | __/ | __/ |
|___/ |___/ |___/
____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____
--> Coded by: Mehul Jain([email protected])
--> Github: https://github.com/mehulj94
--> Twitter: https://twitter.com/_b00geyman_
--> For windows only
____ ____ ____ ____ ____ ____ ____
______ _
| ____| | |
| |__ ___ __ _| |_ _ _ _ __ ___ ___
| __/ _ \/ _` | __| | | | '__/ _ \/ __|
| | | __/ (_| | |_| |_| | | | __/\__ \
|_| \___|\__,_|\__|\__,_|_| \___||___/
____ ____ ____ ____ ____ ____ ____
--> Applications and keystrokes logging
--> Screenshot logging
--> Drive tree structure
--> Logs sending by email
--> Password Recovery for
• Chrome
• Mozilla
• Filezilla
• Core FTP
• CyberDuck
• FTPNavigator
• WinSCP
• Outlook
• Putty
• Skype
• Generic Network
--> Cookie stealer
--> Keylogger stub update mechanism
--> Gather system information
• Internal and External IP
• Ipconfig /all output
• Platform
____ ____ ____ ____ ____
_ _ _____ ___ _____ _____
| | | / ___|/ _ \| __ \| ___|
| | | \ `--./ /_\ \ | \/| |__
| | | |`--. \ _ | | __ | __|
| |_| /\__/ / | | | |_\ \| |___
\___/\____/\_| |_/\____/\____/
____ ____ ____ ____ ____
--> Download the libraries if you are missing any.
--> Set the Gmail username and password and remember to check allow connection from less secure apps in gmail settings.
--> Set the FTP server. Make the folder Radium in which you'll store the new version of exe.
--> Set the FTP ip, username, password.
--> Remember to encode the password in base64.
--> Set the originalfilename variable in copytostartup(). This should be equal to the name of the exe.
--> Make the exe using Pyinstaller
--> Keylogs will be mailed after every 300 key strokes. This can be changed.
--> Screenshot is taken after every 500 key strokes. This can be changed.
--> Remember: If you make this into exe, change the variable "originalfilename" and "coppiedfilename" in function copytostartup().
--> Remember: whatever name you give to "coppiedfilename", should be given to checkfilename in deleteoldstub().
____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____
_____ _ _ _ _
|_ _| | (_) | | | |
| | | |__ _ _ __ __ _ ___ | |_ ___ __ _____ _ __| | __ ___ _ __
| | | '_ \| | '_ \ / _` / __| | __/ _ \ \ \ /\ / / _ \| '__| |/ / / _ \| '_ \
| | | | | | | | | | (_| \__ \ | || (_) | \ V V / (_) | | | < | (_) | | | |
\_/ |_| |_|_|_| |_|\__, |___/ \__\___/ \_/\_/ \___/|_| |_|\_\ \___/|_| |_|
__/ |
|___/
____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____
--> Persistance
--> Taking screenshots after a specific time. Making it keystrokes independent.
--> Webcam logging
--> Skype chat history stealer
--> Steam credential harvestor
今天给大家介绍的就是一款拥有多种功能的键盘记录工具-Radium,该工具采用Python语言编写,它拥有如下所示的多种功能:
应用程序以及键盘记录
-截图记录
-通过邮件发送键盘记录
-恢复密码,适用于Chrome、Mozilla、Filezilla、Core FTP、CyberDuck、FTPNavigator、WinSCP、Outlook、Putty和Skype等等
-Cookie窃取
-自动更新功能
-收集系统信息,包括内部/外部IP地址、Ipconfig及/all输出和平台版本
工具下载
Radium:【GitHub主页】
依赖组件 必须安装的环境
1. PyHook
2. PyWin32
3. MicrosoftVisual C++ Compiler for Python
4. PyInstaller
工具使用
下载依赖库
-设置Gmail邮箱用户名及密码,将Gmail的安全设置级别降至最低来允许所有的连接;
-设置FTP服务器,包括IP、用户名和密码,以及需要存储新版本Radium的目录;
-记得对密码使用base64编码进行处理;
-在copytostartup()中设置originalfilename变量,即exe文件的名称;
-使用Pyinstaller制作exe文件;
-在记录下300次(可修改)用户击键操作之后会自动通过邮件向攻击者发送键盘记录;
-在记录下500次(可修改)用户击键操作之后会自动进行屏幕截图;
-请记住,当你将Radium转换成exe格式之后,要修改copytostartup()函数中的originalfilename和coppiedfilename变量。
工具截图

待增加的功能
- 持久化感染
- 定时进行屏幕截图
- 摄像头偷拍
- 窃取Skype聊天记录
- 收集凭证
使用教程视频:
点这里
此文章来源于
http://www.ddosi.org/2017/10/21/radium/
2018年以前网站服务器的备份,当时决定不要了,删了所有东西,现在还原一下(有些图片挂了,永远找不回来了,sorry)from