Phantom Stealer [Source Code]

[WHITE HAT HACKER]

Проект Stealer написанн на Go. Демонстрирует извлечение пароля из браузера, кражу криптовалютных кошельков, захват токенов Discord и сессий Telegram. Включает в себе методы обхода анализа. Для управления проект подключается через веб-хуки к Telegram или Discord.

Особенности:

Browser Password Stealer

• Chrome password stealer / Chrome password decryptor
• Edge password stealer / Edge password recovery
• Brave password stealer
• Opera / Opera GX password grabber
• Vivaldi password extraction
• Firefox password decryption
• Cookie stealer / session hijacker
• Credit card data extraction
• Autofill data grabber
• Browsing history extraction
• DPAPI decryption / CryptUnprotectData
• AES-GCM decryption for modern Chrome

Crypto Wallet Stealer

• Exodus wallet stealer
• Electrum wallet grabber
• Atomic wallet stealer
• Coinomi wallet extraction
• Bitcoin Core wallet.dat grabber
• Ethereum keystore stealer
• Monero wallet extraction
• MetaMask extension stealer
• Phantom wallet grabber (Solana)
• Trust Wallet stealer
• Coinbase Wallet grabber
• Ronin wallet (Axie Infinity)
• 40+ browser extension wallets supported

Token Grabber / Session Stealer

• Discord token grabber / Discord token stealer
• Discord token decryptor (encrypted tokens)
• Telegram session stealer (tdata grabber)
• Steam session stealer (SSFN grabber)
• Steam config.vdf extraction

System Reconnaissance

• Hardware/software inventory
• Network configuration enumeration
• Screenshot capture
• Clipboard monitoring / clipboard stealer
• WiFi password extraction (netsh)
• Process enumeration
• Installed software detection
• Antivirus detection

Anti-Analysis / Evasion

• Virtual machine detection (VMware, VirtualBox, Hyper-V)
• Sandbox detection
• Debugger detection (IsDebuggerPresent, NtQueryInformationProcess)
• AMSI bypass / AMSI patching
• ETW patching
• Windows Defender exclusion
• Anti-forensics techniques

Persistence Mechanisms

• Registry Run key persistence
• Startup folder persistence
• Scheduled task persistence
• WMI event subscription persistence

Data Exfiltration

• Discord webhook exfiltration
• Telegram bot exfiltration
• Zip archive creation
• Automatic file organization

DOWNLOAD Phantom Stealer

 

[marmalade_knight]

Snx, nice work

 

[Himars]

Great stealer! All functions work