Discord Python RAT

First of, I’d like to clarify some things. This project is a PoC (Proof of Concept). I didn’t write the code for malicious intentions, but to see how far I can go with just my knowledge in Python and some help from friends.

Before you do anything stupid, please check the legal section.

If you get stuck somewhere along this journey, there will always be a Table of Contents on the right or just above this section, depending if you are on mobile.

How did I start?

#

I knew I wanted to create something using Python, as I’ve been working with it for some while now and wanted to test what I could create with it. I started with a new GitHub repository in my account and started installing things locally.

After that I started to plan what I wanted the bot to be able to do.

Step 1 | Requisites

#

I wanted the bot to do the following:

• Have multiple connections at once
• Listen to commands
• Take screenshots of the current desktop
• See, Execute as well as delete files
• Upload/download external files
• Run a CLI command
• Access to webcam

With that part written down, I had to get access to a bot.

Step 2 | DDP

#

I started with a brand new application on Discord Developer portal which looked like this:

After creating the app, I had to create the bot itself.

The next step was to reset the bot token and save it somewhere smart (definetly not the clipboard, like I did). In my example I saved it inside another file called settings.py. More on that later.

Step 3 | Coding

#

Coding the starting structure of the file was easily enough. I made a new file called settings.py and main.py, where I added the base Discord communication import that goes as following:

import discord
from settings import bot_token # <--- see the imported settings?

intents = discord.Intents.all()
intents.members = True
client = discord.Client(intents=intents)

@client.event
async def on_message(message):
    print("message recieved")

@client.event
async def on_ready():
    print("ready")

client.run(bot_token)

⚆_⚆

I just figured that this code can also be used as a Chat Logger.

Maybe I’ll do another project soon… Who knows!

Anyways, after making the file I wanted to see if it was possible for the bot to respond to a specific command I give him, so I started by filtering his own messages and only listen to other people.

@client.event
async def on_message(message):
    if message.author != client.user: 
        if message.content.lower() == "test":
            message.reply("custom message received!")
        else:
            message.reply("user replied with: " + message.content)

The bot will respond with "user replied with: {your_message}" for any message you send, where {your_message} is replaced with the content of your message. However, if you send the specific message “test”, the bot will respond differently, with the message "custom message received!".

Step 4 | Modules

#

I implemented some Modules that I found on GitHub, whilst coding some myself.

The coding itself was easy, as I could test it on myself on a different Python file and copy paste the working code.

Step 5 | Testing

#

I tested everything locally on my own after putting in each module.

There really isn’t much to say to this I am not going to lie.

Documentation

#

Modules

#

Here are the explanations for each Module:

Functions

#

Here I’ll dump the most important code parts and explain it line by line.

Sources

#

• Hero background and image I found at this blog
• Here is my GitHub Repository. If you want to improve or change some code, Please follow the article below on how to submit a PR.

LEGAL

#