Harmony-RAT

A simple RAT written in Python that uses Discord as it's C2 server.

Features

• Full Shell
• Download files
• Upload files
• Screenshot
• Dump credentials stored in Chrome
• Persistence
• And more...

Disclaimer

All code provided in this repository is for educational purposes only.

Usage

In your server you MUST create a text channel named 'check-in'
and create a webhook that posts in the 'check-in' channel

You have to enter your Discord servers:

• Webhook URL
• Bot Token
• ServerID
• executable filename

Into the script around line 32.

If you want an EXE use PyInstaller with harmony.py

---

Once harmony is executed it will create a new category on your server named with the hardware ID of the computer that executed it.

3 channels will also be created in that category:
 -main: Use this channel to send commands to the victim computer.
 -info: On first run the script will dump useful system information in here.
 -creds: On first run the script will dump URL, username and password saved in chrome into here.

Commands

Commands are used in the main channel in the target category

To send shell commands prefix the command with '>'.
 EX:

> tasklist
# Execute command 'tasklist' and return list of running tasks.

> dir c:\Users\bob\Downloads
# Execute command 'dir c:\Users\bob\Downloads' and return list of files in bobs download directory.

---

Non shell commands dont need the '>' symbol

---

kill
Kills process specified by pid.

EX:

kill 2654

---

hide
Adds the hidden attribute to the harmony file.

unhide
Removes the hidden attribute from the harmony file.

EX:

hide

unhide

---

download Uploads file specified by path to server.

EX:

download c:\Users\bob\Downloads\nuclearlaunchcodes.txt

---

upload
Downloads a file and saves it to c:\Users\Public\Downloads\

type upload and then drag the file you want to upload into discord and send the command.

EX:

---

screenshot
Takes a screenshot and uploads it to the server.

EX:

screenshot

# or

ss

---

listWindows Lists all open windows.

EX:

listWindows

# or

lw

---

credDump Dumps all creds saved in Chrome.

EX:

credDump

# or

cred

---

persistence Attempts to add persistence

EX:

persistence

# or

pt