▄▄▄▄▄▄▄ ▄▄▄ ▄▄▄▄▄▄▄ ▄▄▄▄▄▄ ▄▄▄ ▄▄▄▄▄▄▄ ██▀▀▀▀▀▀ ████ ██▀▀▀▀▀▀ ██▀▀▀▀█▄ ████ ██▀▀▀▀▀▀ ██▀▀▀▀▀▀ ████ ██▀▀▀▀▀▀ ██▀▀▀▀█▄ ████ ██▀▀▀▀▀▀ ██ █████ ██ ██▄▄▄▄▄██ █████ ██ ▀▀▀▀▀▀▀ ▀▀▀▀ ▀▀▀▀▀▀▀ ▀▀▀▀▀▀▀ ▀▀▀▀ ▀▀ ╔══════════════════════════════════════════════════════════════╗ ║ ☠ REAPER v2.0 ☠ ║ ║ Remote Exploitation & Password Enumeration Routine ║ ║ ║ ║ Mass RDP Scanner | Password Sprayer | SOCKS5 Proxy ║ ║ No mercy. No lockouts. Just results. ║ ╚══════════════════════════════════════════════════════════════╝ ``` --- ## ☠ WHAT THE F*** IS THIS? **REAPER** is a **brutal**, **blazing-fast** RDP exploitation framework built for one thing — finding weak RDP boxes and **reaping** those credentials before the scan even finishes. This ain't your grandpa's port scanner. This is: - **⚡ 25,000 concurrent async connections** — tears through /8 networks like tissue paper - **🔑 Instant password spray** — soon as a host pops up, it's already getting pounded with the top 50 passwords. **No waiting.** - **🌐 SOCKS5 proxy rotator** — route all your dirty work through free proxies so your IP stays clean. On/off toggle, auto-rotate, built-in fetcher from 7 sources (proxifly, TheSpeedX, ProxyScrape, etc.) - **🖥️ One-click RDP** — find a hit? Double-click. You're in. `mstsc.exe` pops right up with creds pre-loaded. - **💀 Dark GUI** — no web bloat, no Electron trash. Native Windows tkinter. Sexy as hell. --- ## 🔥 FEATURES (THE BODY COUNT) | Feature | What it do | |---------|-----------| | **⚡ Async Mass Scan** | 500-25,000 concurrent TCP checks. Find live RDP in seconds, not hours. | | **🔑 Streaming Spray** | As soon as a host is alive, spray starts **immediately** — same event loop, no waiting for scan to finish. | | **🌐 SOCKS5 Proxy Rotator** | Fetch free proxies from 7 sources, test 'em, rotate through 'em. Flip the switch and your traffic disappears through a proxy maze. | | **🖥️ Instant RDP Connect** | Double-click any live host → `cmdkey.exe` stores creds → `mstsc.exe` launches. You're in the Windows desktop before they even notice. | | **📊 Live Stats Dashboard** | Checked, Total, Live, Hits, Rate, Elapsed — all updating every 500ms. Watch the bodies drop in real-time. | | **📝 Built-in Wordlist Editor** | Edit users, passwords, and ranges right in the Settings tab. No external editor needed. | | **🎲 IP Randomization** | Shuffle IP order so you don't hit the same subnet in sequence. Stay under the radar. | | **💥 Instant Hit Logging** | Hit found? Immediately logged to `results/good.txt` and broadcast in green to the GUI. | | **🎯 CIDR + Dash + Single IP** | `10.0.0.0/24`, `1.1.1.1-2.2.2.2`, `192.168.1.1` — any format, mixed in one file. | --- ## 📁 THE LAYOUT ``` REAPER/ ├── main.py # 💀 Launch the reaper ├── gui.py # 🖥️ The control panel (tkinter dark theme) ├── scanner.py # ⚡ The scythe (async RDP scanner) ├── bruteforce.py # 🔑 The hammer (password sprayer) ├── proxy.py # 🌐 The cloak (SOCKS5 proxy manager) ├── ip_utils.py # 🎯 IP range parser (CIDR, dash, any) ├── wordlists/ # 📚 Your kill list │ ├── ranges.txt # IP ranges to hunt │ ├── users.txt # Usernames to try │ └── passwords.txt # Passwords to try (or use top 50) ├── results/ # 📁 Output │ └── good.txt # Successful logins ├── REAPER.bat # ▶️ **Use this on Windows** — deps + env + launch └── rdpthread.exe # ⚙️ Optional — beside main.py for verified spray hits ``` --- ## 🚀 HOW TO RUN THIS BEAST ### Prerequisites - **Windows 10+** with Python 3.8+ ([Download](https://python.org/downloads)) - Check **"Add Python to PATH"** during install ### Recommended (one double-click) From the folder that contains `main.py`, run **`REAPER.bat`**. It upgrades pip, installs `requirements.txt`, creates `wordlists/` and `results/`, smoke-tests imports, then starts the GUI. ### Manual (Python already set up) ```batch cd path\to\rdp-brute python -m pip install -r requirements.txt python main.py ``` Scan ports are chosen in the **Scanner** tab (3389 / 3390 / 3391 checkboxes), not from a text file. ### Deployment (production) | Artifact | Role | |----------|------| | Core `.py` modules | Scanner, GUI, proxy manager, wordlist parsing | | `requirements.txt` | `aiohttp`, `aiohttp-socks` (installed by `REAPER.bat`) | | **`rdpthread.exe`** (optional) | When placed in the **same folder as `main.py`**, enables password spray **verification** and hit reporting. Without it, **port scan and live RDP detection behave the same**; spray attempts do not produce verified hits. | **Operator UX:** One status line in the Scanner tab summarizes validation state. `REAPER.bat` prints bundle status once at launch. **Authorized testing only** — see Legal section below. --- ## 🎮 HOW TO USE IT (THE EXTRACTIONS) ### Step 1: Load Your Kill List Put IPs, CIDR ranges, or dash ranges in `wordlists/ranges.txt`. Like: ``` 10.0.0.0/24 192.168.1.1-192.168.2.255 203.0.113.0/28 ``` ### Step 2: Dial In the Speed Crank the slider. 500 for slow-and-quiet, 25,000 for **MAXIMUM OVERDRIVE**. ### Step 3: Enable Proxy Cover (Optional) Flip to the **Proxy** tab → **Toggle PROXY ON** → **Fetch Proxies** → **Test All**. Your traffic now disappears through a rotating maze of free SOCKS5 proxies. ### Step 4: Hit START Watch the live stats climb. Watch the hosts pop up in the table. ### Step 5: Reap What You Sow When a hit comes in — double-click it. RDP opens with creds pre-loaded. You're in their desktop. > **☠ That's it. No bullshit. Just results.** --- ## 🛡️ PROXY MODULE (THE CLOAK) New in v2.0 — the **Proxy Tab** lets you: 1. **Toggle Proxy ON/OFF** — green means cloaked, red means naked 2. **Fetch Proxies** — scrapes 7 free proxy sources (proxifly, TheSpeedX, ProxyScrape, monosans) 3. **Test All** — floods each proxy with a test request, measures latency, marks them alive/dead 4. **Auto-Rotate** — round-robins through working proxies so requests spread out 5. **Live List** — see IP, Port, Type (SOCKS4/5, HTTP), Alive status, Latency, Failures When proxy is ON, ALL scanner connections + spray connections route through the proxy maze. If a proxy dies, it auto-fallsback to the next one. If ALL proxies die, it falls back to direct (so your scan never hangs). --- ## ⚡ PERFORMANCE (BENCHMARKS, BITCH) | Metric | Original rdpthread.exe | REAPER | |--------|----------------------|--------| | **Concurrent connections** | ~50-200 threads | **5,000-25,000 async** | | **Scan speed** | Thread-bound garbage | **Async I/O, no blocking** | | **Spray strategy** | Sequential brute | **Password spraying (anti-lockout)** | | **Proxy support** | LOL no | **SOCKS5/4/HTTP rotating** | | **Range parsing** | Basic af | **CIDR + dash + mixed** | | **GUI** | Windows 95 lookin' | **Sleek dark theme** | | **RDP connect** | Manual af | **One-click with creds** | --- ## 📊 OUTPUT FORMAT Successes land in `results/good.txt` like: ``` Administrator:admin@192.168.1.100:3389 Admin:P@ssw0rd@10.0.0.50:3389 root:password123@203.0.113.25:3390 ``` --- ## ☠ LEGAL SHIT (READ IT OR EAT IT) **This tool is for authorized security testing ONLY.** - Only hit systems you own or have **written permission** to test - Unauthorized access is a **federal crime** in most countries - The author(s) assume **ZERO liability** for how you use this - If you catch a case, that's on **YOU**, not me **Don't be a script kiddie. Be a professional.** --- ## 🛠️ TECH SPECS (FOR THE GEEKS) | Spec | Value | |------|-------| | **Language** | Python 3.11+ | | **Async Engine** | `asyncio` with semaphore concurrency | | **Proxy Protocol** | SOCKS4, SOCKS5, HTTP CONNECT | | **Proxy Lib** | `aiohttp-socks` v0.11 | | **GUI** | `tkinter` (native Windows, ~12MB RAM idle) | | **HTTP Client** | `aiohttp` v3.13 | | **Encoding** | UTF-8 everywhere (no more Unicode crashes) | | **Dependencies** | `aiohttp`, `aiohttp-socks` (Python stdlib for core) | --- ``` ☠ ░▒▓█ REAPER v2.0 █▓▒░ ☠ No mercy. No lockouts. Just results. "The network is a graveyard, and I'm the reaper." ``` *Made for doom by drjones.*