193 lines
8.3 KiB
Markdown
193 lines
8.3 KiB
Markdown
▄▄▄▄▄▄▄ ▄▄▄ ▄▄▄▄▄▄▄ ▄▄▄▄▄▄ ▄▄▄ ▄▄▄▄▄▄▄
|
|
██▀▀▀▀▀▀ ████ ██▀▀▀▀▀▀ ██▀▀▀▀█▄ ████ ██▀▀▀▀▀▀
|
|
██▀▀▀▀▀▀ ████ ██▀▀▀▀▀▀ ██▀▀▀▀█▄ ████ ██▀▀▀▀▀▀
|
|
██ █████ ██ ██▄▄▄▄▄██ █████ ██
|
|
▀▀▀▀▀▀▀ ▀▀▀▀ ▀▀▀▀▀▀▀ ▀▀▀▀▀▀▀ ▀▀▀▀ ▀▀
|
|
|
|
╔══════════════════════════════════════════════════════════════╗
|
|
║ ☠ REAPER v2.0 ☠ ║
|
|
║ Remote Exploitation & Password Enumeration Routine ║
|
|
║ ║
|
|
║ Mass RDP Scanner | Password Sprayer | SOCKS5 Proxy ║
|
|
║ No mercy. No lockouts. Just results. ║
|
|
╚══════════════════════════════════════════════════════════════╝
|
|
```
|
|
|
|
---
|
|
|
|
## ☠ WHAT THE F*** IS THIS?
|
|
|
|
**REAPER** is a **brutal**, **blazing-fast** RDP exploitation framework built for one thing — finding weak RDP boxes and **reaping** those credentials before the scan even finishes.
|
|
|
|
This ain't your grandpa's port scanner. This is:
|
|
|
|
- **⚡ 25,000 concurrent async connections** — tears through /8 networks like tissue paper
|
|
- **🔑 Instant password spray** — soon as a host pops up, it's already getting pounded with the top 50 passwords. **No waiting.**
|
|
- **🌐 SOCKS5 proxy rotator** — route all your dirty work through free proxies so your IP stays clean. On/off toggle, auto-rotate, built-in fetcher from 7 sources (proxifly, TheSpeedX, ProxyScrape, etc.)
|
|
- **🖥️ One-click RDP** — find a hit? Double-click. You're in. `mstsc.exe` pops right up with creds pre-loaded.
|
|
- **💀 Dark GUI** — no web bloat, no Electron trash. Native Windows tkinter. Sexy as hell.
|
|
|
|
---
|
|
|
|
## 🔥 FEATURES (THE BODY COUNT)
|
|
|
|
| Feature | What it do |
|
|
|---------|-----------|
|
|
| **⚡ Async Mass Scan** | 500-25,000 concurrent TCP checks. Find live RDP in seconds, not hours. |
|
|
| **🔑 Streaming Spray** | As soon as a host is alive, spray starts **immediately** — same event loop, no waiting for scan to finish. |
|
|
| **🌐 SOCKS5 Proxy Rotator** | Fetch free proxies from 7 sources, test 'em, rotate through 'em. Flip the switch and your traffic disappears through a proxy maze. |
|
|
| **🖥️ Instant RDP Connect** | Double-click any live host → `cmdkey.exe` stores creds → `mstsc.exe` launches. You're in the Windows desktop before they even notice. |
|
|
| **📊 Live Stats Dashboard** | Checked, Total, Live, Hits, Rate, Elapsed — all updating every 500ms. Watch the bodies drop in real-time. |
|
|
| **📝 Built-in Wordlist Editor** | Edit users, passwords, and ranges right in the Settings tab. No external editor needed. |
|
|
| **🎲 IP Randomization** | Shuffle IP order so you don't hit the same subnet in sequence. Stay under the radar. |
|
|
| **💥 Instant Hit Logging** | Hit found? Immediately logged to `results/good.txt` and broadcast in green to the GUI. |
|
|
| **🎯 CIDR + Dash + Single IP** | `10.0.0.0/24`, `1.1.1.1-2.2.2.2`, `192.168.1.1` — any format, mixed in one file. |
|
|
|
|
---
|
|
|
|
## 📁 THE LAYOUT
|
|
|
|
```
|
|
REAPER/
|
|
├── main.py # 💀 Launch the reaper
|
|
├── gui.py # 🖥️ The control panel (tkinter dark theme)
|
|
├── scanner.py # ⚡ The scythe (async RDP scanner)
|
|
├── bruteforce.py # 🔑 The hammer (password sprayer)
|
|
├── proxy.py # 🌐 The cloak (SOCKS5 proxy manager)
|
|
├── ip_utils.py # 🎯 IP range parser (CIDR, dash, any)
|
|
├── proxy.py # 🛡️ KILLER NEW — proxy rotator
|
|
├── wordlists/ # 📚 Your kill list
|
|
│ ├── ranges.txt # IP ranges to hunt
|
|
│ ├── users.txt # Usernames to try
|
|
│ ├── passwords.txt # Passwords to try (or use top 50)
|
|
│ └── ports.txt # Ports to check
|
|
├── results/ # 📁 Where the bodies drop
|
|
│ └── good.txt # Successful logins
|
|
├── run.bat # ▶️ One-click carnage
|
|
└── install.bat # 📦 Setup
|
|
```
|
|
|
|
---
|
|
|
|
## 🚀 HOW TO RUN THIS BEAST
|
|
|
|
### Prerequisites
|
|
- **Windows 10+** with Python 3.8+ ([Download](https://python.org/downloads))
|
|
- Check **"Add Python to PATH"** during install
|
|
- You need `aiohttp` + `aiohttp-socks` for the proxy module (auto-installed)
|
|
|
|
### Quick Launch
|
|
```batch
|
|
# Pop the trunk
|
|
cd C:\Users\drjones\Desktop\hacking\REAPER
|
|
|
|
# Light it up
|
|
python main.py
|
|
```
|
|
|
|
### Or just double-click `MASTERSTER.bat` — installs deps, verifies everything, and launches in one swoop.
|
|
|
|
---
|
|
|
|
## 🎮 HOW TO USE IT (THE EXTRACTIONS)
|
|
|
|
### Step 1: Load Your Kill List
|
|
Put IPs, CIDR ranges, or dash ranges in `wordlists/ranges.txt`. Like:
|
|
```
|
|
10.0.0.0/24
|
|
192.168.1.1-192.168.2.255
|
|
203.0.113.0/28
|
|
```
|
|
|
|
### Step 2: Dial In the Speed
|
|
Crank the slider. 500 for slow-and-quiet, 25,000 for **MAXIMUM OVERDRIVE**.
|
|
|
|
### Step 3: Enable Proxy Cover (Optional)
|
|
Flip to the **Proxy** tab → **Toggle PROXY ON** → **Fetch Proxies** → **Test All**. Your traffic now disappears through a rotating maze of free SOCKS5 proxies.
|
|
|
|
### Step 4: Hit START
|
|
Watch the live stats climb. Watch the hosts pop up in the table.
|
|
|
|
### Step 5: Reap What You Sow
|
|
When a hit comes in — double-click it. RDP opens with creds pre-loaded. You're in their desktop.
|
|
|
|
> **☠ That's it. No bullshit. Just results.**
|
|
|
|
---
|
|
|
|
## 🛡️ PROXY MODULE (THE CLOAK)
|
|
|
|
New in v2.0 — the **Proxy Tab** lets you:
|
|
|
|
1. **Toggle Proxy ON/OFF** — green means cloaked, red means naked
|
|
2. **Fetch Proxies** — scrapes 7 free proxy sources (proxifly, TheSpeedX, ProxyScrape, monosans)
|
|
3. **Test All** — floods each proxy with a test request, measures latency, marks them alive/dead
|
|
4. **Auto-Rotate** — round-robins through working proxies so requests spread out
|
|
5. **Live List** — see IP, Port, Type (SOCKS4/5, HTTP), Alive status, Latency, Failures
|
|
|
|
When proxy is ON, ALL scanner connections + spray connections route through the proxy maze. If a proxy dies, it auto-fallsback to the next one. If ALL proxies die, it falls back to direct (so your scan never hangs).
|
|
|
|
---
|
|
|
|
## ⚡ PERFORMANCE (BENCHMARKS, BITCH)
|
|
|
|
| Metric | Original rdpthread.exe | REAPER |
|
|
|--------|----------------------|--------|
|
|
| **Concurrent connections** | ~50-200 threads | **5,000-25,000 async** |
|
|
| **Scan speed** | Thread-bound garbage | **Async I/O, no blocking** |
|
|
| **Spray strategy** | Sequential brute | **Password spraying (anti-lockout)** |
|
|
| **Proxy support** | LOL no | **SOCKS5/4/HTTP rotating** |
|
|
| **Range parsing** | Basic af | **CIDR + dash + mixed** |
|
|
| **GUI** | Windows 95 lookin' | **Sleek dark theme** |
|
|
| **RDP connect** | Manual af | **One-click with creds** |
|
|
|
|
---
|
|
|
|
## 📊 OUTPUT FORMAT
|
|
|
|
Successes land in `results/good.txt` like:
|
|
```
|
|
Administrator:admin@192.168.1.100:3389
|
|
Admin:P@ssw0rd@10.0.0.50:3389
|
|
root:password123@203.0.113.25:3390
|
|
```
|
|
|
|
---
|
|
|
|
## ☠ LEGAL SHIT (READ IT OR EAT IT)
|
|
|
|
**This tool is for authorized security testing ONLY.**
|
|
|
|
- Only hit systems you own or have **written permission** to test
|
|
- Unauthorized access is a **federal crime** in most countries
|
|
- The author(s) assume **ZERO liability** for how you use this
|
|
- If you catch a case, that's on **YOU**, not me
|
|
|
|
**Don't be a script kiddie. Be a professional.**
|
|
|
|
---
|
|
|
|
## 🛠️ TECH SPECS (FOR THE GEEKS)
|
|
|
|
| Spec | Value |
|
|
|------|-------|
|
|
| **Language** | Python 3.11+ |
|
|
| **Async Engine** | `asyncio` with semaphore concurrency |
|
|
| **Proxy Protocol** | SOCKS4, SOCKS5, HTTP CONNECT |
|
|
| **Proxy Lib** | `aiohttp-socks` v0.11 |
|
|
| **GUI** | `tkinter` (native Windows, ~12MB RAM idle) |
|
|
| **HTTP Client** | `aiohttp` v3.13 |
|
|
| **Encoding** | UTF-8 everywhere (no more Unicode crashes) |
|
|
| **Dependencies** | `aiohttp`, `aiohttp-socks` (Python stdlib for core) |
|
|
|
|
---
|
|
|
|
```
|
|
☠ ░▒▓█ REAPER v2.0 █▓▒░ ☠
|
|
No mercy. No lockouts. Just results.
|
|
|
|
"The network is a graveyard, and I'm the reaper."
|
|
```
|
|
|
|
*Made for doom by drjones.*
|