▄▄▄▄▄▄▄ ▄▄▄ ▄▄▄▄▄▄▄ ▄▄▄▄▄▄ ▄▄▄ ▄▄▄▄▄▄▄
██▀▀▀▀▀▀ ████ ██▀▀▀▀▀▀ ██▀▀▀▀█▄ ████ ██▀▀▀▀▀▀
██▀▀▀▀▀▀ ████ ██▀▀▀▀▀▀ ██▀▀▀▀█▄ ████ ██▀▀▀▀▀▀
██ █████ ██ ██▄▄▄▄▄██ █████ ██
▀▀▀▀▀▀▀ ▀▀▀▀ ▀▀▀▀▀▀▀ ▀▀▀▀▀▀▀ ▀▀▀▀ ▀▀
╔══════════════════════════════════════════════════════════════╗
║ ☠ REAPER v2.0 ☠ ║
║ Remote Exploitation & Password Enumeration Routine ║
║ ║
║ Mass RDP Scanner | Password Sprayer | SOCKS5 Proxy ║
║ No mercy. No lockouts. Just results. ║
╚══════════════════════════════════════════════════════════════╝
---
## ☠ WHAT THE F*** IS THIS?
**REAPER** is a **brutal**, **blazing-fast** RDP exploitation framework built for one thing — finding weak RDP boxes and **reaping** those credentials before the scan even finishes.
This ain't your grandpa's port scanner. This is:
- **⚡ 25,000 concurrent async connections** — tears through /8 networks like tissue paper
- **🔑 Instant password spray** — soon as a host pops up, it's already getting pounded with the top 50 passwords. **No waiting.**
- **🌐 SOCKS5 proxy rotator** — route all your dirty work through free proxies so your IP stays clean. On/off toggle, auto-rotate, built-in fetcher from 7 sources (proxifly, TheSpeedX, ProxyScrape, etc.)
- **🖥️ One-click RDP** — find a hit? Double-click. You're in. `mstsc.exe` pops right up with creds pre-loaded.
- **💀 Dark GUI** — no web bloat, no Electron trash. Native Windows tkinter. Sexy as hell.
---
## 🔥 FEATURES (THE BODY COUNT)
| Feature | What it do |
|---------|-----------|
| **⚡ Async Mass Scan** | 500-25,000 concurrent TCP checks. Find live RDP in seconds, not hours. |
| **🔑 Streaming Spray** | As soon as a host is alive, spray starts **immediately** — same event loop, no waiting for scan to finish. |
| **🌐 SOCKS5 Proxy Rotator** | Fetch free proxies from 7 sources, test 'em, rotate through 'em. Flip the switch and your traffic disappears through a proxy maze. |
| **🖥️ Instant RDP Connect** | Double-click any live host → `cmdkey.exe` stores creds → `mstsc.exe` launches. You're in the Windows desktop before they even notice. |
| **📊 Live Stats Dashboard** | Checked, Total, Live, Hits, Rate, Elapsed — all updating every 500ms. Watch the bodies drop in real-time. |
| **📝 Built-in Wordlist Editor** | Edit users, passwords, and ranges right in the Settings tab. No external editor needed. |
| **🎲 IP Randomization** | Shuffle IP order so you don't hit the same subnet in sequence. Stay under the radar. |
| **💥 Instant Hit Logging** | Hit found? Immediately logged to `results/good.txt` and broadcast in green to the GUI. |
| **🎯 CIDR + Dash + Single IP** | `10.0.0.0/24`, `1.1.1.1-2.2.2.2`, `192.168.1.1` — any format, mixed in one file. |
---
## 📁 THE LAYOUT
REAPER/ ├── main.py # 💀 Launch the reaper ├── gui.py # 🖥️ The control panel (tkinter dark theme) ├── scanner.py # ⚡ The scythe (async RDP scanner) ├── bruteforce.py # 🔑 The hammer (password sprayer) ├── proxy.py # 🌐 The cloak (SOCKS5 proxy manager) ├── ip_utils.py # 🎯 IP range parser (CIDR, dash, any) ├── wordlists/ # 📚 Your kill list │ ├── ranges.txt # IP ranges to hunt │ ├── users.txt # Usernames to try │ └── passwords.txt # Passwords to try (or use top 50) ├── results/ # 📁 Output │ └── good.txt # Successful logins ├── REAPER.bat # ▶️ Use this on Windows — deps + env + launch └── rdpthread.exe # ⚙️ Optional — beside main.py for verified spray hits
---
## 🚀 HOW TO RUN THIS BEAST
### Prerequisites
- **Windows 10+** with Python 3.8+ ([Download](https://python.org/downloads))
- Check **"Add Python to PATH"** during install
### Recommended (one double-click)
From the folder that contains `main.py`, run **`REAPER.bat`**. It upgrades pip, installs `requirements.txt`, creates `wordlists/` and `results/`, smoke-tests imports, then starts the GUI.
### Manual (Python already set up)
```batch
cd path\to\rdp-brute
python -m pip install -r requirements.txt
python main.py
Scan ports are chosen in the Scanner tab (3389 / 3390 / 3391 checkboxes), not from a text file.
Deployment (production)
| Artifact | Role |
|---|---|
Core .py modules |
Scanner, GUI, proxy manager, wordlist parsing |
requirements.txt |
aiohttp, aiohttp-socks (installed by REAPER.bat) |
rdpthread.exe (optional) |
When placed in the same folder as main.py, enables password spray verification and hit reporting. Without it, port scan and live RDP detection behave the same; spray attempts do not produce verified hits. |
Operator UX: One status line in the Scanner tab summarizes validation state. REAPER.bat prints bundle status once at launch.
Authorized testing only — see Legal section below.
🎮 HOW TO USE IT (THE EXTRACTIONS)
Step 1: Load Your Kill List
Put IPs, CIDR ranges, or dash ranges in wordlists/ranges.txt. Like:
10.0.0.0/24
192.168.1.1-192.168.2.255
203.0.113.0/28
Step 2: Dial In the Speed
Crank the slider. 500 for slow-and-quiet, 25,000 for MAXIMUM OVERDRIVE.
Step 3: Enable Proxy Cover (Optional)
Flip to the Proxy tab → Toggle PROXY ON → Fetch Proxies → Test All. Your traffic now disappears through a rotating maze of free SOCKS5 proxies.
Step 4: Hit START
Watch the live stats climb. Watch the hosts pop up in the table.
Step 5: Reap What You Sow
When a hit comes in — double-click it. RDP opens with creds pre-loaded. You're in their desktop.
☠ That's it. No bullshit. Just results.
🛡️ PROXY MODULE (THE CLOAK)
New in v2.0 — the Proxy Tab lets you:
- Toggle Proxy ON/OFF — green means cloaked, red means naked
- Fetch Proxies — scrapes 7 free proxy sources (proxifly, TheSpeedX, ProxyScrape, monosans)
- Test All — floods each proxy with a test request, measures latency, marks them alive/dead
- Auto-Rotate — round-robins through working proxies so requests spread out
- Live List — see IP, Port, Type (SOCKS4/5, HTTP), Alive status, Latency, Failures
When proxy is ON, ALL scanner connections + spray connections route through the proxy maze. If a proxy dies, it auto-fallsback to the next one. If ALL proxies die, it falls back to direct (so your scan never hangs).
⚡ PERFORMANCE (BENCHMARKS, BITCH)
| Metric | Original rdpthread.exe | REAPER |
|---|---|---|
| Concurrent connections | ~50-200 threads | 5,000-25,000 async |
| Scan speed | Thread-bound garbage | Async I/O, no blocking |
| Spray strategy | Sequential brute | Password spraying (anti-lockout) |
| Proxy support | LOL no | SOCKS5/4/HTTP rotating |
| Range parsing | Basic af | CIDR + dash + mixed |
| GUI | Windows 95 lookin' | Sleek dark theme |
| RDP connect | Manual af | One-click with creds |
📊 OUTPUT FORMAT
Successes land in results/good.txt like:
Administrator:admin@192.168.1.100:3389
Admin:P@ssw0rd@10.0.0.50:3389
root:password123@203.0.113.25:3390
☠ LEGAL SHIT (READ IT OR EAT IT)
This tool is for authorized security testing ONLY.
- Only hit systems you own or have written permission to test
- Unauthorized access is a federal crime in most countries
- The author(s) assume ZERO liability for how you use this
- If you catch a case, that's on YOU, not me
Don't be a script kiddie. Be a professional.
🛠️ TECH SPECS (FOR THE GEEKS)
| Spec | Value |
|---|---|
| Language | Python 3.11+ |
| Async Engine | asyncio with semaphore concurrency |
| Proxy Protocol | SOCKS4, SOCKS5, HTTP CONNECT |
| Proxy Lib | aiohttp-socks v0.11 |
| GUI | tkinter (native Windows, ~12MB RAM idle) |
| HTTP Client | aiohttp v3.13 |
| Encoding | UTF-8 everywhere (no more Unicode crashes) |
| Dependencies | aiohttp, aiohttp-socks (Python stdlib for core) |
☠ ░▒▓█ REAPER v2.0 █▓▒░ ☠
No mercy. No lockouts. Just results.
"The network is a graveyard, and I'm the reaper."
Made for doom by drjones.