▄▄▄▄▄▄▄  ▄▄▄  ▄▄▄▄▄▄▄ ▄▄▄▄▄▄   ▄▄▄ ▄▄▄▄▄▄▄
             ██▀▀▀▀▀▀ ████ ██▀▀▀▀▀▀ ██▀▀▀▀█▄ ████ ██▀▀▀▀▀▀
             ██▀▀▀▀▀▀ ████ ██▀▀▀▀▀▀ ██▀▀▀▀█▄ ████ ██▀▀▀▀▀▀
             ██      █████ ██      ██▄▄▄▄▄██ █████ ██
              ▀▀▀▀▀▀▀ ▀▀▀▀  ▀▀▀▀▀▀▀ ▀▀▀▀▀▀▀  ▀▀▀▀  ▀▀

╔══════════════════════════════════════════════════════════════╗
║  ☠  REAPER v2.0  ☠                                          ║
║  Remote Exploitation & Password Enumeration Routine          ║
║                                                              ║
║  Mass RDP Scanner  |  Password Sprayer  |  SOCKS5 Proxy      ║
║  No mercy.  No lockouts.  Just results.                      ║
╚══════════════════════════════════════════════════════════════╝

---

## ☠ WHAT THE F*** IS THIS?

**REAPER** is a **brutal**, **blazing-fast** RDP exploitation framework built for one thing — finding weak RDP boxes and **reaping** those credentials before the scan even finishes.

This ain't your grandpa's port scanner. This is:

- **⚡ 25,000 concurrent async connections** — tears through /8 networks like tissue paper
- **🔑 Instant password spray** — soon as a host pops up, it's already getting pounded with the top 50 passwords. **No waiting.**
- **🌐 SOCKS5 proxy rotator** — route all your dirty work through free proxies so your IP stays clean. On/off toggle, auto-rotate, built-in fetcher from 7 sources (proxifly, TheSpeedX, ProxyScrape, etc.)
- **🖥️ One-click RDP** — find a hit? Double-click. You're in. `mstsc.exe` pops right up with creds pre-loaded.
- **💀 Dark GUI** — no web bloat, no Electron trash. Native Windows tkinter. Sexy as hell.

---

## 🔥 FEATURES (THE BODY COUNT)

| Feature | What it do |
|---------|-----------|
| **⚡ Async Mass Scan** | 500-25,000 concurrent TCP checks. Find live RDP in seconds, not hours. |
| **🔑 Streaming Spray** | As soon as a host is alive, spray starts **immediately** — same event loop, no waiting for scan to finish. |
| **🌐 SOCKS5 Proxy Rotator** | Fetch free proxies from 7 sources, test 'em, rotate through 'em. Flip the switch and your traffic disappears through a proxy maze. |
| **🖥️ Instant RDP Connect** | Double-click any live host → `cmdkey.exe` stores creds → `mstsc.exe` launches. You're in the Windows desktop before they even notice. |
| **📊 Live Stats Dashboard** | Checked, Total, Live, Hits, Rate, Elapsed — all updating every 500ms. Watch the bodies drop in real-time. |
| **📝 Built-in Wordlist Editor** | Edit users, passwords, and ranges right in the Settings tab. No external editor needed. |
| **🎲 IP Randomization** | Shuffle IP order so you don't hit the same subnet in sequence. Stay under the radar. |
| **💥 Instant Hit Logging** | Hit found? Immediately logged to `results/good.txt` and broadcast in green to the GUI. |
| **🎯 CIDR + Dash + Single IP** | `10.0.0.0/24`, `1.1.1.1-2.2.2.2`, `192.168.1.1` — any format, mixed in one file. |

---

## 📁 THE LAYOUT

REAPER/ ├── main.py # 💀 Launch the reaper ├── gui.py # 🖥️ The control panel (tkinter dark theme) ├── scanner.py # ⚡ The scythe (async RDP scanner) ├── bruteforce.py # 🔑 The hammer (password sprayer) ├── proxy.py # 🌐 The cloak (SOCKS5 proxy manager) ├── ip_utils.py # 🎯 IP range parser (CIDR, dash, any) ├── wordlists/ # 📚 Your kill list │ ├── ranges.txt # IP ranges to hunt │ ├── users.txt # Usernames to try │ ├── passwords.txt # Passwords to try (or use top 50) │ └── ports.txt # Ports to check ├── results/ # 📁 Where the bodies drop │ └── good.txt # Successful logins ├── REAPER.bat # ▶️ Single-file launcher — pip, env, smoke test, run ├── MASTER.bat # Same pipeline (calls REAPER.bat) ├── MASTERSTER.bat # Legacy alias → calls REAPER.bat ├── run.bat # Quick start (Python must already work + deps) ├── install.bat # 📦 Verify install only └── rdpthread.exe # ⚙️ Optional — place next to main.py for verified spray hits

---

## 🚀 HOW TO RUN THIS BEAST

### Prerequisites
- **Windows 10+** with Python 3.8+ ([Download](https://python.org/downloads))
- Check **"Add Python to PATH"** during install
- You need `aiohttp` + `aiohttp-socks` for the proxy module (auto-installed)

### Quick Launch
```batch
# Pop the trunk
cd C:\Users\drjones\Desktop\hacking\REAPER

# Light it up
python main.py

Or double-click REAPER.bat — one file: pip install, folders, import check, optional rdpthread.exe note, then main.py. (MASTER.bat / MASTERSTER.bat call the same script.)

Deployment (production)

Artifact	Role
Core .py modules	Scanner, GUI, proxy manager, wordlist parsing
requirements.txt	aiohttp, aiohttp-socks (installed by REAPER.bat)
rdpthread.exe (optional)	When placed in the same folder as main.py, enables password spray verification and hit reporting. Without it, port scan and live RDP detection behave the same; spray attempts do not produce verified hits.

Operator UX: One status line in the Scanner tab summarizes validation state. REAPER.bat prints bundle status once at launch.

Authorized testing only — see Legal section below.

---

🎮 HOW TO USE IT (THE EXTRACTIONS)

Step 1: Load Your Kill List

Put IPs, CIDR ranges, or dash ranges in wordlists/ranges.txt. Like:

10.0.0.0/24
192.168.1.1-192.168.2.255
203.0.113.0/28

Step 2: Dial In the Speed

Crank the slider. 500 for slow-and-quiet, 25,000 for MAXIMUM OVERDRIVE.

Step 3: Enable Proxy Cover (Optional)

Flip to the Proxy tab → Toggle PROXY ON → Fetch Proxies → Test All. Your traffic now disappears through a rotating maze of free SOCKS5 proxies.

Step 4: Hit START

Watch the live stats climb. Watch the hosts pop up in the table.

Step 5: Reap What You Sow

When a hit comes in — double-click it. RDP opens with creds pre-loaded. You're in their desktop.

☠ That's it. No bullshit. Just results.

---

🛡️ PROXY MODULE (THE CLOAK)

New in v2.0 — the Proxy Tab lets you:

1. Toggle Proxy ON/OFF — green means cloaked, red means naked
2. Fetch Proxies — scrapes 7 free proxy sources (proxifly, TheSpeedX, ProxyScrape, monosans)
3. Test All — floods each proxy with a test request, measures latency, marks them alive/dead
4. Auto-Rotate — round-robins through working proxies so requests spread out
5. Live List — see IP, Port, Type (SOCKS4/5, HTTP), Alive status, Latency, Failures

When proxy is ON, ALL scanner connections + spray connections route through the proxy maze. If a proxy dies, it auto-fallsback to the next one. If ALL proxies die, it falls back to direct (so your scan never hangs).

---

⚡ PERFORMANCE (BENCHMARKS, BITCH)

Metric	Original rdpthread.exe	REAPER
Concurrent connections	~50-200 threads	5,000-25,000 async
Scan speed	Thread-bound garbage	Async I/O, no blocking
Spray strategy	Sequential brute	Password spraying (anti-lockout)
Proxy support	LOL no	SOCKS5/4/HTTP rotating
Range parsing	Basic af	CIDR + dash + mixed
GUI	Windows 95 lookin'	Sleek dark theme
RDP connect	Manual af	One-click with creds

---

📊 OUTPUT FORMAT

Successes land in results/good.txt like:

Administrator:admin@192.168.1.100:3389
Admin:P@ssw0rd@10.0.0.50:3389
root:password123@203.0.113.25:3390

---

☠ LEGAL SHIT (READ IT OR EAT IT)

This tool is for authorized security testing ONLY.

• Only hit systems you own or have written permission to test
• Unauthorized access is a federal crime in most countries
• The author(s) assume ZERO liability for how you use this
• If you catch a case, that's on YOU, not me

Don't be a script kiddie. Be a professional.

---

🛠️ TECH SPECS (FOR THE GEEKS)

Spec	Value
Language	Python 3.11+
Async Engine	asyncio with semaphore concurrency
Proxy Protocol	SOCKS4, SOCKS5, HTTP CONNECT
Proxy Lib	aiohttp-socks v0.11
GUI	tkinter (native Windows, ~12MB RAM idle)
HTTP Client	aiohttp v3.13
Encoding	UTF-8 everywhere (no more Unicode crashes)
Dependencies	aiohttp, aiohttp-socks (Python stdlib for core)

---

  ☠  ░▒▓█ REAPER v2.0 █▓▒░  ☠
  No mercy.  No lockouts.  Just results.
  
  "The network is a graveyard, and I'm the reaper."

Made for doom by drjones.