# BrainDamage | Remote Administration Tool Which Uses Telegram as Command & Control Server

**URL:** <https://onehack.st/t/braindamage-remote-administration-tool-which-uses-telegram-as-command-control-server/205125>\
**Category:** Tools & Scripts\
**Tags:** tools, programming, hacking, networking\
**Created:** [October 25, 2021, 3:21pm UTC](https://onehack.st/t/braindamage-remote-administration-tool-which-uses-telegram-as-command-control-server/205125 "2021-10-25T15:21:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [October 25, 2021, 3:21pm UTC](https://onehack.st/t/braindamage-remote-administration-tool-which-uses-telegram-as-command-control-server/205125/1 "2021-10-25T15:21:02Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/8/3/8384b787c74a43d501d8f4ad3a7dbdff12b2fe4c.png)

# BrainDamage

A python based remote administration tool which uses [Telegram](https://telegram.org/) as C&C server.

```auto
                           /\
                          /_.\
                    _,.-'/ `",\'-.,_
                 -~^ / ______ \`~~-^~:

  __________                                   
 | _ \ (_) | __ \                                  
 | |_) |_ ____ _ _ _ __| | | |__ _ _ _____  _____ _ ___ 
 | _ <| '__/ _` | | '_ \| | | |/ _` | '_ ` _ \ / _` |/ _` |/ _ \
 | |_) | | | (_| | | | | | |__| | (_| | | | | | | (_| | (_| |__/
 | ____/|_| \__ ,_|_|_| |_| _____/ \__ ,_|_| |_| |_|\ __,_|\__ , |\___|
                                                        __/ |     
                                                       |___/      

--> Coded by: Mehul Jain
--> For windows only

  ______ _                       
 | ____ | | |                      
 | | _____  ___| |_ _ _ ___  ______ 
 | __/ _ \/ _` |__ | | | | ' __/ _ \/__ |
 | | | __/ (_| | |_| |_| | | |__/\__ \
 |_| \ ___|\__ ,_|\ __|\__ ,_|_| \ ___||___ /
                                         

--> Persistance
--> USB spread
--> Port Scanner
--> Router Finder
--> Run shell commands
--> Keys logging
--> Insert keystrokes
--> Record audio
--> Webserver
--> Screenshot logging
--> Download files in the host
--> Execute shutdown, restart, logoff, lock
--> Send drive tree structure
--> Set email template
--> Rename Files
--> Change wallpaper
--> Open website
--> Send Password for
    • Chrome
    • Mozilla
    • Filezilla
    • Core FTP
    • CyberDuck
    • FTPNavigator
    • WinSCP
    • Outlook
    • Putty
    • Skype
    • Generic Network
--> Cookie stealer
--> Send active windows
--> Gather system information
    • Drives list
    • Internal and External IP
    • Ipconfig /all output
    • Platform

```

# Setup

- Telegram setup:
  - Install [Telegram](https://telegram.org/) app and search for “BOTFATHER”.
  - Type /help to see all possible commands.
  - Click on or type /newbot to create a new bot.
  - Name your bot.
  - You should see a new API token generated for it.

- Dedicated Gmail account. Remember to check “allow connection from less secure apps” in gmail settings.
- Set access\_token in eclipse.py to token given by the botfather.
- Set CHAT\_ID in eclipse.py. Send a message from the app and use the telegram api to get this chat id.

> bot.getMe() will give output {‘first\_name’: ‘Your Bot’, ‘username’: ‘YourBot’, ‘id’: 123456789}

- Set copied\_startup\_filename in Eclipse.py.
- Set Gmail password and Username in /Breathe/SendData.py

# Abilities

- whoisonline- list active slaves

> This command will list all the active slaves.

- destroy- delete&clean up

> This command will remove the stub from host and will remove registry entries.

- cmd- execute command on CMD

> Run shell commands on host

- download- url (startup, desktop, default)

> This will download files in the host computer.

- execute- shutdown, restart, logoff, lock

> Execute the following commands

- screenshot- take screenshot

> Take screenshot of the host of computer.

- send- passwords, drivetree, driveslist, keystrokes, openwindows

> This command will sends passwords (saved browser passwords, FTP, Putty..), directory tree of host (upto level 2), logged keystrokes and windows which are currently open

- set- email (0:Default,1:URL,2:Update), filename (0: Itself, 1: Others), keystrokes (text)

> This command can set email template (default, download from url, update current template with text you’ll send), rename filenames or insert keystrokes in host.

- start- website (URL), keylogger, recaudio (time), webserver (Port), spread

> This command can open website, start keylogger, record audio, start webserver, USB Spreading

- stop- keylogger, webserver

> This command will stop keylogger or webserver

- wallpaper- change wallpaper (URL)

> Changes wallpaper of host computer

- find- openports (host, threads, ports), router

> This command will find open ports and the router the host is using

- help- print this usage

# Requirements

- [Telepot](https://github.com/nickoala/telepot)
- [PyAudio](https://people.csail.mit.edu/hubert/pyaudio/)
- [PyCrypto](http://www.voidspace.org.uk/python/modules.shtml#pycrypto)
- [Pyasn1](https://pypi.python.org/pypi/pyasn1)
- [Pillow](https://pillow.readthedocs.io/en/latest/installation.html)
- Install [PyHook](https://sourceforge.net/projects/pyhook/)
- Install [PyWin32](https://sourceforge.net/projects/pywin32/)
- Install [Microsoft Visual C++ Compiler for Python](https://www.microsoft.com/en-us/download/details.aspx?id=44266)
- Install [PyInstaller](http://www.pyinstaller.org/)

# Screenshots

[![Setup](https://camo.githubusercontent.com/e945ad8ea3147ed5bee56ecc76e303d850066ff82cbc988d929e5970e37b287d/68747470733a2f2f696d6167652e6962622e636f2f6d6b574e52462f436170747572652e706e67)](https://camo.githubusercontent.com/e945ad8ea3147ed5bee56ecc76e303d850066ff82cbc988d929e5970e37b287d/68747470733a2f2f696d6167652e6962622e636f2f6d6b574e52462f436170747572652e706e67)

[![Notification](https://camo.githubusercontent.com/7047eabfad3e40b5282a4555fae5d8146550a97b8306bcc29d606717b511c72b/68747470733a2f2f696d6167652e6962622e636f2f6b43657930612f494d475f303030392e6a7067)](https://camo.githubusercontent.com/7047eabfad3e40b5282a4555fae5d8146550a97b8306bcc29d606717b511c72b/68747470733a2f2f696d6167652e6962622e636f2f6b43657930612f494d475f303030392e6a7067)

[![Who is Online Telegram](https://camo.githubusercontent.com/497bf52b533e20baebfe29ee80acb9709366ac9126ff810804f2860ed2aebe3c/68747470733a2f2f696d6167652e6962622e636f2f663230476d462f494d475f303030362e6a7067)](https://camo.githubusercontent.com/497bf52b533e20baebfe29ee80acb9709366ac9126ff810804f2860ed2aebe3c/68747470733a2f2f696d6167652e6962622e636f2f663230476d462f494d475f303030362e6a7067)

[![Help Telegram](https://camo.githubusercontent.com/65e346c3aebe95ff9763b75fc2c5813a7bae2351605f623a8fefd9d43201857c/68747470733a2f2f696d6167652e6962622e636f2f625a484a30612f494d475f303030342e6a7067)](https://camo.githubusercontent.com/65e346c3aebe95ff9763b75fc2c5813a7bae2351605f623a8fefd9d43201857c/68747470733a2f2f696d6167652e6962622e636f2f625a484a30612f494d475f303030342e6a7067)

[![Record Audio Telegram](https://camo.githubusercontent.com/a7431802e4abbd5712cf5463997a5fc3ff90331230b600cb4fd5d5c951f4c575/68747470733a2f2f696d6167652e6962622e636f2f6441336644762f494d475f303030352e6a7067)](https://camo.githubusercontent.com/a7431802e4abbd5712cf5463997a5fc3ff90331230b600cb4fd5d5c951f4c575/68747470733a2f2f696d6167652e6962622e636f2f6441336644762f494d475f303030352e6a7067)

[![Take screenshot Telegram](https://camo.githubusercontent.com/a7ed4b59827bdb9eb9134382cd6c6a63cc611cd28113fc5eac86443e8191512f/68747470733a2f2f696d6167652e6962622e636f2f6275506e74762f494d475f303030372e6a7067)](https://camo.githubusercontent.com/a7ed4b59827bdb9eb9134382cd6c6a63cc611cd28113fc5eac86443e8191512f/68747470733a2f2f696d6167652e6962622e636f2f6275506e74762f494d475f303030372e6a7067)

### For educational purposes only, use at your own responsibility.

## GitHub:

> **[GitHub - mehulj94/BrainDamage: Remote administration service which uses twitter...](https://github.com/mehulj94/BrainDamage)**
>
> Remote administration service which uses twitter as a command and control server