nightfallgt / mercurial-grabber Goto Github PK

View Code? Open in Web Editor NEW

428.0 15.0 293.0 103 KB

Grab Discord tokens, Chrome passwords and cookies, and more

C# 100.00%

mercurial-grabber's Introduction

Builder Preview

Features

Grabs Roblox cookies from Roblox Studio
Grabs Minecraft sessions
Grabs Google Chrome passwords
Grabs Google Chrome cookies
Grabs Discord token
Grabs victim machine info
Grabs Windows product key
Grabs IP address, geolocation
Grabs screenshot
Anti Virutal Machine
Anti Debug

Customization

Add a custom icon
Custom exe name

Info

Please do not use the program maliciously. This program is intended to be used for educational purposes only. Mercurial is only used to demonstrate what type of information attackers can grab from a user's computer. This is a project was created to make it easier for malware analysts or ordinary users to understand how credential grabbing works and can be used for analysis, research, reverse engineering, or review.

What is malware?

Malware is a term that is used for malicious software that is designed to do damage or unwanted actions to a computer system.

An explanation of this tool:

Google Chrome always store user data in the same place, so the stealer generated by Mercurial Grabber has no problem in finding it. In theory at least, this data is stored in encrypted form. However, if the malware has already penetrated the system, then its actions are done in your name.

Therefore, the malware simply finds a way to decrypt information stored on your computer (by making it seem like thie user is requesting it) . The stealer gets all your passwords and cookies.

The tool is also able to find Roblox cookies that are stored in the Windows Registry. By running the malicious .exe file, it is able to search for the Roblox cookie. The same goes for Minecraft sessions, Discord tokens, etc since it is stored in the user's computer.

Recommended tools for testing Mercurial: (when running the produced output after building)

Virtualbox
VMware
Process Hacker
VirusTotal

Tips to check if an exe file is safe:

Analyze the file with VirusTotal
Check if the exe file has a publisher
Check it in a sandbox
Monitor the file’s network activity for strange behavior

Educational Purposes Only

This tool demonstrates and makes it easy to create your own grabber. This shows what type of information attackers can grab from a victim's computer. Only use this on your own PC and do not use it on other people maliciously.

mercurial-grabber's People

Contributors

Stargazers

Watchers

Forkers

damienelias54 drgdrsg abhinavplayz pancak3boy chanyihon noahbat07 ssbpsalm cooperfre danke6969 arbuzowyszef simpontop teamx55 dokaly schmidtcold dilenisdieing hackerxdtx tyleravfc123 pigeonlol legenddc69 sepressed scream1411 notulol benicioroca rentualsdotmp4 adambone123 butwhodoe getbeamedkid heckerimaan alwaysfof thatyankeedoodle jandonders1 wokrt sxrryc eshoo1 coredadev anewspecies witchfindertr seth1002 blastbulb phantomisbest powerses mcflabbers fifahawk irunyouxx luciferji666 koshiroo savaqe dominusgt litruxxx luxileonie tominous z6rk vensgth sevv142322 1800s jackdaddy1 wwokyy69 vivetokengrab2 flipped242 jzbvbhfb glitchess adren14 wahbiff xbo7 iixgudetamaxii wh014m hhaggt6 zendox12 yktvmarxxy crucifix118 clumpywater iccruyff vsratiyhomopedik jake252525 imgabbe 3skz wokep 68z piss-kink sentiax lightningplayz123 muhamed134 lukeisthebest666 icxedcoffee wertrewefre pisut4152 snowzzzy itzhellback theywantsomeofmyclout muhtar1907 hylo-kek shadowzin kozifyeur altzdamah subominko rokaybuddy meznoos sitoop kacpix69 y5uo

mercurial-grabber's Issues

..

I have a browser grabber problem

Only ID is found, no password.

how do you run it?

If this is a rat, can't you just take the open source code and make your own that isnt ratted?

I don't know if this is possible but wouldn't you be able just to take the code here and copy paste into your own program that you know is safe>

Not working now

It sent system info, product key and ip adress when I tried it myself. Then second time (other person), it sent ip, system info, product key, screenshot. 3rd time, ip, password, cookies, sys info and from then it only send ip and product key... :(

How to Login with MInecraft "ClientToken" ??

I need Help to Login with "ClientToken" pls add me on Discord : Thotiana#3894 or Write here a Comment

DO NOT DOWNLOAD THIS

I know everyone is going to be "You are retarded this is open source", but it really isn't open source. Try compiling it yourself. It won't work, many files are hidden and many dependencies can't be reinstalled. This is malware. Do not download this or open it.

How to run it.

Please tell me how i can Run The Mercurial Grabber.

Thanks

Is this grabber Legit?

Is this real? Is there viruses or tojan? I downloaded it but I do not see any exe folder.

Cookies

Hello how do i import the cookies from cookies.txt into my browser

Why are 99% of the issues talking about whether its a virus or not like fr?

Bro, its open-source c#. Just check the code

Virus? Or Nah

I need verification from mercurial grabber users that this is legit and this is not a virus

I have a browser grabber problem

아이디만 발견이 되고 비밀번호는 없습니다

Unable to resolve Bunifu.UI, perhaps a license Error?

I have no idea, does this telling me to buy Bunifu UI or something?

Password.txt is empty + 1 problem too

You can see the size of the password file and it doesn't have any content

AND

sometime the keylogger is not sending info...like sometime it just sent only ip address and its info while the rest of the files are not sent!

/

Compiled exe Virus

How would you make the exe the grabber makes be undetected by the anti-virus?

why does it send so many tokens to the webhook

Funniest shit ever what even is this shit, took me 5 seconds to reverse and find the webhook

Well some 10 year old kids on discord is having fun making servers and trying to infect people this is pretty lame

Anyway i would suggest to spam webhooks if you find someone trying to infect people with it even though they will eventually make another webhook to receive data

while true do; proxychains curl <webhook> -XPOST -d "content=YOURGAY&username=YOURGAY&avatar=YOURGAY"; done

also you can report it directly to discord...

DO NOT DOWNLOAD!

I looked through the code, of course it is flagged by Microsoft Defender because of its predatory actions but it may also be a virus, also if you do try it out don’t open the output file to test it out as you may get a virus. My thoughts are stick to your other methods, plus nobody in there right mind will open an .exe file unless there plain as dumb.

Is that a ransomware or it isnt?

Can someone tell me is that a virus or no? Because it don't let me download it and im not sure shoud i add it in non scanned folder.

Icon

i cant seem too ad an icon of my choice or at all i get the error Attempting to compile file..

Line number 0, Error Number: CS1567, 'Error generating Win32 resource: Error reading icon 'c:\Users\dumdu\Downloads\download.ico' -- The data is invalid. ;
An error has occured when trying to compile file.

how would i fix this issue

retards using this to grab stupid kids

lmao this is the funniest shit ever, all the issues are just some braindead 10 year old skids trying to log people. I just forwarded some guy's info to the fbi after he tried to get me with this. Your anti-vm & anti-debug shit doesn't even work. and if it did you can just statically analyze it, that's how retardedly stupid this is.