taxmachine/grabbers-deobfuscator

Decompiler and deobfuscator that offers support to track discord webhooks inside: blank stealer, luna grabber, thiefcat, Creal and all unobfuscated grabbers

𝐓𝐚𝐱𝐌𝐚𝐜𝐡𝐢𝐧𝐞

French Canadian developper 🇨🇦

𝐂𝐨𝐨𝐥 𝐒𝐭𝐚𝐭𝐢𝐬𝐭𝐢𝐜𝐬

Sexy totally cool view counter

𝐃𝐨𝐧𝐚𝐭𝐢𝐨𝐧𝐬

𝐄𝐭𝐡𝐞𝐫𝐞𝐮𝐦: 0xF583244C94298605f1e6104ABEC573a3b14b9a17 (𝐌𝐞𝐭𝐚𝐌𝐚𝐬𝐤)

𝐒𝐨𝐜𝐢𝐚𝐥 𝐌𝐞𝐝𝐢𝐚

𝐘𝐨𝐮𝐭𝐮𝐛𝐞: https://www.youtube.com/channel/UCXranBOFFyMLIkhBJv4iaqA
𝐓𝐰𝐢𝐭𝐜𝐡: https://twitch.tv/taxmachines
𝐃𝐢𝐬𝐜𝐨𝐫𝐝: https://discord.gg/2b2flat
𝐆𝐢𝐭𝐡𝐮𝐛: https://github.com/TaxMachine

grabbers-deobfuscator's Issues

Creal Stealer Detection

Hello, when I used this tool to deobfuscate creal grabber, it detected it as thiefcat and didn't give me a webhook.

Fix Mehod for Creal and Empyrean please^^

Fix Mehod for Creal and Empyrean please^^ and add more Methods for js stealer like using jsconfuser obfuscator

methods/luna.py broken

Just a heads up that you shouldnt read the pycdas decompiled output but rather the main .pyc itself like you did with the blank method.

the fixed code should be this:

import base64, os, subprocess, zlib, zipfile, re, lzma, codecs, base64
from utils.decompile import decompilePyc, disassemblePyc
from utils.deobfuscation import BlankOBF

class LunaDeobf:
    def __init__(self, dir):
        self.extractiondir = dir
        self.tempdir = os.path.join(self.extractiondir, "..", "..", "temp")

    def Deobfuscate(self):
        filename = self.extractiondir.split(".exe")[0].split(os.path.sep)[len(self.extractiondir.split(os.path.sep)) - 1] + ".pyc"
        file = open(os.path.join(self.extractiondir, filename), "rb")
        assembly = file.read()
        file.close()
        stage3 = BlankOBF.DeobfuscateStage3(assembly)
        webhook = BlankOBF.DeobfuscateStage4(stage3.first, stage3.second, stage3.third, stage3.fourth)        
        return webhook

pycdc

replace pycdc and pycdas its doesnt working

update it pls

update it pls

New Feature

Would love to see Telegram C2 deobf

❤️

fuck is this an amazing project

Missing cookie, unsupported pyinstaller version or not a pyinstaller archive

How can i fix this issue i am having?

Vare stealer

https://github.com/saintdaddy/Vare-Stealer

Great Work! ❤️

haha, this aint an issue just me congratulating you on such amaizng work!