Skip to content
This repository was archived by the owner on Mar 6, 2026. It is now read-only.

NullRAT IX

Choose a tag to compare

@NullCode1337 NullCode1337 released this 12 Jul 16:41
· 87 commits to source since this release
b106d9b

Changelog

TL;DR - MASSIVE RELEASE

Core:

  • Modularized entire codebase, to easily create commands and focus properly on existing ones
  • (I hope the community will make me commands via placeholder.py)
  • You can now git clone NullRAT, and still generate a proper build (if my commits don't have errors that is :D)
  • (Releases are obviously preferred and better, git clone is more like the unstable release)

Compiler

  • The compiler has been refined to support the modularized system

RAT base:

  • The notification embed has been majorly improved, with author name & ID, startup time and a beautiful embed
  • Victim command now maps to Computer Username, and if the Username is "Administrator", it maps to user's IP Address
  • (this has been done to prevent constant suffering with IP addresses)
  • The base directory for NullRAT has been changed, from the Music folder to a custom folder generated by NullRAT
  • Every command and arguments now have proper instructions and docstrings, directly in Discord.
  • Every command now has a beautiful matching embed, with information about execution time.
  • Created custom bot implementation to share vars and funcs between all modules and main base

Commands:

(NEW COMMANDS)

  1. /shell has been broken up into 2 brand new commands:
    -> /cmd: Execute command prompt commands
    -> /powershell: Execute Powershell commands (if present)
  2. /listdir has been broken up into 2 brand new commands:
    -> /list_directory: Lists some common information about dir contents in a nice pagination embed
    -> /list_rawdir: Rename of the original /listdir
  3. /runfile: Executes any file in the victim computer, no need to use the shell command anymore
  4. /list_runningtasks: Lists all running tasks in the PC
  5. /list_runningstore: Lists all Microsoft Store apps running in the PC
  6. /kill_runningtasks: Kills a running task in the PC [NOTE: ADMIN TASK'S CANT BE KILLED]

(CHANGED COMMANDS)

(Aside from specific changes, all commands have been beautified with a custom embed function)
(I feel like I missed many changes for some reason, don't ask me why)

  1. /checked_tokens:
    -> Now has an intuitive pagination system for all information about the tokens

  2. /checked_discord:
    -> Now has an intuitive pagination system for all information about the tokens

  3. /receivefiles:
    -> If the file size is under 8mb, file will be received directly into Discord from victim computer
    -> Otherwise the files will be received via my preferred file transferrer

  4. /webcam_image:
    -> Renamed to /get_webcam
    -> Detects if a webcam is present in the first place, and complains otherwise

  5. /get_workingdir:
    -> Renamed to /get_currentdir
    -> Embed is more informative

  6. /change_directory:
    -> Renamed to /set_currentdir
    -> Embed is more informative

  7. /geolocate:
    -> Renamed to /get_geolocation
    -> Embed has been refactored
    -> The Latitude and Longitude fetched from the IP address is now used to make a Google Maps link

  8. /getip
    -> Renamed to /listvictims because it now retrieves either username or IP

  9. /systeminfo
    -> Renamed to /get_systeminfo
    -> The output of systeminfo is stored in a BytesIO object, instead of saving to disk
    -> The command has been simplified greatly

  10. /screenshot
    -> Renamed to /get_screenshot
    -> The screenshot is stored in a BytesIO object, instead of saving to disk

  11. /clipboard:
    -> Renamed to /get_clipboard

  12. /close
    -> Renamed to /shutdown
    -> Embed is better

  13. /close_all
    -> Renamed to /shutdown_all
    -> View deletes itself for simplification

Turns out, there are a couple more features which I have left out, they will added soon:tm: But for now, I am tired

NullCode1337