TrojanCockroach - A Stealthy Trojan Spyware

项目说明

<h1> <img src=" width="24" height=auto /> Trojan Cockroach</h1>

![Donate]()

#### A Stealthy Trojan Spyware

You are looking at a Trojan Virus that steals data (ID, password; every key stroke) from PC (Windows XP or later), then emails them back to you. It spreads among PCs through USB drives, and is almost undetectable to any antivirus software.

*Created only for learning purpose.*

Intro

TrojanCockroach.cpp- logs user's data, sends data through Transmit.exe, infects portable drive.

Infect.cpp- installs the virus into computer from portable drive.

Transmit.exe- emails data back.

TrojanCockroach.lnk- resides in the startup folder of PC and activates TrojanCockroach.exe.

Infect.lnk- takes different attracti in the infected portable dri Infect.exe when clicked.

DecodeMessage.cpp- used to decode recei.

Setup

<ol>
<li>
Preparation
<br/>
<ol>
<li>
Download the full package from <a href="
</li>
<br/>
<li>
Change the method <b>sendData()</b> of TrojanCockroach.cpp- place your email and password in the command.
<di="center"><img src=" alt="change email address" width="600px" height=auto/></div>
</li>
<br/>
<li>
Compile <b>TrojanCockroach.cpp</b> & <b>Infect.cpp</b>. <b>Transmit.exe</b> is actually the executable distribution of <a href=" for Windows.
</li>
<br/>
<li>
Place <b>TrojanCockroach.exe</b>, <b>Infect.exe</b>, <b>Transmit.exe</b>, <b>Infect.lnk</b> & <b>TrojanCockroach.lnk</b> in the same folder. This is how they look-
<di="center"><img src=" alt="Trojan Cockroach full package" width=auto height=100px/></div>
</li>
<br/>
<li>
Now run <b>TrojanCockroach.exe</b> then insert a pendrive (see the magic!). You will get a hidden folder and link file in your pendrive. The hidden folder contains the full package, & the link file is actually renamed form of Infect.lnk.
<di="center"><img src=" alt="Trojan Cockroach infected pendrive" width=auto height=100px/></div>
</li>
</ol>
</li>
<br/>
<li>
Attack
<br/>
<ol>
<li>
Insert the USB-Drive in the subject's PC (Yes, you have to start the spreading process from somewhere!). Run Infect.lnk and the spyware will be injected.
</li>
<br/>
<li>
The syware will be activated after a reboot. Now (after a restart) every time any USB-Drive is inserted in the affected PC, the virus will copy itself in that, and the cycle will start again.
</li>
</ol>
</li>
<br/>
<li>
Data Collection
<br/>
<ol>
<li>
You need to wait several days (depending on the number of power on/off of the PC), before getting any data.
</li>
<br/>
<li>
After getting the email copy the full message to a text file.
<di="center"><img src=" alt="Trojan Cockroach infected pendrive" width="600px" height=auto/></div>
As the message has come through email certain characters are con. To resolve that --- --- ---.
</li>
<br/>
<li>
Now, run <b>DecodeMessage.exe</b> for decoding the message as plain text.
<di="center"><img src=" alt="Trojan Cockroach infected pendrive" width="600px" height=auto/></div>
In this phase, you can look for specific patterns in the text, and thus get rid of most of the useless parts (like- mouse click, or same key-group press as happens during gaming).
</li>
</ol>
</li>
</ol>
<br/>

Further

You may read TrojanCockroachStory to get an o of how the program works. You will get a clearer understanding of the project from its pre-project- StupidKeyLogger.

The project is perfectly runnable. However, I do not want newbies to abuse my project. So, I am keeping some simple secrets unre. There are also some intentionally created holes in this 'README'. I have made some nonsense changes in the code too; so that- no one can run it effectively without getting his hands dirty. I belie plain obstacles can easily be o by *ACTUAL PROGRAMMERS* :)

Note: *I will not also take any responsibility of someone else's ill act with this program.* But I do believe that a real learner will learn a lot from this.

Citation

License

<a rel="license" href=" alt="MIT License" src=" width="60em" height=auto/></a><br/><a href=" Cockroach</a> is licensed under <a rel="license" href=" License</a>.

项目信息

开发语言：C++

Star 数：1256

技术要点

该项目属于病毒分析方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A Stealthy Trojan Spyware展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。