Files
Whitecat18 28e7fac1d3 Upload
Rust-for-Malware-Development is an collection of proof of concepts with techniques and advanced evasion methods
2026-06-06 14:53:10 +05:30
..
2026-06-06 14:53:10 +05:30
2026-06-06 14:53:10 +05:30
2026-06-06 14:53:10 +05:30

Stealer

Welcome to the stealer directory of Rust-for-Malware-Development. Data-exfiltration PoCs that abuse legitimate cloud APIs as their command-and-control channel. The outbound traffic blends in with normal developer and chat activity, so it rarely looks suspicious to a network proxy.

  • GitHub_API: Collects host information (hostname, OS, network details) and ships it out through the GitHub REST API — issues, comments, or repo files become the C2 dead-drop.

  • Telegram Operator: Telegram-bot operator. Installs itself into %APPDATA%, registers for autorun via the registry, deletes the original copy, and then accepts commands and executes binaries pushed through a Telegram bot.

How to Use

git clone https://github.com/Whitecat18/Rust-for-Malware-Development.git
cd Rust-for-Malware-Development/stealer

Each sub-folder is its own Cargo project. Build with cargo build --release.