NullRAT XII [12.1]

Under-the-hood changes

Even if the compiler looks the same on the surface (it is), it's nothing like it's unreadable, clunky, buggy brother I wrote back when

• The entire code has been modularized to enhance readability by 200%
• A virtualenv system has been added to get rid of compilation problems once and for all (Python <3.10 still required)
• MUCH CLEARER error logs, won't just fail and then pretend it's succeeded
• Update UPX prebuilt

Remember to disable Windows Security

Mainly Real Time protection if you get any problems while compiling, I faced it too while testing on VM and was surprised (detects pyarmor stub while compiling)

NullRAT XII

Code cleanup

• Improved stealth (no longer queries IP address upon first boot)
• Used Ruff linter to restructure the entire codebase and remove junk
• Unified the identification feature in a single function, now typing all in Identifiers panel will execute the supported command in all instances
• Renamed a few commands to make them connected
• Change nr_working

TODO currently is broken /file_send and other stuff I need to check later
Also need to implement custom webcam and Discord decryptor because I want to have everything in-house for even more stealth

NullRAT XI

Minor release

WARNING!

FROM NOW ON, PYTHON 3.11+ IS DISCONTINUED AND WILL NOT WORK (pyarmor-7)
MAKE SURE YOUR ENVIRONMENT HAS OLD PYTHON VERSION IN IT

Changelog

• Anti VM
  • Checks for suspicious users list and vm helper executables
• Anti Debugger
• Windows Defender exclusion (if possible)
• QOL: Do not allow running of NullRAT instance if already detected
• Fix many compiler issues to make it work in 2025

NullRAT X [10.1]

Hotfix Release

This release aims to fix a bunch of compiler problems I let slip by while rushing the Christmas release

In theory the compiler should have all features working while I prepare to add more features to it + the RAT itself

Changelog

1. Download python executable if not found on the system, no more pre-setup by end user required
2. Fix bug with writing the variables file resulting in empty file generation
3. Fix bug in pyinstaller compilation resulting in variables file not being found
4. Fix bad code in pyarmor compilation arguments generator
5. Add an option to skip everything and move directly to the computer
   (This assumes you have setup everything beforehand)
6. Prepare for an in-built updater (soon)

NullRAT X

---

NullRAT X

Merry Christmas people who still care about this project!!!

Why it took so long / rant

You may already know the last release I published was in August 2022 (WOW that was so long ago, time flies!), well I actually decided to actually change myself and chase this girl I liked for a bit (2 years)

Well that was a waste of time, so here I am once again; all alone for another Christmas

What's new

1. Brand new revamped compiler written in Nim
   • Gone are the days of the shitty batch compiler, where everything was buggy af and just crashed
   • Included many failsafes for (almost) every possibility
   • Robust dependencies installer, variables generator and compiler
   • Actually support custom icon paths
   • Dynamically generate all module locations, aka now anyone can just make modules and give me pull requests (I know nobody will do it)
   • Support for all systems (theoretically) [need testers]
   • Fix pyarmor-7 latest version messing up the compilation

(Note that the compiler still has some kinks which need fixing)

2. Not much source side changes:
   • Add password change command (change password of user account) [admin required]
   • Fix some bugs in the source (more features in the next release)

NullRAT IX [9.1]

HOTFIX RELEASE

Many people were reporting the compilers were starting to crash, and directly compile weird files without taking any input.

Upon further inspection, I noticed the command I used for cool animations and colors is not present on all Windows systems.

So, from now there will be 2 variants of NullRAT:

1. NullRAT (the standard you're all familiar with)
2. NullRAT Legacy (patched compiler with all colors and animations removed; for older systems)

⚠️If you notice NullRAT does not compile for you, do download the Legacy version ⚠️

NullRAT IX

Changelog

TL;DR - MASSIVE RELEASE

Core:

• Modularized entire codebase, to easily create commands and focus properly on existing ones
• (I hope the community will make me commands via placeholder.py)
• You can now git clone NullRAT, and still generate a proper build (if my commits don't have errors that is :D)
• (Releases are obviously preferred and better, git clone is more like the unstable release)

Compiler

• The compiler has been refined to support the modularized system

RAT base:

• The notification embed has been majorly improved, with author name & ID, startup time and a beautiful embed
• Victim command now maps to Computer Username, and if the Username is "Administrator", it maps to user's IP Address
• (this has been done to prevent constant suffering with IP addresses)
• The base directory for NullRAT has been changed, from the Music folder to a custom folder generated by NullRAT
• Every command and arguments now have proper instructions and docstrings, directly in Discord.
• Every command now has a beautiful matching embed, with information about execution time.
• Created custom bot implementation to share vars and funcs between all modules and main base

Commands:

(NEW COMMANDS)

1. /shell has been broken up into 2 brand new commands:
   -> /cmd: Execute command prompt commands
   -> /powershell: Execute Powershell commands (if present)
2. /listdir has been broken up into 2 brand new commands:
   -> /list_directory: Lists some common information about dir contents in a nice pagination embed
   -> /list_rawdir: Rename of the original /listdir
3. /runfile: Executes any file in the victim computer, no need to use the shell command anymore
4. /list_runningtasks: Lists all running tasks in the PC
5. /list_runningstore: Lists all Microsoft Store apps running in the PC
6. /kill_runningtasks: Kills a running task in the PC [NOTE: ADMIN TASK'S CANT BE KILLED]

(CHANGED COMMANDS)

(Aside from specific changes, all commands have been beautified with a custom embed function)
(I feel like I missed many changes for some reason, don't ask me why)

1. /checked_tokens:
   -> Now has an intuitive pagination system for all information about the tokens

2. /checked_discord:
   -> Now has an intuitive pagination system for all information about the tokens

3. /receivefiles:
   -> If the file size is under 8mb, file will be received directly into Discord from victim computer
   -> Otherwise the files will be received via my preferred file transferrer

4. /webcam_image:
   -> Renamed to /get_webcam
   -> Detects if a webcam is present in the first place, and complains otherwise

5. /get_workingdir:
   -> Renamed to /get_currentdir
   -> Embed is more informative

6. /change_directory:
   -> Renamed to /set_currentdir
   -> Embed is more informative

7. /geolocate:
   -> Renamed to /get_geolocation
   -> Embed has been refactored
   -> The Latitude and Longitude fetched from the IP address is now used to make a Google Maps link

8. /getip
   -> Renamed to /listvictims because it now retrieves either username or IP

9. /systeminfo
   -> Renamed to /get_systeminfo
   -> The output of systeminfo is stored in a BytesIO object, instead of saving to disk
   -> The command has been simplified greatly

10. /screenshot
    -> Renamed to /get_screenshot
    -> The screenshot is stored in a BytesIO object, instead of saving to disk

11. /clipboard:
    -> Renamed to /get_clipboard

12. /close
    -> Renamed to /shutdown
    -> Embed is better

13. /close_all
    -> Renamed to /shutdown_all
    -> View deletes itself for simplification

Turns out, there are a couple more features which I have left out, they will added soon:tm: But for now, I am tired

NullCode1337

NullRAT v8.2

Changelog:

• Restructured the directory as there are no longer 4 helpers

• Added new token regex in RAT.py

• This release's main focus is in the hot AIO.bat

  • All four helpers have been merged into this single batch file

  • Easier to use than ever before!

  • Did I mention that it looks stunning?

NullRAT v8.1

Changelog:

-> Added 2 new commands (discord_tokens & discord_checked) [check README for more info]
-> Fix UTF-8 locale issue (non-english users) with the compiler and RAT.py
-> Fix /listdir
-> Add sanity checking to /get_environment
-> Removed billing as it's broken
-> Renamed some commands
-> Switched all command outputs to Embed, for consistency
-> Use new InteractionBot by disnake
-> Duplicate some commands in Dependencies Installer as that helps somehow?

-> Did I tell you how hard adding the token decryptor was????!?! it took me one entire all-nighter

NullRAT v8.0

QOL and Bug Fixing release

After all the depinst and compiler hell, we are finally back in peace. So, I decided to give some love to the core

Changelog:

• Fixed syntax error in WIFI Password command
• Code optimizations to Raw tokens and Checked tokens
• Added one word to the shell command, which fixed it
• Fixed weird glitch in clipboard command
• Added " support in Download & Upload command (so that inserting any paths with quotes doesn't do anything)
• Fixed geolocation command not working
• Fixed hiding and unhiding files, both work now

Note: The Compiler fix has been backported to this 8.0 release, all problems are fixed now