[r00t3r]

so i am making a keylogger in python and i am wondering how i will make it run on another ones computer. dont they need python installed on their computer to run it? and cant they just open up the *.py to read the code? thank you

[Vultra]

You can use a rubber ducky to use this method. Will work 100%

[reGEN]

so i am making a keylogger in python and i am wondering how i will make it run on another ones computer. dont they need python installed on their computer to run it?

Yes, alternatively you can hack it into a standalone using Py2Exe or something similar.

and cant they just open up the *.py to read the code? thank you

Depends. If it is a raw script then obviously yes. If it is an executable generated by Py2Exe then it's likely if they know what they are doing.

Python malware should not be used in real world situations pls. If I ever catch wild Python information stealers I will die from laughter as I harvest your juicy credentials and hijack your server.

[DedSpace]

Python malware should not be used in real world situations pls. If I ever catch wild Python information stealers I will die from laughter as I harvest your juicy credentials and hijack your server.  

Even if they've been compiled to exe? Wouldn't the victim only know where it's sending the info if they opened it up to look at the assembly?

You can use a rubber ducky to use this method. Will work 100%

Still, wouldn't they need python installed? Linux users would be easily victimizable though lol

[CodePusher]

I am a big fan of PyInstaller to compile python code down to a Windoze executable, with all the needed dependencies. Once it's an executable you'd have to know what you were doing to rip the executable down to any usable information, but of course anyone could run WireShark and see what data was going where...but most victims doing Deep Packet Inspection

[Hoss]

You can use a rubber ducky to use this method. Will work 100%

Still, wouldn't they need python installed?  Linux users would be easily victimizable though lol

lol

Seriously though., it sounds like you need to study the language more and learn about its strengths and more importantly, its weaknesses. Python would not be my first choice for a keylogger over something like C, C++, C#, VB, etc.

I have the source code to Venom Logger (previously Sugar Logger). You will have to look it up on your own as its sales pages are on a competing forum. If you'd like to purchase that source from me you may PM me, if you do not have the funds to make a reasonable offer, do not bother me.

Cheers,
Hoss

[reGEN]

Python malware should not be used in real world situations pls. If I ever catch wild Python information stealers I will die from laughter as I harvest your juicy credentials and hijack your server.  

Even if they've been compiled to exe?  Wouldn't the victim only know where it's sending the info if they opened it up to look at the assembly?

Yes, I did say that they need to know what they were doing. I would know what I am doing. Also this isn't specific to Python malware, I've extracted credentials from natively-compiled malware as opposed to Python-converted to exe where you might be able to recover the original python script, e.g. BeeLogger (never use this).

[mothered]

You can use a rubber ducky to use this method. Will work 100%

I assume he does not have physical access to the PC In question.

[mroll]

I am a big fan of PyInstaller to compile python code down to a Windoze executable, with all the needed dependencies. Once it's an executable you'd have to know what you were doing to rip the executable down to any usable information, but of course anyone could run WireShark and see what data was going where...but most victims doing Deep Packet Inspection

PyInstaller is a good choice. Make sure to read about the commandline options. It has some cool features like obfuscating:

Code:

pyinstaller --onefile –noconsole –key=SOMEPASSWORD yourkeyloggerorwhatever.py

Have a look at this Veil tutorial too.

Keep in mind that unpacking/deobfuscating/decompiling the generated executable is pretty straightforward.

As for the Wireshark part:
py2c is a python c&c reverse shell, with an encrypted connection. Also read this to learn more about C&C communication methods.