A Python ransomware developed by H4x0rModdz.
WARNING: The use of this ransomware is strictly illegal and unethical. This project is for educational and demonstration purposes only. The author is not responsible for any misuse or illegal use of this application.
PythonWare is a Python ransomware designed to encrypt files on an infected system and demand a ransom (bitcoins) to decrypt them.
The ransomware utilizes the cryptography
library for file encryption and decryption, and the os
module for file and directory manipulation.
The ransomware consists of two main scripts: wolf.py
and decrypt.py
.
The wolf.py
script locates and encrypts the files on the infected system. It follows these steps:
- Locates all files in the current directory.
- Generates an encryption key using the
Fernet.generate_key()
method from thecryptography
library. - Stores the generated key in a file named
thekey.key
. - Iterates through the list of files and individually encrypts each file using the generated key.
- Overwrites the original files with the encrypted files.
- Displays a ransom message demanding the payment of 0.25 Bitcoins in exchange for the decryption key.
The decrypt.py
script is responsible for decrypting the files after the ransom payment. It performs the following steps:
- Locates all files in the current directory.
- Reads the decryption key stored in the
thekey.key
file. - Prompts the user for a secret phrase to unlock the decryption process.
- If the secret phrase provided by the user matches the expected phrase, proceeds with the decryption process.
- Iterates through the list of files and individually decrypts each file using the stored key.
- Overwrites the encrypted files with the original decrypted files.
- Displays a success message indicating that the files have been decrypted.
-
Clone the PythonWare repository to your system:
git clone https://github.com/H4x0rModdz/PythonWare.git
-
Install Cryptography
pip install cryptography
-
Install Python3
You can download the latest version of Python from the official Python Downloads page.
-
Run the wolf.py script to encrypt the files:
python3 wolf.py
After execution, all files in the directory (excluding the ransomware scripts themselves) will be encrypted.
-
After "paying" the ransom, run the decrypt.py script to decrypt the files:
python3 decrypt.py
- Password? github.com/H4x0rModdz/PythonWare
Please note that using ransomware is illegal and unethical. The above code is provided for educational purposes only and should not be used maliciously.