Ungrabber

Ungrabber is a Python module designed for decompiling and extracting C2 (especially webhook) from info stealers.

Installation

1. Clone the repository:

   git clone https://github.com/lululepu/Ungrabber
   

2. Navigate to the repository directory:

   cd Ungrabber-main
   

3. Install the module:

   pip install .
   

Usage

1. Direct Decompiling

Decompile a file and extract its data as a tuple:

import Ungrabber

result = Ungrabber.decompile("filename")
print(result)  # The tuple of extracted data

2. Load as a Stub Object

Load a file as a stub object for further analysis:

import Ungrabber

with open("filename", "rb") as f:
    stub = Ungrabber.load(f)

print(stub)  # The stub object

Documentation will be added later

Contributing

Contributions are welcome! Feel free to submit issues or pull requests to improve Ungrabber.

License

This project is licensed under the MIT License. See the LICENSE file for more details.

Contact

For any inquiries or support, please open an issue on GitHub.