toxy4ny/bl00dym4rySimulador educativo de troyanos para la formación en ciberseguridad, que simula ataques de phishing con ingeniería social, reconocimiento del sistema, evasión anti-sandbox y exfiltración de datos para concienciar.
BloodyMary es una herramienta educativa (troyano o ransomware) para formar a especialistas en ciberseguridad, simulando ataques de phishing realistas con elementos de ingeniería social. Este proyecto fue creado para concienciar sobre las amenazas cibernéticas y demostrar las consecuencias de ejecutar archivos sospechosos.
⚠️ ADVERTENCIA: Esta herramienta está destinada EXCLUSIVAMENTE a fines educativos y a pruebas autorizadas en entornos controlados.
// Blood drop physics
drops[i].velocityY += drops[i].acceleration;
drops[i].x += drops[i].velocityX;
drops[i].y += drops[i].velocityY;
// Color gradient creation
COLORREF CreateBloodGradient(int baseRed, int variation, int alpha)
# Install dependencies
sudo pacman -S mingw-w64-gcc mingw-w64-binutils mingw-w64-headers mingw-w64-crt upx wine
# Clone repository
git clone https://github.com/toxy4ny/bl00dym4ry.git
cd bl00dym4ry
# Build
make
# or
./build.sh
# Build both versions (32-bit and 64-bit)
make all
# or
./build.sh all
# 64-bit version
x86_64-w64-mingw32-gcc -Os -s -static -DWIN32_LEAN_AND_MEAN \
-ffunction-sections -fdata-sections -fno-ident -fomit-frame-pointer \
-o bl00dym3ry.exe main.c \
-Wl,--gc-sections -Wl,--strip-all -Wl,--build-id=none \
-static-libgcc -static-libstdc++ \
-lwininet -lws2_32 -liphlpapi -luser32 -lkernel32 -lgdi32 \
-lshell32 -ladvapi32 -lole32 -loleaut32 -luuid -lmsimg32
# Size optimization
x86_64-w64-mingw32-strip --strip-all bl00dym3ry.exe
upx --best --lzma bl00dym3ry.exe
SECURITY_TRAINING_REPORT.txt en el escritorio===============================================================
CYBERSECURITY TRAINING REPORT
===============================================================
WARNING: This is the result of a phishing training test
YOU SUCCESSFULLY LAUNCHED A SUSPICIOUS FILE!
What happened:
+ System information was collected
+ Data was sent to external server
+ Visual effects were demonstrated
+ Malicious activity was simulated
RECOMMENDATIONS:
1. Don't open suspicious attachments
2. Verify email senders
3. Use antivirus software
4. Regularly update software
5. Be careful with links
// File does NOT cause real harm:
// - Does not encrypt files
// - Does not install backdoors
// - Does not modify system settings
// - Creates only educational report
[✓] Anti-sandbox checks passed
[✓] Console window hidden
[✓] Process started successfully
[✓] System information collected
[✓] Network configuration analyzed
[✓] Process enumeration completed
[✓] User credentials identified
[✓] Data packaged for transmission
[✓] TCP connection established
[✓] Information sent to C&C server
[✓] Connection terminated
[✓] Screen effects activated
[✓] Horror elements displayed
[✓] Victim awareness achieved
[✓] Educational message delivered
// Change obfuscated SSH settings
static char ssh_host[] = {0x73, 0x7f, 0x7f, 0x3a, 0x66, 0x6d, 0x63, 0x3a, 0x66, 0x3a, 0x66, 0x72, 0x72, 0x00};
static char ssh_user[] = {0x05, 0x16, 0x17, 0x03, 0x16, 0x02, 0x03, 0x00};
static char ssh_pass[] = {0x08, 0x34, 0x09, 0x16, 0x01, 0x02, 0x16, 0x08, 0x67, 0x65, 0x67, 0x69, 0x00};
// Blood intensity configuration
#define BLOOD_DROPS_COUNT 80
#define BLOOD_SPLATTERS_COUNT 150
#define BLOOD_TRAILS_COUNT 300
#define ANIMATION_FRAMES 500
// Check configuration
#define MIN_SLEEP_TIME 2800
#define MIN_PROCESS_COUNT 25
#define MIN_RAM_SIZE (1024 * 1024 * 1024)
Si has encontrado un error o problema:
Este proyecto se distribuye bajo la Licencia MIT. Consulta el archivo LICENSE para más detalles.
MIT License
Copyright (c) 2025 Hackteam.Red
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
IMPORTANTE: Este proyecto ha sido creado exclusivamente con fines educativos y para pruebas de seguridad autorizadas. Los autores no son responsables del uso indebido de este software.
Utilizar esta herramienta para atacar sistemas sin el permiso explícito de sus propietarios es ilegal y puede conllevar responsabilidad penal.
¡Gracias a todos los colaboradores del proyecto y a la comunidad de ciberseguridad por su contribución a crear un mundo digital más seguro! Especialmente por la idea de la sangre en pantalla de principios de los 2000, cuando discutíamos efectos visuales para virus con el virusmaker de nick "DES/29A" en el canal de IRC.
██████╗ ██╗ ██████╗ ██████╗ ██████╗ ███╗ ███╗ █████╗ ██████╗ ██╗ ██╗
██╔══██╗██║ ██╔═══██╗██╔═══██╗██╔══██╗████╗ ████║██╔══██╗██╔══██╗╚██╗ ██╔╝
██████╔╝██║ ██║ ██║██║ ██║██║ ██║██╔████╔██║███████║██████╔╝ ╚████╔╝
██╔══██╗██║ ██║ ██║██║ ██║██║ ██║██║╚██╔╝██║██╔══██║██╔══██╗ ╚██╔╝
██████╔╝███████╗╚██████╔╝╚██████╔╝██████╔╝██║ ╚═╝ ██║██║ ██║██║ ██║ ██║
╚═════╝ ╚══════╝ ╚═════╝ ╚═════╝ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═╝ ╚═╝
🎭 Trojan Phishing Simulator for Cybersecurity Training 🎭
Versión: 1.0.0 | Última actualización: 2025