3
GET READY
OOP University Project

Raven Reaper

A powerful Windows Environment Testing Suite
built in C# .NET Framework 4.7.2 with zero NuGet dependencies

0 Modules
0 CS Files
0 NuGet Deps
0 % Original
Explore Modules View Demo
RavenReaper.exe — Administrator
██████╗ █████╗ ██╗ ██╗███████╗███╗ ██╗ ██████╗ ███████╗ █████╗ ██████╗ ███████╗██████╗
██╔══██╗██╔══██╗██║ ██║██╔════╝████╗ ██║ ██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔══██╗
██████╔╝███████║██║ ██║█████╗ ██╔██╗ ██║ ██████╔╝█████╗ ███████║██████╔╝█████╗ ██████╔╝
██╔══██╗██╔══██║╚██╗ ██╔╝██╔══╝ ██║╚██╗██║ ██╔══██╗██╔══╝ ██╔══██║██╔═══╝ ██╔══╝ ██╔══██╗
██║ ██║██║ ██║ ╚████╔╝ ███████╗██║ ╚████║ ██║ ██║███████╗██║ ██║██║ ███████╗██║ ██║
╚═╝ ╚═╝╚═╝ ╚═╝ ╚═══╝ ╚══════╝╚═╝ ╚═══╝ ╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝╚═╝ ╚══════╝╚═╝ ╚═╝
[✓] Running as Administrator
[*] Loading 10 modules...
[RUN] SystemInfoGatherer█
What is it?

About Raven Reaper

Raven Reaper is a comprehensive Windows environment testing tool ported from Python to C# as part of an Object-Oriented Programming university project. It gathers system intelligence and sends detailed reports directly to Discord via webhook — making it perfect for remote diagnostics of virtual machines.

🎯

OOP Principles

Built on a clean IModule interface, abstract BaseModule template class, and full encapsulation across 10 modules.

🔒

Zero Dependencies

No NuGet packages. Uses only built-in .NET Framework APIs — P/Invoke, WMI, System.Drawing, and HttpWebRequest.

📡

Discord Integration

Every module reports results to Discord via webhook — messages, rich embeds, and file attachments including screenshots and webcam images.

🛡️

Admin Elevation

Embedded app.manifest forces UAC elevation. Admin-only modules (WiFi, Password) auto-detect privileges and warn accordingly.

Core Features

10 Powerful Modules

Each module implements the IModule interface and reports results to Discord automatically.

🖥️
No Admin

System Info Gatherer

Gathers comprehensive Windows environment data and sends as a rich Discord embed with colour-coded fields.

  • OS, hostname, architecture, uptime
  • CPU cores, clock speed, per-core usage
  • RAM / swap usage percentages
  • Disk drives & network interfaces
  • Public IP via ipify.org
SystemInfoGatherer.cs · 587 lines
📦
No Admin

Installed Apps Scanner

Scans 5 distinct sources to build a full picture of installed software on the machine.

  • Registry uninstall keys (32/64-bit)
  • Downloads folder (.exe, .msi, .msix)
  • Desktop shortcuts & .lnk files
  • Start Menu programs
  • Program Files directories
AppsScanner.cs · 390 lines
🌐
No Admin

Browsing History Extractor

Reads browser history databases directly using P/Invoke to the built-in winsqlite3.dll.

  • Chrome, Edge, Brave (Chromium epoch)
  • Firefox places.sqlite
  • URL, title, visit count & last visit time
  • Top 50 URLs per browser, sorted by recency
  • Sends formatted report file to Discord
BrowsingHistoryExtractor.cs · 383 lines
⬇️
No Admin

Download History Extractor

Extracts browser download records from Chromium and Firefox SQLite databases.

  • Chrome / Edge downloads table
  • Firefox moz_downloads table
  • File path, URL, state, and total bytes
  • Sends structured text report to Discord
DownloadHistoryExtractor.cs · ~300 lines
💳
No Admin

Credit Card Extractor

Scans browser autofill databases for stored payment card patterns using Luhn-validated regex.

  • Chrome web_data autofill table
  • Luhn algorithm validation
  • Visa, Mastercard, Amex detection
  • Results sent as Discord message
CreditCardExtractor.cs · ~220 lines
📶
Admin Required

WiFi Extractor

Calls netsh wlan show profile key=clear to extract saved Wi-Fi passwords for all networks.

  • Currently connected SSID & password
  • All saved Wi-Fi profiles enumerated
  • Short reports sent as Discord message
  • Long reports sent as .txt attachment
WifiExtractor.cs · 261 lines
🔑
Admin Required

Password Extractor

Decrypts saved browser passwords using Windows DPAPI & Chrome's App-Bound Encryption (v80+).

  • Chrome / Edge / Brave Login Data DB
  • AES-256-GCM decryption via BCrypt.dll
  • NCrypt.dll for protected key access
  • Sends credential report to Discord
PasswordExtractor.cs · 587 lines
📸
No Admin

Screenshot Capture

Takes a full desktop screenshot with automatic fallback to BitBlt P/Invoke if the managed API fails.

  • Method 1: Graphics.CopyFromScreen
  • Method 2: BitBlt via User32/Gdi32
  • Multi-monitor virtual screen support
  • PNG sent directly to Discord
ScreenshotCapture.cs · 221 lines
📷
No Admin

Webcam Capture

Grabs a live webcam frame using two capture methods with automatic failover.

  • Method 1: avicap32.dll (WM_CAP_* messages)
  • Method 2: ffmpeg -f dshow fallback
  • Tries 6 common camera device names
  • JPEG image sent to Discord with timestamp
WebcamCapture.cs · 320 lines
🔍
No Admin

Script Detector

Scans all script files in the directory for suspicious patterns using compiled Regex rules.

  • 4 detection rules (CRITICAL / HIGH / MEDIUM)
  • Scans .py, .ps1, .bat, .cmd files
  • Detects DPAPI, Discord webhooks, WiFi harvesting
  • Exports JSON + CSV reports to reports/
ScriptDetector.cs · 352 lines
Design Pattern

OOP Architecture

Clean layered architecture with dependency injection-style composition and template method pattern.

Entry Point
Program.cs
Interactive Menu · CLI Args · Module Runner
▼
Core Infrastructure
IModule
Interface
BaseModule
Abstract Class
DiscordClient
Webhook HTTP
SqliteInterop
winsqlite3.dll
ConsoleUI
Pretty Output
AdminHelper
UAC Check
▼
10 Modules (all extend BaseModule)
SystemInfo
AppsScanner
BrowsingHistory
DownloadHistory
CreditCard
WiFiExtractor
PasswordExtractor
Screenshot
Webcam
ScriptDetector
▼
Native P/Invoke Layer (8 DLLs)
kernel32.dll
advapi32.dll
NCrypt.dll
BCrypt.dll
user32.dll
gdi32.dll
shell32.dll
avicap32.dll
Requires Admin Native Windows DLL
Live Preview

Console Demo

RavenReaper.exe — Administrator
Technologies

Tech Stack

⚙️

C# .NET 4.7.2

Full .NET Framework targeting Windows 10+. Compiled via csc.exe — no Visual Studio needed.

🪟

P/Invoke

8 native Windows DLL wrappers: kernel32, advapi32, NCrypt, BCrypt, user32, gdi32, shell32, avicap32.

🗄️

SQLite (winsqlite3)

Reads browser history and passwords from SQLite databases using the built-in winsqlite3.dll.

📬

Discord Webhook

Custom HTTP client using HttpWebRequest. Supports text, rich embeds, and file attachments.

🔐

WMI & Registry

System information gathered via ManagementObjectSearcher and Microsoft.Win32.Registry.

🛡️

UAC Manifest

Embedded app.manifest requests requireAdministrator execution level for automatic elevation.