all rightlet' take this thing for spin by running it from the command line wa if you have sensitive information in files or environment variablesremember that without private repositorythat information is going to go up to github for the whole world to see don' say didn' warn you -and of course you can use some encryption techniques from python git_trojan py [*found file abc json [*attempting to retrieve dirlister [*found file modules/dirlister [*attempting to retrieve environment [*found file modules/environment [*in dirlister module [*in environment module perfect it connected to my repositoryretrieved the configuration filepulled in the two modules we set in the configuration fileand ran them now if you drop back in to your command line from your trojan directoryentergit pull origin master from branch master -fetch_head updating fdf fast-forward data/abc/ data data/abc/ data files changed insertions(+) deletions(-create mode data/abc/ data create mode data/abc/ data awesomeour trojan checked in the results of our two running modules there are number of improvements and enhancements that you can make to this core command-andcontrol technique encryption of all your modulesconfigurationand exfiltrated data would be good start automating the backend management of pull-down dataupdating configuration filesand rolling out new trojans would also be required if you were going to infect on massive scale as you add more and more functionalityyou also need to extend how python loads dynamic and compiled libraries for nowlet' work on creating some standalone trojan tasksand 'll leave it to you to integrate them into your new github trojan [ the repo where this library is hosted is here[ you can check out py exe here[ an awesome explanation of this process written by karol kuczmarski can be found here