will-wtf Posted March 22, 2009 Share Posted March 22, 2009 If anyone has a botnet tutorial that is good can you please link it, or post it up. Just curious and I have looked for one, I'm fairly sure there are some herders here, pm me if you are not willing to publicly post it up. Will Quote Link to comment Share on other sites More sharing options...
digininja Posted March 22, 2009 Share Posted March 22, 2009 Funny you should ask, I got some spam yesterday trying to lease me a botnet. If you want to see how easy they are to use have a look at the recent bbc click episode where they hire one, the interface looks very simple to use. Quote Link to comment Share on other sites More sharing options...
will-wtf Posted March 22, 2009 Author Share Posted March 22, 2009 I have watched it about 3 days ago, probably why I am so interested at the moment. Quote Link to comment Share on other sites More sharing options...
Destro Posted March 22, 2009 Share Posted March 22, 2009 Securitytube.net has one, but if your in the US like me you can't view it (I am not sure about other places though) cheers, Destro Quote Link to comment Share on other sites More sharing options...
DingleBerries Posted March 22, 2009 Share Posted March 22, 2009 Step 1. Find some bot source code. Step 2. Mod source code to point to your server, IRC/Web/ICQ. Step 3. Make sure bot is contacting home. Step 4. Bind that to another program. Step 5. ???? Step 6. Profit The principal around bots is not complicated, the inner workings and source is what makes them interesting. After you get your hands on some sauce then you can start with all the complicated things, keylogger, inform other bots, crypt traffic. Play with this: Simple IRC bot http://www.osix.net/modules/article/?id=780 Mod the code in order to execute system function when a command is sent via irc. You can also build in other classes and what not. Im not going to go into spreading your bots because that is illegal and should be self explanatory. Quote Link to comment Share on other sites More sharing options...
moonlit Posted March 23, 2009 Share Posted March 23, 2009 Uh... what? You're seriously asking for a tutorial on how to build a botnet? Seriously? Go do your own research or go and fuck yourself. There's no way in hell I'm going to sit and watch a thread on how to build a botnet. Do you have any idea how much of a problem that could cause? Some kid comes running in, reads the topic, then has this awesome plan for world domination and we helped cause it? I don't usually feel the need to be this much of an asshole about topics but this is a really really bad idea. Quote Link to comment Share on other sites More sharing options...
dr0p Posted March 23, 2009 Share Posted March 23, 2009 It's a lot better if you program your own botnet because you get to choose exactly what features it has, how it spreads, etc. plus you also get to deal with managing hundreds to thousands of simultaneous connections. And no, I'm not endorsing using botnets for malicious purposes in any way but they're a fun project to experience and learn about. Quote Link to comment Share on other sites More sharing options...
messsy Posted March 23, 2009 Share Posted March 23, 2009 @dr0p well of course here but i love the avatar, it keeps tickling me :) back to subject, moonlit is right (in my opinion) Quote Link to comment Share on other sites More sharing options...
Destro Posted March 23, 2009 Share Posted March 23, 2009 Uh... what? You're seriously asking for a tutorial on how to build a botnet? Seriously? Go do your own research or go and fuck yourself. There's no way in hell I'm going to sit and watch a thread on how to build a botnet. Do you have any idea how much of a problem that could cause? Some kid comes running in, reads the topic, then has this awesome plan for world domination and we helped cause it? I don't usually feel the need to be this much of an asshole about topics but this is a really really bad idea. Moonlit nailed it on the head. That wat your going to get when you ask that. cheers, Destro P.s. The documentary isn't on building so if you want to take over the world LOL dot bother Quote Link to comment Share on other sites More sharing options...
will-wtf Posted March 23, 2009 Author Share Posted March 23, 2009 I wasn't looking at taking over the world and all that crap, I just wanted to see the processes that the bbc cut out of their production, and look at some interesting code that I could not get my hands on, suprisingly google wasn't giving me any luck, and bhf was down for maintenance. @moonlit; kids are kids, and if they managed to get the damn thing together, then even so it wouldn't be fud, and this is quite topical at the moment with the new conficker variable, a BBC production made on it. Quote Link to comment Share on other sites More sharing options...
digininja Posted March 23, 2009 Share Posted March 23, 2009 I think the bit the BBC missed out was the actual hiring of the botnet. All they got once they'd hired it was that nice GUI that allowed them to control the bots, they weren't actually buying source code. If you've got the patience for a long read this is a very good paper on conficker and gives a few examples of source code - http://mtc.sri.com/Conficker/addendumC/ Quote Link to comment Share on other sites More sharing options...
will-wtf Posted March 23, 2009 Author Share Posted March 23, 2009 Found something vaugley interesting, http://removed.com/ you have to be registered to read it, but it shows how simple it is to really make one. Quote Link to comment Share on other sites More sharing options...
DingleBerries Posted March 23, 2009 Share Posted March 23, 2009 Found something vaugley interesting, http:url you have to be registered to read it, but it shows how simple it is to really make one. I thought I had already pointed that out... Some of the harder ones are the nicest, very feature rich, and very costly. Also I wouldn't link to that board here. Quote Link to comment Share on other sites More sharing options...
underhole Posted March 23, 2009 Share Posted March 23, 2009 I'm going to have to agree with moonlit on this one. There is no way this should even be an open thread, if your truly interested go look it up and actual learn the stuff. If you really did want to know about it you would research the hell out of the topic not just as for a tutorial. On the other hand if your just looking to make a botnet to show off to your friends then asking for a quick tutorial would be your best bet. To bad you will never get it here, or any other place I can think of. Quote Link to comment Share on other sites More sharing options...
digininja Posted March 23, 2009 Share Posted March 23, 2009 I'd say that this is part of research. If I'm interested in a particular topic I'd do some googling but I'd also ask various peer groups if they had any useful links or information on the topic. Maybe the question was worded a bit badly but this to me is part of "research the hell out of the topic". Quote Link to comment Share on other sites More sharing options...
will-wtf Posted March 23, 2009 Author Share Posted March 23, 2009 I'm going to have to agree with moonlit on this one. There is no way this should even be an open thread, if your truly interested go look it up and actual learn the stuff. If you really did want to know about it you would research the hell out of the topic not just as for a tutorial. On the other hand if your just looking to make a botnet to show off to your friends then asking for a quick tutorial would be your best bet. To bad you will never get it here, or any other place I can think of. where did you get the conclusion that i was going to "show off to my freinds" exactly underhole? Quote Link to comment Share on other sites More sharing options...
moonlit Posted March 23, 2009 Share Posted March 23, 2009 Look, you know as well as we do that you're not the only person here, we don't know your intentions or anyone else's. I appreciate that you want to learn but really as was mentioned earlier, if you really want to learn then do proper research not just ask for a tutorial. I know for a fact that the basics aren't hugely technical so it's not that difficult to get the essential info down. This isn't anything personal and I'm not saying you are going to try and launch your own botnet or whatever but you can't exactly blame us for being against handing you the howto. Quote Link to comment Share on other sites More sharing options...
digip Posted March 23, 2009 Share Posted March 23, 2009 Setup a honeypot, then let it get infected. Isolate it and see what and where traffic is tryign to go, work the rest out yourself. While I don't think discussion about botnets in general is bad or even new ground, asking where to get one or how to make one is research you usually need to do on your own. Not something you ask for in an open public forum, but maybe private talks with key people. Just use your head when asking a question, and think about what is acceptable. If its borderline offensive or illegal to that respect, don't post it on a forum. Quote Link to comment Share on other sites More sharing options...
DingleBerries Posted March 23, 2009 Share Posted March 23, 2009 I get my samples from here. Be warned those are REAL viruses. Some of the conflictor packages, especially the newer ones, can tell if they are running in a vm... and other have been engineered not to talk to anyone but the person who uploaded it, research purposes. Never the less it is a great place to go if you are trying to get infected. LINK http://www.offensivecomputing.net/ Quote Link to comment Share on other sites More sharing options...
LauBen Posted March 23, 2009 Share Posted March 23, 2009 will-wtf, I understand that we all have to start somewhere when it comes to new things, and I am sure you never intended to do anything illegal with the knowledge you were looking to gain. However, as you can tell just posting a statement asking "If anyone has a botnet tutorial that is good" is not going to help you learn, and will (as is the case here) most likely p$%s people off :) Anyway in an attempt to help you out I will start you off on the road to knowledge town:- 1- Google it - Google has a huge amount of very good information on Bot's and Botnets, from both sides of the camp (black and white) 2- Believe it or not Youtube has some videos showing how easy it is, and also providing a basic overview of what is involved. 3 - Have a look on Wikipedia, this will provide you with a load of good links and detailed information on the history of Botnets. Oh and before you think I am being a dick with my answers, I had to present to around 60 people earlier this month on all types of new (I know Botnets are not new before any one start :) )malware and provide a live demo of how they are made and spread, and the 3 items here provided me with a wealth of info to start and grow my presentation. Quote Link to comment Share on other sites More sharing options...
underhole Posted March 23, 2009 Share Posted March 23, 2009 Maybe the question was worded a bit badly but this to me is part of "research the hell out of the topic". If you where going to use a forum like this for research purposes you would come to the forum with questions and points of clarification, not asking for a generic over arching tutorial. where did you get the conclusion that i was going to "show off to my freinds" exactly underhole? It is just one of multiple easily drawn conclusions that happens when some one posts asking for a simple answer to a some what complex issue. Even if you didn't want to research you could at least come to this board with a post like "Hey I have googled around and found out x. I still don't get y. Do you guys have any tips or good links?" Quote Link to comment Share on other sites More sharing options...
will-wtf Posted March 23, 2009 Author Share Posted March 23, 2009 We already got around the point that I worded the Question very badly I thought, thanks for the info guys, I have found out most of what I wanted to. Dingleberries thanks for all that, digininja, the article on Conficker C was a long read, but answered about 80% of what I was asking, great read guys. ^_^ Quote Link to comment Share on other sites More sharing options...
deltatsunami Posted April 3, 2009 Share Posted April 3, 2009 All depends what you want your botnet to do. Take an IRC code base like cpIRC (http://www.nongnu.org/cpirc/) and you could probably figure out the rest. Most bot sources out there are probably going to be detected or backdoored themselves. Quote Link to comment Share on other sites More sharing options...
MuNk Posted April 6, 2009 Share Posted April 6, 2009 here is some basic on information. Botnets, mass majority these days are built by kids and are base on the same old source-code (reptile,shadow), granted there are the exceptions like conflicker.a/b/c which is 100% private/custom code. all botnets require a C&C (Command and Control), there are different types. most commonly used are IRC/HTTP , yes there are a few who use unique methods, ive seen one that was half udp half http. to build a bot is not a complex thing, anyone who can learn to make one, spreading/infection methods are the hard and most interesting parts, followed by how they keep the files undetected. last and most importantly NOT ALL botnets are used for DDoS, some are built as spamming networks, some work as HTTP servers for illicite content, some are proxybots (yes bot that install sock4/5 on your machine), there is other that are used for cracking password (distributed computing) but very few of them around or ever has been. then there are ones who do all of that and DDoS. This is about all you really need to know about botnets. Quote Link to comment Share on other sites More sharing options...
Zimmer Posted April 7, 2009 Share Posted April 7, 2009 A botnet tutorial would awesome!! That is all I got to say. :) Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.