search

Its-Just-Nans / mirai-dockerized

Analysis and implementation of a botnet
https://n4n5.dev/articles/mirai-docker/
1 stars 0 forks source link

Fixing with stable version #1

Open Its-Just-Nans opened 2 weeks ago

Its-Just-Nans commented 2 weeks ago

The branch main is now up to date The branch saved-state is the project at his end state

A save of cross compilers are now hosted (just in case if the new current hosting fail - not used) at https://github.com/Bel-Art/cross-compilers

The current project is working (https://www.youtube.com/watch?v=Ful39I41Gc8)

Educationnal purpose: To simulate a mirai attack, you still need to connect to the CNC and launch the attack. You will also need to remove debug mode of bots - or to modify the bot code

Check recent commits like this commented one https://github.com/Its-Just-Nans/mirai-dockerized/commit/9041e257284bb0ff6d7206883beff8265a4174cc

You can also check https://n4n5.dev/articles/mirai-docker/ :)

Its-Just-Nans commented 2 weeks ago

@3-dd-1 might be interested

theorynice commented 2 weeks ago

Thank you very much! This helps me a lot

Its-Just-Nans commented 2 weeks ago

Example of a Dockerfile_cnc.Dockerfile using local go

FROM debian:bullseye

RUN apt update && apt install -y git

WORKDIR /app

COPY ./Mirai-Source-Code/mirai/cnc /app/cnc

# do on the host machine wget https://go.dev/dl/go1.15.15.linux-amd64.tar.gz
COPY ./go1.15.15.linux-amd64.tar.gz /app/go1.15.15.linux-amd64.tar.gz

RUN tar -xf /app/go1.15.15.linux-amd64.tar.gz

RUN /app/go/bin/go  env -w GOPROXY=direct GOFLAGS="-insecure"
RUN cd /app/cnc && /app/go/bin/go build -o ../debug/cnc *.go

CMD ["./debug/cnc"]

Dockerfile_reporter.Dockerfile

FROM debian:bullseye

RUN apt update && apt install -y git

WORKDIR /app

COPY ./Mirai-Source-Code/mirai/tools/scanListen.go /app/tools/scanListen.go

# do on the host machine wget https://go.dev/dl/go1.15.15.linux-amd64.tar.gz
COPY ./go1.15.15.linux-amd64.tar.gz /app/go1.15.15.linux-amd64.tar.gz

RUN tar -xf /app/go1.15.15.linux-amd64.tar.gz

RUN /app/go/bin/go  env -w GOPROXY=direct GOFLAGS="-insecure"

RUN /app/go/bin/go build -o debug/scanListen tools/scanListen.go

CMD ["./debug/scanListen"]
Its-Just-Nans commented 2 weeks ago 
# connect to CNC then enter username and password
telnet localhost 2323
shift
pwd
# you are now in the CNC 'shell'