PandeoF1 / px_botnet

HTTP Botnet in C, Cross Compilable. (Layer 7 - Layer 4) - 11 Methods
https://botnet.pandeo.fr/login.php
MIT License
33 stars 10 forks source link

I executed px_botnet , but no bot is online, and the configuration file has also been changed #11

Closed aimuaimu closed 1 year ago

PandeoF1 commented 1 year ago

Hey, can you please provide the configuration. (Hide a part of private information)

Le lun. 22 août 2022, 12:59, aimuaimu @.***> a écrit :

— Reply to this email directly, view it on GitHub https://github.com/PandeoF1/px_botnet/issues/11, or unsubscribe https://github.com/notifications/unsubscribe-auth/AN5LJNYP3XLAI24JUUBT32DV2NMRHANCNFSM57HGRWCA . You are receiving this because you are subscribed to this thread.Message ID: @.***>

aimuaimu commented 1 year ago

google.cloud  4vCores 16GB RAM 40SSD      

------------------ 原始邮件 ------------------ 发件人: "PandeoF1/px_botnet" @.>; 发送时间: 2022年8月23日(星期二) 上午6:46 @.>; @.**@.>; 主题: Re: [PandeoF1/px_botnet] I executed px_botnet , but no bot is online, and the configuration file has also been changed (Issue #11)

Hey, can you please provide the configuration. (Hide a part of private information)

Le lun. 22 août 2022, 12:59, aimuaimu @.***> a écrit :

> — > Reply to this email directly, view it on GitHub > <https://github.com/PandeoF1/px_botnet/issues/11&gt;, or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AN5LJNYP3XLAI24JUUBT32DV2NMRHANCNFSM57HGRWCA&gt; > . > You are receiving this because you are subscribed to this thread.Message > ID: @.***> >

— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: @.***>

darkanubis0100 commented 1 year ago

The same issue here...

# define url "ggregergeryhte.ddns.net" // fake url
# define stringifer "" //url obfusced (ex : api.pandeo.fr == Zib'vZg]^u'_k)
# define download_url "" // url for script sh to download bot
# define url_page "/api.php" // path for api

I'm not quite getting the hang of that configuration. The "define url" is supposed to be a fake host, then "define stringifer" must be the real host (which I already obfuscated with the tool) but I can't understand if it is necessary to put only the "Zib'vZg]^u'_k" or "hostname == Zib'vZg]^u'_k" (I tried both ways and recompiling the binary but without success in the connection.

The "download_url" I understand even less, what is this "sh script" you are talking about, the already compiled px_botnet, is it necessary to put the content in the form "hostname.com/px_botnet"?

Some things are not well written. My host is running on port 443, I can't find where I can specify the operating port.

PandeoF1 commented 1 year ago

Hi, Inside the stringified URL. You put only the hostname stringified nothing more (ex: pandeo.fr). But you need to use port 80 for http. Download url is for an bash script for auto deployement. But you don't need it for the test. Inside url_page you need to put "/path/api.php" in my example the botnet was a the "/" of my webserver. So i have put /api.php

PandeoF1 commented 1 year ago

The configuration of the bot where you pute the crypted ip

Le mar. 23 août 2022, 07:55, aimuaimu @.***> a écrit :

google.cloud  4vCores 16GB RAM 40SSD      

------------------ 原始邮件 ------------------ 发件人: "PandeoF1/px_botnet" @.>; 发送时间: 2022年8月23日(星期二) 上午6:46 @.>; @.**@.>; 主题: Re: [PandeoF1/px_botnet] I executed px_botnet , but no bot is online, and the configuration file has also been changed (Issue #11)

Hey, can you please provide the configuration. (Hide a part of private information)

Le lun. 22 août 2022, 12:59, aimuaimu @.***> a écrit :

> — > Reply to this email directly, view it on GitHub > <https://github.com/PandeoF1/px_botnet/issues/11&gt;, or unsubscribe > < https://github.com/notifications/unsubscribe-auth/AN5LJNYP3XLAI24JUUBT32DV2NMRHANCNFSM57HGRWCA&gt;

> . > You are receiving this because you are subscribed to this thread.Message > ID: @.***> >

— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you authored the thread.Message ID: @.***>

— Reply to this email directly, view it on GitHub https://github.com/PandeoF1/px_botnet/issues/11#issuecomment-1223582593, or unsubscribe https://github.com/notifications/unsubscribe-auth/AN5LJNZJICSDS33FX56FCJLV2RRW7ANCNFSM57HGRWCA . You are receiving this because you commented.Message ID: @.***>

PandeoF1 commented 1 year ago

Inside the stringified URL. You put only the hostname stringified nothing more. But you need to use port 80 for http. Download url is for an bash script for auto deployement. But you dont need it for the test

Le dim. 11 sept. 2022, 16:33, NinjutsuDEV @.***> a écrit :

The same issue here...

define url "ggregergeryhte.ddns.net" // fake url

define stringifer "" //url obfusced (ex : api.pandeo.fr == Zib'vZg]^u'_k)

define download_url "" // url for script sh to download bot

define url_page "/api.php" // path for api

I'm not quite getting the hang of that configuration. The "define url" is supposed to be a fake host, then "define stringifer" must be the real host (which I already obfuscated with the tool) but I can't understand if it is necessary to put only the "Zib'vZg]^u'_k" or "hostname == Zib'vZg]^u'_k" (I tried both ways and recompiling the binary but without success in the connection.

The "download_url" I understand even less, what is this "sh script" you are talking about, the already compiled px_botnet, is it necessary to put the content in the form "hostname.com/px_botnet"?

Some things are not well written. My host is running on port 443, I can't find where I can specify the operating port.

— Reply to this email directly, view it on GitHub https://github.com/PandeoF1/px_botnet/issues/11#issuecomment-1242977919, or unsubscribe https://github.com/notifications/unsubscribe-auth/AN5LJN54C3LTRCN4OZLA74DV5XUTNANCNFSM57HGRWCA . You are receiving this because you commented.Message ID: @.***>