+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: [Development] Apollo IRC Bot. (/showthread.php?tid=3198889)
[Development] Apollo IRC Bot. - Break - Jan 22, 2013
Information:
Apollo is a Windows IRC bot Written in C++. It uses IRC with the option of SSL to communicate with the C&C (command-and-control server). As a self-defense, Apollo also has rootkit to hide its presence on the created files and registry entries by intercepting Win32 API calls. Apollo performs a system wide hook to inject itself into the whole process. It installs to the users computer with a randomly generated filename and runs the file at startup.
Features:
User-Mode Rootkit
-Hooks NtQueryDirectoryFile, NtEnumerateValueKey, and others to keep Apollo's file and registry entries hidden from users and other malware.
Ruskill
-Downloads and runs file of the masters choice and removes it when rebooted.
Proactive Defense
-Monitors APIs to stop the installtion of other malware on the system.
DNS Redirector
-Blocks AV update sites and other domains of your choice.
DDoS
-Slowloris (Apache flood), UDP Flood (Rapidly sends UDP packets to specific IP), and SYN Flood (Rapidly sends SYN requests to specific IP) good for webservers.
Form Grabber
-Monitors POST requestes from web browsers capturing emails and passwords.
FTP Grabber
-Captures FTP details inputed by the user.
USB Spread
-Infects USB drives using .lnk and autorun.
Skype Spread
-Sends messages to infected users skype contacts. MSN is being ported to skype for those who didn't know.
MSN Spread
-Sends Messages to infected users msn contacts without the infected user knowing. Msn Will still be working in China after the msn to skype mitigation.
HTTP Spread
-Replaces status updates, chat messages, and private messages on Twitter and Facebook.
Project Status
Spoiler (Click to View)
* - lulz4days - Jan 22, 2013
Vouch, seen source code via TeamViewer.
* - Kernel Mode - Jan 22, 2013
Seen the source, Isn't copy and paste.
* - Light Yagami. - Jan 22, 2013
Well this looks good i vouch to and i can't wait until this well be released.
* - betamonkey - Jan 22, 2013
Also seen the source. Looks okay to me, not from anything I have seen.
Beta Monkey
* - zShotS is Back - Jan 22, 2013
You've always stood out among the skids lol.
I'm interested, very. What are the differences between the base and 4 modules?
* - AppData - Jan 22, 2013
@zShots is Back
The base is just the bot itself with the rootkit and main features. The 4 module package is your choose of Pdef, msn spread,
http spread, Ftp grabber, Formgrabber, DDoS Modules.
* - zShotS is Back - Jan 22, 2013
(Jan 22, 2013 09:12 PM)AppData Wrote: @zShots is Back
The base is just the bot itself with the rootkit and main features. The 4 module package is your choose of Pdef, msn spread,
http spread, Ftp grabber, Formgrabber, DDoS Modules.
Okay if modules are just features, I'm assuming the full package is everthing. And I'd hope you'd be able to choose which modules you want.
* - AppData - Jan 22, 2013
(Jan 22, 2013 09:17 PM)zShotS is Back Wrote: Okay if modules are just features, I'm assuming the full package is everthing. And I'd hope you'd be able to choose which modules you want.The full Package includes everything in the bot, and yes you do choose which modules you want to have.
* - hottrod - Jan 22, 2013
This bot looks really good, cant wait for it to get released.
* - ๖ۣۜMystical - Jan 23, 2013
Seen the source not like anything i have seen, Should turn out to be a good irc bot.
* - AppData - Jan 23, 2013
Ty for the people who posted about my source, if you have any questions feel free to pm me.
Thank you.
🤝
* - van1lle - Jan 23, 2013
Good job mayne. Haven't seen any bot here which makes use of encrypted traffic.
* - mrkid0s - Jan 23, 2013
I'm interested in the bot, but I need you to show me by teamviewer.
give me your contact.
* - Break - Jan 23, 2013
I will update the thread later with screenshots of the code.