+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: Rust or CPP botnet feature request/suggestions (/showthread.php?tid=6193619)
Rust or CPP botnet feature request/suggestions - NotKover - Feb 14, 2022
What would you like to see in a botnet made in rust or CPP(will have download and execute and update etc and will be a http panel) and please dont say stupid stuff
RE: Rust botnet feature request/suggestions - __Digital__ - Feb 14, 2022
(Feb 14, 2022 01:06 PM)NotKover Wrote: What would you like to see in a botnet made in rust(will have download and execute and update etc and will be a http panel) and please dont say stupid stuff
1. botkiller
2. ruskill option
3. heavy persistence
RE: Rust botnet feature request/suggestions - SIM-5052356 - Feb 15, 2022
Proccess injection
Startup
Watchdog
possibly a UAC bypass
RE: Rust or CPP botnet feature request/suggestions - lululululu - Mar 4, 2022
A Kernel Driver for persistance and invisibility.
RE: Rust or CPP botnet feature request/suggestions - NotKover - Mar 4, 2022
(Mar 4, 2022 03:54 PM)lululululu Wrote: A Kernel Driver for persistance and invisibility.
If i did that it wouldnt be cheap and a lot of work to do but its doable.
RE: Rust or CPP botnet feature request/suggestions - ecccccccccc - Mar 5, 2022
(Mar 4, 2022 03:54 PM)lululululu Wrote: A Kernel Driver for persistance and invisibility.
(Mar 4, 2022 06:05 PM)NotKover Wrote: If i did that it wouldnt be cheap and a lot of work to do but its doable.
best way to do this is by using a vulnerable signed driver since loading unsigned drivers or just disabling microsofts signature enforcement is kinda a hard thing to do, i know there are alot of projects on github but the thing is you have to update it for every windows version.
RE: Rust or CPP botnet feature request/suggestions - lululululu - Mar 5, 2022
(Mar 5, 2022 03:57 AM)ecccccccccc Wrote: best way to do this is by using a vulnerable signed driver since loading unsigned drivers or just d Hubisabling microsofts signature enforcement is kinda a hard thing to do, i know there are alot of projects on github but the thing is you have to update it for every windows version.
https://github.com/hfiref0x/TDL
https://v1k1ngfr.github.io/loading-windows-unsigned-driver/
Both Tested and working
RE: Rust or CPP botnet feature request/suggestions - ecccccccccc - Mar 5, 2022
(Mar 5, 2022 04:23 AM)lululululu Wrote: https://github.com/hfiref0x/TDL
https://v1k1ngfr.github.io/loading-windows-unsigned-driver/
Both Tested and working
doesnt work on latest windows 11, maybe its just cus of secureboot
RE: Rust or CPP botnet feature request/suggestions - NotKover - Mar 5, 2022
(Mar 5, 2022 03:57 AM)ecccccccccc Wrote: best way to do this is by using a vulnerable signed driver since loading unsigned drivers or just disabling microsofts signature enforcement is kinda a hard thing to do, i know there are alot of projects on github but the thing is you have to update it for every windows version.
I know ways to do it but its more of making the kit itself.
RE: Rust or CPP botnet feature request/suggestions - lululululu - Mar 6, 2022
(Mar 5, 2022 03:17 PM)ecccccccccc Wrote: doesnt work on latest windows 11, maybe its just cus of secureboot
Turla Driver loader works fine for me in latest windows11 with secureboot enabled
RE: Rust or CPP botnet feature request/suggestions - NotKover - Mar 6, 2022
(Mar 6, 2022 07:15 AM)lululululu Wrote: Turla Driver loader works fine for me in latest windows11 with secureboot enabled
uh alright, i probably will end up making the kit but i dont think people on HF would be able to afford a build of it due to it having a kernel kit
RE: Rust or CPP botnet feature request/suggestions - lululululu - Mar 6, 2022
(Mar 6, 2022 07:18 AM)NotKover Wrote: uh alright, i probably will end up making the kit but i dont think people on HF would be able to afford a build of it due to it having a kernel kit
Hackforums is definitly the wrong place for selling this kind of malware.
RE: Rust or CPP botnet feature request/suggestions - NotKover - Mar 6, 2022
(Mar 6, 2022 07:24 AM)lululululu Wrote: Hackforums is definitly the wrong place for selling this kind of malware.
I was thinking of just making some actually HQ software with some good features and sell it tbh just for money and shit but if i make these advanced features it definitely will be sold somewhere else