Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Java 

[Tut]How to make a shell booter in java[Tut]

(Jan 1, 2013 06:23 PM)Fereta Wrote:  Please explain what you mean by "no security." I am genuinely wanting to know.
Anybody can make attack requests with your shells if they get the link. There should be some security measures implemented, at the very least checking with a list of addresses that can request attacks.

(Jan 1, 2013 07:29 PM)Goldbach Wrote:  You can create a crypted .txt file and have an algorithm to decrypt it if you wanted. For this program its not necessary, but for the future, if someone wanted to sell it etc, then they would want to implement something like that
Wait... what? How would having some encrypted text file and a decryption algorithm to go along stop anybody from requesting attacks?
(Jan 1, 2013 06:23 PM)Fereta Wrote:  Please explain what you mean by "no security." I am genuinely wanting to know.
There is no security?.. Anyone can use the shells.

(Jan 1, 2013 07:29 PM)Goldbach Wrote:  You can create a crypted .txt file and have an algorithm to decrypt it if you wanted. For this program its not necessary, but for the future, if someone wanted to sell it etc, then they would want to implement something like that
What kind of heap of shit are you talking about?..
You can have maximum security it won't even matter; if someone wanted the shells they could get them.

(With knowledge of bootclasspath)

Code
public URL(String url) throws MalformedURLException {
    this(null, url);
    System.out.println(url);
}
(Jan 1, 2013 11:45 PM)Victoria J Wrote:  You can have maximum security it won't even matter; if someone wanted the shells they could get them.

(With knowledge of bootclasspath)

Code
public URL(String url) throws MalformedURLException {
    this(null, url);
    System.out.println(url);
}
With the same logic, if someone wanted to deface Google they could do it.

No, if someone has the incredible skills to do such a thing they could do it. The same applies in this case (although whether the skills to do the task are incredible or not is debatable); without security you're opening up a security threat for the lowest form of a novice.
(Jan 1, 2013 11:45 PM)Victoria J Wrote:  You can have maximum security it won't even matter; if someone wanted the shells they could get them.

(With knowledge of bootclasspath)

Code
public URL(String url) throws MalformedURLException {
    this(null, url);
    System.out.println(url);
}
LOL? You are stupid. Simple security will make hijacking them impossible.
op, why wont you fetch the html script first to scan for the get parameters and then apply it later when youre about to request an attack to it? so any shells will do.
(Jan 2, 2013 06:01 AM)autorunman22 Wrote:  op, why wont you fetch the html script first to scan for the get parameters and then apply it later when youre about to request an attack to it? so any shells will do.

You cant scan parameters in php server side code. The html is only the layout.
goodbye
I personally find JOptionPane better.
Gotta say, it's pretty good for a new project. One way to improve it would to be to add a GUI, though I don't expect you to do that considering the work you've done on it already. Nice!
(Jan 5, 2013 09:04 PM)iitsimran Wrote:  I personally find JOptionPane better.

Could you explain what this is then and what you prefer it over? 😧
goodbye
this looks great! thanks! however, your link to the shells isnt working
wat.. someone explain me how to export this please :)
(Jan 2, 2013 06:37 AM)redpois0n Wrote:  You cant scan parameters in php server side code. The html is only the layout.

You're correct. What I'm trying to say is, his code needs to fetch a shell.
i.e. download the content of the shell (request without any parameters).
Once the program got the HTML script, scan for the parameters inside the form tag so it should be easy. Then run a new thread that will supply the extracted parameters against that particular shell. Profit.
I have made this myself and with only 300/1000+ public shells, I can really take down a small home connection.
thanks for this But not sure if shells worked then. Yours do?


Possibly Related Threads...
Thread / Author Replies Views Last Post
[.NET] by jkrules420May 31, 2016 05:13 PM 16 5,514 May 31, 2016 05:13 PM
Last Post: Kiazio
[Java] by nullifiedvoidJun 29, 2015 03:08 PM 46 1,921 Jun 29, 2015 03:08 PM
Last Post: JIM NASIUM'S GYMNASIUM
[Java] by terkitosJun 24, 2014 09:54 AM 14 887 Jun 24, 2014 09:54 AM
Last Post: Remix