[Baked]

---

General Information

L2IRC is an advanced IRC bot written in both C and C#.
Using many advanced functions including using thread hijacking to persist in memory, L2IRC is able to stay in memory in even the most difficult situations.

---

Features:

L2IRC's features include:

- Fully Undectable
- Custom UAC Bypass: Bypasses UAC and it's parts, gains partial admin rights on run.
- Advanced Botkiller: Kills most HF bots and other malware.
- Three types of floods: HTTP GET, HTTP HEAD, UDP; more coming soon.
- Download & Execute: Download and Execute anything you wish with a secure file injection method that is undetected.
- Specific Commands: Issue a command to a specific bot or to all of the bots by using @all or @<id>.
- System Enumeration: Enumerates entire system, including processor name, cores, speed, GPU, OS, architecture, and much more.
- Persistance: Custom written persistance makes it nearly impossible to kill L2IRC.
- Startup: Multiple startup entries throughout the system makes it hard to prevent L2IRCfrom starting up.
- Custom Encryption Library: L2IRCuses a custom encryption library written specifically for L2IRC.
- Nickname Randomizer: Randomizes the nickname on join.
- Save IRC Info: No more bin rebuilds, L2IRCcomes with a built-in command that allows you to change the saved IRC information for either joining a different IRC server or updating existing information.

---

Command List:

Each command is prefixed with the following algorithm:

@all | @<id>
http <get | head> <url> <time (seconds)> - HTTP Flooder, Supports both GET and HEAD floods
udp <ip> <port> <time> <packetsize (max is 5000)> - UDP Flooder, good packetsize is 1200
dl <url> <filename> <true | false (execute)> - Download and Execute.
update <url> - Updater, update via URL
botkill - Start Botkiller module.
visit <url> <hidden (true | false)> - Visits a URL, if hidden is set to false, it will be opened in the default web browser.
set <ip> <#channel | #channel:password> <mutex (any string 5-10 chars long)> - Update IRC info.
ver - Enumerate remote computer.
move <#channel | #channel:password> - Move IRC channels.
nick - Randomize Nickname.
rc - Reconnect to the IRC server.
kill - Kill all instances of L2IRC. (Might not be a good idea to use this with @all)
uninst <yes> - Uninstall and remove all instances of L2IRC. (Yet again, not a good idea with @all)
dc - Disconnect from the IRC server, but leave the L2IRCinstance open.
path - Shows the path of the current running instance of L2IRC.
ping - Ping and listen for a PONG reply.

---

Purchasing Process

Purchasing a BIN

• $30 per bin
  • No Updates available
    
  
  
  • $10 Rebuild fee with updates
  
  
  
  


• $50 per bin
  • 3 updates included
    
  
  
  • $10 Rebuild fee after 3 updates have been delivered
  
  
  
  


• $70 per bin
  • 6 updates included
    
  
  
  • $10 Rebuild fee after 6 updates have been delivered
  
  
  
  

Builder Purchases

• $120 for Builder
  • No updates included
    
  
  
  • $20 per update
  
  
  
  


• $150 for Builder
  • 3 Updates included
    
  
  
  • $20 updates after 3 updates have been delivered
  
  
  
  


• $200 for Builder
  • 6 updates included
    
  
  
  • $20 updates after 6 updates have been delivered
  
  
  
  


• $400 for Reselling Builder
  • 1 complementary update
    
  
  
  • $40 updates after first update is delivered
  
  
  
  

For purchase inquiries, please PM Baked.
For Support, please PM ThrDude.

We accept Paypal, Liberty Reserve and LiteCoin for purchases.
Litecoin is exchanged at 2.50 / coin.

Baked - PM
ThrDude - PM

---

Upcoming Features

- Improved stealth of injection process.
- SSL Support
- SOCKS5 Proxy Server w/UPNP support.
- Password Stealer.
- More flood types (i.e. SSYN, Slowloris, ARME)

---

Changelog:

v1.0
- Initial release.

---

Virus Scan:

FUD Scan (Click to View)[img]http://elementscanner.com//image.php?ID=a91327a2456f169ef833189b190317ef[/img]

---

Credits and Project Developers

• ~ŢħŗĐũđę™ - Project Lead Developer
  


• LiteSpeed - Special thanks for coding the Layer 7 flood core.
  


• Baked - Project Management and Sales Manager

Graphic Sales Thread coming soon

[Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ]

So we don't need to crypt it at all?

I may be interested in getting the builder soon :P. GLWS

[Baked]

Thanks for the stick Omni !

And it's FUD right now Shadow, we have a crypter in development that will be offered in a package when this bot becomes UD.

[hatmulticoleur]

But at least, this should stay FUD for about a month?
Can reshacker be used to change icon?
Will server work if extension is changed to .scr?

I never used an IRC bot or chat before, hell don't even know how they are configured. And I need this ASAP!
I'll look up some tutorials and stuff and if I can set it up, I'll buy immediately!
Goodluck OP!!

EDIT: Just looked up tutorials on IRC...I don't have that time lol. I'd have loved it if this was a http bot. All the troubles of setting up IRC server and shit. And all just for about 500 installs that i need lol

[Baked]

But at least, this should stay FUD for about a month?
Can reshacker be used to change icon?
Will server work if extension is changed to .scr?

I never used an IRC bot or chat before, hell don't even know how they are configured. And I need this ASAP!
I'll look up some tutorials and stuff and if I can set it up, I'll buy immediately!
Goodluck OP!!

EDIT: Just looked up tutorials on IRC...I don't have that time lol. I'd have loved it if this was a http bot. All the troubles of setting up IRC server and shit. And all just for about 500 installs that i need lol

We can do a setup on a VPS for $50.

Also what would you be hosting the HTTP bot on?

[Farcast]

I have seen this bot in action, looks pretty nice. GL with your sales Baked!

[Coiner]

Can someone explain, why most HF bots want Slowloris and ARME in their Ddos options, when both are old & useless exploits?

[John Constantine]

Can someone explain, why most HF bots want Slowloris and ARME in their Ddos options, when both are old & useless exploits?

Since when did Slowloris become useless?

[Coiner]

Since when did Slowloris become useless?

It has been useless for a long time, probably because its 4 YEARS OLD EXPLOIT.

Hackforums is the only board whose bots have 13 attack methods, from which at-least 8 are useless. Russian Ddos bots at-least implement Anti-ddos workarounds.

[Farcast]

Can someone explain, why most HF bots want Slowloris and ARME in their Ddos options, when both are old & useless exploits?

The point of having so many different methods are your disposal is for a trial and error effect of ddosing.

If one method does not work, possibly because of a firewall or whatever reason, then 'hackers' will attempt another method.

That is the trend in attacks currently; as reported by Prolexic.

[Coiner]

The point of having so many different methods are your disposal is for a trial and error effect of ddosing.

If one method does not work, possibly because of a firewall or whatever reason, then 'hackers' will attempt another method.

That is the trend in attacks currently; as reported by Prolexic.

Explain to me, what is the purpose of 10 "different" HTTP attacks that do almost exactly the same thing - send GET requests?

Edit: Also i believe Prolexic is talking about Russian botnets using their l33t anti-dooz workarounds, because most HF botnets are not worth looking at.

[Baked]

ARME works great on Apache web servers.

Slowloris has always been a steady method.

[‌‌‌‌‌Thr‌‌‌‌‌]

Explain to me, what is the purpose of 10 "different" HTTP attacks that do almost exactly the same thing - send GET requests?

Edit: Also i believe Prolexic is talking about Russian botnets using their l33t anti-dooz workarounds, because most HF botnets are not worth looking at.

I don't think you know much about floods sir.

[Farcast]

Explain to me, what is the purpose of 10 "different" HTTP attacks that do almost exactly the same thing - send GET requests?

Edit: Also i believe Prolexic is talking about Russian botnets using their l33t anti-dooz workarounds, because most HF botnets are not worth looking at.

No they are talking about ddos attacks in general and the trends of the attackers. Not about malware.

[Coiner]

I don't think you know much about floods sir.

I've been playing with DDoS for 5 years now, i think i know more than enough. From my experience, i've always used normal GET Flood or Slowpost and both were sufficient enough to not include 10 other HTTP floods.

I guess using 4 year old denial of service exploits, such as Slowloris makes people look cool in the eyes of others on Hackforums.