So...Im new to Bot Net and Zombies. What is the diference between IRC and HTTP bot net? I did a search on GOOGLE but I couldn't find anything usefull. I think that HTTP bot net is an free website where you host a panel and then u upload shells to other websites and DDoS with them. IRC I think is about making an simple .exe file that an user executes and it becomes an zombie that is directly linked with the control panel program in your PC. So could someone give me some details? Also what are the best HTTP bot nets files and how to set them up? (I need them for DDoS esspecially) ~ Sorry for bad english
[HELP] HTTP bot net vs IRC bot net |
|
May 3, 2016 08:51 AM
(This post was last modified: May 3, 2016 08:57 AM by SIM-2198759.)
Before i start anything, you WILL need money for this, and if you plan on trying to do it for free, theres no chance, but anyway, ill try give you a quick idea.
A HTTP Botnet is mainly used for things like data farming (Passwords, emails, ect..), bot selling/botshops, hoarding bots, and more. An IRC Botnet is better for fast response time, so it's mainly used for things like DDoS, Where the command will be executed almost instantly. HTTP uses something called a "knock timer" (Im sure some people will have other names), Where as IRC holds a constant connection between the bot and server. The knock timer is basically a time interval between the bots connections, so lets say i set it to 30 seconds, Once every 30 seconds, the bots will check in, say "Im here, anything i need to do?" and so on, they will execute commands you issue, and it will help the panel keep count on what bots are online, and which bots are offline. Now, for spreading, both IRC and HTTP bots can use an exe to get bots, just like a RAT, You have to spread your binary to your victims, and get them to execute it, You will also come across things like Kaiten, an IRC Bot coded in C, Most bots that are coded in C, will be directed at you infecting linux machines and servers, where as an exe is aimed at windows machines. What you asked for in the OP, is a Botnet for DDoS, so id recommend an IRC Bot, You can either purchase one that targets windows systems, or get something that targets linux systems as this will probably be better for your DDoS Attacks. P.S I did miss some info out, i tried to make it short but give you a general idea, try googling again. (What is an IRC Botnet, What is a HTTP Botnet, ect..) (May 3, 2016 06:30 AM)D0WN3D Wrote: So...Im new to Bot Net and Zombies. What is the diference between IRC and HTTP bot net? I did a search on GOOGLE but I couldn't find anything usefull. I think that HTTP bot net is an free website where you host a panel and then u upload shells to other websites and DDoS with them. IRC I think is about making an simple .exe file that an user executes and it becomes an zombie that is directly linked with the control panel program in your PC. So could someone give me some details? Also what are the best HTTP bot nets files and how to set them up? (I need them for DDoS esspecially) ~ Sorry for bad english Join our team, and we will work with you and spread the bot. We know some great spreading methods. We are looking to start a botnet as well. youtube.com/watch?v=PNu1qnL7btc I'm thinking if we work together, we will have a large botnet server. (May 3, 2016 06:38 PM)DNSHACKING Wrote: Join our team, and we will work with you and spread the bot. We know some great spreading methods. We are looking to start a botnet as well. Oh boy, that video was cringe. Quote:Also, HTTP botnets are harder to detect, because they generally blend in with network traffic.BULLSHIT, it depends on how the bot is written! And how does the fact that IRC botnets are used less nowdays make their detection ratio different? The fact that the HTTP botnet "blends" with other traffic wouldn't make any difference at the end nobody will inspect every package on hand. (May 4, 2016 07:51 AM)Nuclear3mbargo Wrote: BULLSHIT, it depends on how the bot is written! And how does the fact that IRC botnets are used less nowdays make their detection ratio different? The fact that the HTTP botnet "blends" with other traffic wouldn't make any difference at the end nobody will inspect every package on hand. Its not bullshit. Nowadays 99% IRC traffic is malicious because almost no one is using IRC for communication. You can't say the same for HTTP. The only reason you should be using IRC over HTTP is if you REALLY REALLY REALLY need almost instant responses. If you can afford to wait 10-20 minutes for your DDOS to start then HTTP will be better.
May 4, 2016 09:34 AM
(This post was last modified: May 4, 2016 09:38 AM by Nuclear3mbargo.)
(May 4, 2016 09:04 AM)qwertyblah Wrote: Its not bullshit. Nowadays 99% IRC traffic is malicious because almost no one is using IRC for communication. You can't say the same for HTTP. You can't make this assumption just like this. But then again, if somebody is analyzing the system for malware, the fact that the malware uses HTTP instant of IRC wouldn't matter at all. Note: I'm not stating that IRC is better than HTTP botnet, I'm stating that their difficulty for analysis is the same(as long as only the protocol is concerned) (May 4, 2016 09:34 AM)Nuclear3mbargo Wrote: You can't make this assumption just like this. But then again, if somebody is analyzing the system for malware, the fact that the malware uses HTTP instant of IRC wouldn't matter at all. It does indeed matter. There are networks where only HTTP and HTTPS is allowed. If you use a disallowed protocol your connection simply does not get through.
May 4, 2016 12:16 PM
(This post was last modified: May 4, 2016 12:19 PM by Nuclear3mbargo.)
(May 4, 2016 09:36 AM)qwertyblah Wrote: It does indeed matter. There are networks where only HTTP and HTTPS is allowed. If you use a disallowed protocol your connection simply does not get through. That's a fact, however those networks are mainly corporate, and usually the devices from this network connect to short range of servers, in which case the fact that you use HTTP/s will likely bring your botnet down faster. Also if you look in general, if you don't target a specific network, the number of networks which allow only HTTP/S will probably be irrelevant. (May 3, 2016 06:22 PM)Nukes Wrote: Just want to point out that if you were to use an HTTP botnet you could set it up in a way that every client knocks the server at the same time (assuming the server can handle all of the simultaneous requests). This can be done by getting the time from a site (like google) and then every hour it can knock the web server and you can just upload the ddos script 10 min. before the hour and have all the bots ddos simultaneously. Do you like bots because you can't root in 2016? :P |
|
|

