[r1ngr00t]

I'm working on a pentesting project at the moment, I want to get all their computers on a botnet so that I can push files and see if their systems are susceptible, also I want to have a botnet for more mischievous reason 😁

What should I use, and what else do you think I could pen test with physical access to all the computers?

[Mr. Robot]

200 computers as in like a school or what? If they are all in the same locale, then besides computing power they are kinda pointless. You run yourself a risk on something like that for what?

If they are all over the place, just log them for passwords and have a bit of cheeky fun but to be honest, just let who ever know that they are vulnerable and move on.

[caiveman]

Almost guaranteed this is a school or university.
Do not do it. Your teachers will take it way more seriously than you think.
You are not "pentesting", you are power-hungry kid.

[Papa Cuda]

Make a monero farm fam.

Then use the earnings you get to live off of for the rest of your life when you get expelled.

[ZuGgY]

High risk of getting caught and face legal action, just saying...

[patflexx]

Agreeing with above comments. There was someone I graduated with, who just so happened to do the same thing to the library (this was back in 08) in High School, he ended up getting caught because he asked that same question on a Halo 2 modding forum way back when, another student identified his handle on the site, and when he decided to disconnect networking on the computers in the library, rendering them useless as their was no local boot option (just network boot), the staff started to ask questions. Kid was snitched on and his dreams of ever working in Data forensics or Security Risk Analysis after college are ruined because of his charges. Best thing to do is nothing, just let em sit, don't make it apparent.

[SIM-2223238]

200 computers?

start mining on those memes bro

[Cute]

This seems like a very dumb move, I wouldn't do it if I where you.
Too much risk man.

[r1ngr00t]

lol no its a company that my family owns, I'm not going to do anything crazy with the 200 ;) I want to tackle a mining botnet at some point as well. I wrote some bots a while ago but they ran as windows services and were pretty crappy to begin with, I figured I'd snag some inspiration from you guys.

---

This seems like a very dumb move, I wouldn't do it if I where you.
Too much risk man.

Running anything malicious on the 200 physical access is, I want to create a botnet for those and use it during our attack week, but later down the road I wanted to use the same principle for my own personal botnet...

[deaftone]

Horrible idea.. just sayin. You can buy a net that size for mad cheap and not bother with the hassle of fkn over your fam.

[r1ngr00t]

Horrible idea.. just sayin. You can buy a net that size for mad cheap and not bother with the hassle of fkn over your fam.

I'm aware I can buy a net way larger for cheap lol

I have about 15 different goals for the pentesting week which I'll be working on along side the CEO. I've done them for tons of people this one just happens to be for my extended fams company. I want to let the boss see how secure his computers are ie antivirus, real time protection, on top of the 14 other attacks I have.

I solved my problem... metrohttp load the stub onto all the computers and if the computers are not running antivirus or crap then they'll get the commands