[UNST0P4B1E]

I'm trying to make my own botnet, but I don't know if I should try to extract firmware and reverse engineer it to find a zero-day, or if it's better to just use a CVE, even though it's could be patched.

[MadScientist]

Of course its better to reverse engineer IoT devices firmware and find a 0day over using a publicly know exploit that's going to get patched.

[UNST0P4B1E]

Yea but the 0 days would mainly work on the same build tha you reverse so idk if it worth the time and does brute force SSH or the main login page also a good option ??

[cl0udzz]

Yea but the 0 days would mainly work on the same build tha you reverse so idk if it worth the time and does brute force SSH or the main login page also a good option ??

Lots of IOT devices such as cameras use very similar components so a 0day could be used on more than one brand of IOT devices, also from what I've heard the "meta" right now in botnets are TVs with ADB open.

[UNST0P4B1E]

Ok ok but should I check my target on shodan or not nesseraly, because when im trying to find IP TVs i find like 150 000 for like 1 700 000 for IP Camera, I dont really kwon what target to get working ?

[smofeng]

Hello, I can sell you Exploit or we can make botnets with you)

[UNST0P4B1E]

Im not gonna say no for some help but Im trying to find my owne 0 days on those IP ANDROID TV BOX tha you can find on amazone

[cl0udzz]

Funny how everyone is treating finding 0days like a weekend project and not something that takes lots of research and trial and error...

[UNST0P4B1E]

I kwon it really hard and require a lot of determination, but went reverse it your passion im not counting the time and even if I dont find a 0 days im still learning in the end of the days

[d3st0]

From what I've seen with IoT devices like sec cams, there is a lot of developer backdoors that get left in after development + weak default creds or hard coded backup passwords which are probably your best bet when reversing IoT firmware. Mind you I only am really thinking about one company in specific but from everything ive seen its pretty standard to find those elsewhere.

[UNST0P4B1E]

Yea I kwon, but im still not sure about IP Cam or Androit TV Box, i kwon for cam I try Hikvision but for Android TV box idk what product to target mayber Amazon FireStick

[closedeyeknight]

Find a zero-day exploit is a long term job, If u are only want to spread, it doesn't worth, just use public CVE and brute force.
I want to spread the botnet too, I'm planing to buy a commercial botnet now or modify based on mirai. Maybe you can DM me and we do together.
To me, u are not interested in spreading botnet but do exploit dev.

[UNST0P4B1E]

Yea sure, we can work togethe no probleme

[zuviqn23]

sorry but what does kwon mean?

[babayaga3331]

im trying to build one myself, cant pm you cuz new acc
lmk if u wanna try smthing together