This is all hypothetical. What if someone finally decided that he wants to start a botnet. He has all the tools (Icepack, Firepack, mPack, etc.) and many new HTTP bots. The only problem is the web portion. He knows how to UD a bot, but he is totally lost with the PHP/MySQL control and use. Anyway, lets say he was just wondering if anyone had any knowledge in this area (esp. with the PHP/MySQL) and wanted to help. Thanks.

It's so much easier to just create a console that they connect back to, or to control them via IRC. Fuck that PHP shit. I <3 PHP but it's just easier to do it the other way IMO

__________________
In Silence I lay for that Fateful Day. 0day.

jamato@email.itt-tech.edu <-- My Email

I know, but the last IRC botnet got stolen, even though it had every single security option enabled, plus some other precautions that were taken. And it wasnt as if the bot was some antique. Unfortunately, Im not at the point where I can protect against a persistent botnet stealer. I've basically just ben trying security thru obscurity. However, this wouldn't happen with HTTP botnet, which would give me a major break. With the custom console thing I'd be pretty lost... I dont know any major programming languages (though i am learning C++) that would help me make one. I guess I'm just stuck until i learn SQL/PHP...

why not run it on a peer to peer with a tracker on some large network?

Agreed.

Seriously, don't use a PHP-based botnet, they really suck. Do it the way you did it before. When it was stolen, you probably just got unlucky. Give it another try.

Unfortunately I dont know how this works, nor do i have any bots that work this way (i think i dont, but im not sure. i have over 50 different bots, so one could be a winner).


Lol this is what people told me before... I guess I'll give it another go, but i really wanted to use this new banker bot that i got. Ah well w/e. It can wait i guess. Last time I used rxbot v8 FTPD-TFTP.rar from vxchaos, and modded it to include all the rxbot exploits i could find. Before that, I tried phatbot. Before that it was my first time, and I tried sdbot 0.4 (huge mistake there lol). Anyway, if I tried all these, what do you guys recommend? I was thinking of ri0tbot, but i know theres some others that i could try... Any ideas?

I always lol when someone goes from "someone" or "swim" to "I" between OP and their reply.

Especially since they're just as protected saying "I" in the first place.

__________________
oddballz194@gmail.com <-- my email

Ehh i just realized that no feds care. Its all hypothetical anyway.

http://en.wikipedia.org/wiki/Operation_Botroast