[phyrrus9]

I need programming ideas. For reference, I stay as far away from windows as humanly possible, so dont even go there..

As many as you can think of..


GO

[Dyme]

I really want an HTTP bot for linux so I can run it on pwned boxes, but that's just me...

[phyrrus9]

Please explain? It looks interesting.

[Dyme]

Please explain? It looks interesting.

Uhm... a peice of software controlled from a web panel that allows you to administrate and maintain access to compromised (or legitimate) servers? There are many of these for windows (as I'm sure you know) but I deal with linux machines much more frequently than windows, so I would find this very useful. It's pretty straight forward.

[phyrrus9]

well, give me a project spec and possibly how much youd spend for it?

[Dyme]

well, give me a project spec and possibly how much youd spend for it?

$0.00 Lol. You would think the "I stay as far away from windows as humanly possible" guy would be more into opensource...

And if you need a "project spec" for this than I don't think you should waste your time trying to develop it.

[phyrrus9]

Im into open source..but how much you "would" spend determines how much of a demand for it there is. Im desparate for a project anyways, id never charge.

[chronical]

Uhm... a peice of software controlled from a web panel that allows you to administrate and maintain access to compromised (or legitimate) servers? There are many of these for windows (as I'm sure you know) but I deal with linux machines much more frequently than windows, so I would find this very useful. It's pretty straight forward.

that doesn't sound very hard... just backdoor one of the files in /var/www on the compromised server with a <?php system($_GET['cmd']); ?> script in a place where the administrator wouldn't catch it. then on the web panel, create a php script similar to send.php on most booters and make it send a request to the backdoored file that executed the given command.

I'm not sure if that's what you mean, but if we're thinking the same thing, that's probably a simplified version of how to do it. It'd be different if you want to run commands with root privileges instead of www-data

[Dyme]

Im into open source..but how much you "would" spend determines how much of a demand for it there is. Im desparate for a project anyways, id never charge.

There is probably very little demand for it as it really isn't a consumer product and will probably not be used for legitimate uses. I'm just saying that if I was well versed in C, this is something that I would make and that I think other decently skilled hackers would appreciate.

that doesn't sound very hard... just backdoor one of the files in /var/www on the compromised server with a <?php system($_GET['cmd']); ?> script in a place where the administrator wouldn't catch it. then on the web panel, create a php script similar to send.php on most booters and make it send a request to the backdoored file that executed the given command.

I'm not sure if that's what you mean, but if we're thinking the same thing, that's probably a simplified version of how to do it. It'd be different if you want to run commands with root privileges instead of www-data

But then of course you're limited in that the box must be running a web server (php) and it is accessible via WAN. Many easily pwnable devices (Ex. NAS and routers) fail to meet these requirements. I'd also like to stay as far away from php backdoors as possible, as they're incredibly easy to detect and remove. Ideally the bot would be versatile in the sense that it could run on most architectures, and need a very small number of dependencies.

[Lynux]

that doesn't sound very hard... just backdoor one of the files in /var/www on the compromised server with a <?php system($_GET['cmd']); ?> script in a place where the administrator wouldn't catch it. then on the web panel, create a php script similar to send.php on most booters and make it send a request to the backdoored file that executed the given command.

I'm not sure if that's what you mean, but if we're thinking the same thing, that's probably a simplified version of how to do it. It'd be different if you want to run commands with root privileges instead of www-data

That's not what he means and for more reference please check my thread in the market or click my siggy for a Android http bot, and a Linux http bot would actually be cool as it would be the first of it's kind if I am correct.