Creating a BotNet

[Moonbat]

I don't have Tsunami anymore. The server I had it on wised up on their security.

Also, for some reason I'm getting a 400 Bad Request for ImageShack. Can you host the pic somewhere else?

If you have a 2nd computer, you can try infecting yourself. I don't think your friends will appreciate it.

I barely get on MSN.

[x1mpr0x]

K i'll host on tinypic:

[url]http://tinypic.com/view.php?pic=2z57ib*&s=*[/url]


Do you still have any of the files when you had Tsunami? Do you know where you got yours from? >< Maybe this one I got off partyvan has messed up .txt's and .php's?



Sent it to GF who barely uses the computer, just to see if anything would change :P I'm gonna post some information

C:\wamp\www\Xylophone

index.php
online.php
update.php
update.txt

That's what's in there.

hmmm, here, lemme open up mysql;

show databases;

information_schema
mysql
test
xylophone



use xylophone;

database changed



show tables;

botnet


explain botnet;

[url]http://tinypic.com/view.php?pic=2zekppe&s=*[/url]

[Moonbat]

I got my copy of Tsunami off of h4cky0u. I don't have a link, and I think the thread is lost anyway because of the whole h4cky0u vs h4ck-y0u split.

Let's do another checklist before we start.

1. Are you able to login normally? It doesn't matter if the page looks messed up, as long as it works it's fine
2. Are you able to access your WAMP page from another computer using your computer's IP address? For example, if the computer w/ WAMP has IP 28.*04.54.2*0, type in [url]http://28.*04.54.2*0[/url] on another computer and see if it gets to your WAMP page.

[x1mpr0x]

If you need any more information I can give it to you;

Here are the originals of the txts/phps and what they were after I edited them, maybe I screwed up here?

under index.php, original first, then my copy

<?
// SETTINGS FOR ADMIN ACCESS
$login = "admin"; // your login

//You must set it!
$password = ""; // your password


and mine:

<?
// SETTINGS FOR ADMIN ACCESS
$login = "x*mpr0x"; // your login

//You must set it!
$password = "thisismypwlol"; // your password



And now to look at online.php:

// Set MySQL database variables
$online_db_host = "";
$online_db_name = "";
$online_db_user = "";
$online_db_pass = "";

and my copy:

// Set MySQL database variables
$online_db_host = "http://localhost/";
$online_db_name = "Xylophone";
$online_db_user = "x*mpr0x";
$online_db_pass = "thisismypwlol";

[Moonbat]

Ah, wait, hold on. Find the line:

$online_db_host = "http://localhost/";

And put in your computer's IP address:

$online_db_host = "http://YOURIPHERE/";

Sorry for my mistake telling you to put localhost, but I just realized that it won't work unless you put your own IP. Like I said, I've never used WAMP to host Tsunami.

So yeah, replace localhost with your IP. Then wait for someone to open up the server.exe or whatever. Then see if you can attack a site with it.

EDIT: Make sure you keep WAMP online. Always, otherwise your botnet won't work

[x1mpr0x]

Login? If I go to [url]http://localhost/[/url] I'm automatically in. There are no logins.



if someone goes on they get this:

Forbidden

You don't have permission to access / on this server.

[x1mpr0x]

WAMP is offline :S how do I get it online.

[lopez124]

A typical example is a web server log which maintains a history of page requests. The W*C maintains a standard format for web server log files, but other proprietary formats exist. More recent entries are typically appended to the end of the file. Information about the request,[URL="http://www.certpaper.com/642-*64.htm"]642-*64[/URL] including client IP address, request date/time, page requested, HTTP code, bytes served, user agent, and referer are typically added. These data can be combined into a single file, or separated into distinct logs, such as an access log, error log, or referer log. However, server logs typically do not collect user-specific information.These files are usually not accessible to general Internet users,[URL="http://www.certpaper.com/642-566.htm"]642-566[/URL] only to the web****** or other administrative person. A statistical analysis of the server log may be used to examine traffic patterns by time of day, day of week, referrer, or user agent. Efficient web site administration, adequate hosting resources and the fine tuning of sales efforts can be aided by analysis of the web server logs.[URL="http://www.certpaper.com/*Y0-456.htm"]*Y0-456[/URL] Marketing departments of any organization that owns a website should be trained to understand these powerful tools.

[Moonbat]

No, go to the directory that Tsunami is in. There should be a control panel of some sort. I think you might've already logged in.

Is your WAMP server online? Do you have an index page in the main directory?

[x1mpr0x]

[url]http://tinypic.com/view.php?pic=*6s*6w&s=*[/url]

That's what [url]http://localhost/[/url] is


and in my taskbar, when I highlight WAMPSERVER it says "WAMPSERVER - server Offline"


Lemme ask you, do TsunamiOverHost.exe and server.exe have to be in a certain place? They are nowhere near c:\wamp\... in fact they are on d:\ lol

[Moonbat]

I think you have to right-click the taskbar icon and put it online.

All your files are in the wwwroot folder right? So go to [url]http://localhost/WHATEVERDIRECTORYTSUNAMIISIN[/url] and post a screenshot.