DIY Command & Control For Fun And *No* Profit
Talkat AppSec California 2014 · on Tuesday, 2014-01-28· at 17:15· Track 2, Annenberg Community Beach House, East Pacific Coast Highway·
summary
A live Zeus command‑and‑control is built on LAMP/XAMPP with a bot builder and config.bin, deployed to zdemo.moo3os.com and shown with the guest account; the uploader cites ~900 then ~523 known CNCs on abuse.ch. Demos use a backconnect server and backconnect RDP tunnel (works intermittently), demonstrate page injection grabbed CVV from a scraped form, and show the user destroy logs out behavior. Some steps fail in live demo but database reports, cookies and surveillance features function.
AI-written summary · about
chapters (7)
- 0:00Introduction and context
- 6:05Zeus malware overview
- 14:55Setting up the environment
- 24:37Command and control demo
- 34:05Remote access and tunneling
- 49:44Web injection and data theft
- 57:15Destructive payloads
related talks
47mLive Hacking: Breaking into Your Web App
27mWhat Goes Around Comes Back Around - Exploiting Fundamental Weaknesses in Botnet C&C Panels!
48mHow to Thwart Malicious Automation and Kick Bot Butt for $0
42mModern web application bugs
38mHacking Demos, Dirty Secrets, Dangerous Lies, Asset Intelligence
38mAbusing CNC Technologies
26mJourney to Command Injection: Hacking the Lenovo ix4-300d
51mHow hacking works - Web edition