Introduction

Welcome to our new article today we will show you Secrets of Botnet Creation with Koadic tool. To create the botnet we need 5 minutes approximately. This is the repository of the tool:

GitHub – offsecginger/koadic: zerosum0x0’s Koadic

What is Koadic?

Koadic, or COM Command & Control, is a Windows post-exploitation rootkit similar to other penetration testing tools such as Meterpreter and Powershell Empire. The major difference is that Koadic does most of its operations using Windows Script Host (a.k.a. JScript/VBScript), with compatibility in the core to support a default installation of Windows 2000 with no service packs (and potentially even versions of NT4) all the way through Windows 10.

It is possible to serve payloads completely in memory from stage 0 to beyond, as well as use cryptographically secure communications over SSL and TLS (depending on what the victim OS has enabled).

Recent versions Koadic are developed on Python 3, it is not a priority to have Python 2 support (End of Life).

Also Read : Top 20 Best Computer Networking eBooks to Download

What is a botnet?

A botnet is a network of compromised computers or devices that are controlled remotely by a cybercriminal, usually for malicious purposes such as launching attacks, stealing data, or sending spam.

The computers or devices in a botnet are typically infected with malware, which enables the attacker to take control of them without the owner’s knowledge or consent. Once infected, the compromised devices become “zombies” or “bots” that can be commanded by the attacker to perform various tasks, such as sending spam emails, launching DDoS attacks, stealing personal information or financial data, or installing additional malware on the compromised device.

Botnets can be very large and powerful, consisting of tens of thousands or even millions of infected devices, and they can be difficult to detect and dismantle. Botnets are often used by cybercriminals to carry out illegal activities on a massive scale, and they can cause significant damage to individuals, businesses, and even entire countries.

A botnet typically consists of three key components:

1. Command and control (C&C) server: This is the central server that the attacker uses to send commands to the infected devices. The C&C server is used to direct the bots to carry out various activities, such as launching attacks or stealing data.
2. Bots or zombies: These are the compromised devices that are under the control of the attacker. Bots can be anything from computers to IoT devices such as routers, cameras, or smart home appliances.
3. Malware: This is the software that infects the devices and allows the attacker to take control of them. The malware can be distributed through various channels, such as email attachments, malicious websites, or software vulnerabilities.

Once a device is infected with the malware, it connects to the C&C server and waits for instructions from the attacker.

POC

First let’s install the tool in my Kali Linux attacker machine:

git clone https://github.com/offsecginger/koadic

Now let’s entry to the directory:

cd koadic

Let’s install all requirements, to do this we need pip3 tool, default installed with Python3.

I receive a error installing it, but the tool works fine.

And now let’s execute it:

./koadic

Now we can execute the info command to check information about the session.

Also Read : The Ultimate Guide for Bypassing Web Access IP Blocks

With run command we initialize the server that victims (zombies) need to connect it.

Now let’s use Windows 10 as victim:

And…

I have the zombie active, you can see in Status “Alive”, and with only one command in victim machine we have the zombie connected to my botnet, and now i can do all this things.

For example you can execute commands in victim machine with cmdshell <ID> command

And you can create phishing attacks or a big quantity of others attacks, i recommend you check all in the ReadMe:

GitHub – offsecginger/koadic: zerosum0x0’s Koadic

Conclusions

That’s all for this tool, i hope you like it.

If you enjoy my content and would like to help me take this project to the next level, you can become a member by donating a monthly subscription. Your support will help me continue to create high-quality content. Thank you for your generosity!

Thanks to read this 🙂