QuasiBot - Webshell Manager aka HTTP Botnet
Bilder
QuasiBot is a complex webshell manager written in PHP, which operate on web-based backdoors implemented by user himself. Using prepared php backdoors, quasiBot will work as C&C trying to communicate with each backdoor. Tool goes beyond average web-shell managers, since it delivers useful functions for scanning, exploiting and so on. It is quasi-HTTP botnet, therefore it is called.
All data about bots is stored in SQL database, ATM only MySQL is supported. TOR proxy is also supported, the goal was to create secure connection between C&C and backdoors; using SOCKS5, it is able to torify all connections between you and web server. All configuration is stored in config file. QuasiBot it's still under construction so i am aware of any potential bugs.
You will need any web server software; tested on Linux, Apache 2.2 and PHP 5.4.4.
Todo
Authorization system
Move Linux Exploit Suggestor to PHP language
Add Windows support to 'PWN' module
Automatic attacks on servers
Backdoors creation (backconnects)
Source code cleanup, it's still pretty shitty; amount of required files should be reduced
...
greetz
FM