https://github.com/colental/byob
Built this to teach myself Python. Any thoughts?
22 Likes
I already met the project thanks to this guy on twitter, he doesnāt think highly of it. But hey, look at this way: bad publicity is still publicity 
. And he has been put in his place by various commenters, so you got that going for you.
But seriously, good job man!
2 Likes
BTW, is it possible for us to also make our own modules for this thing?
Yeah I saw that - MalwareTech also tweeted about the project and he has 127k followers! My jaw was on the floor. He was critical of the quality of my code but the fact that someone of his stature would take notice of it and actually find it to be worth discussing + critiquing is crazy to me.
Thanks for the response and any feedback is always welcome, Iām still learning so I appreciate it!
Yep, you definitely can write your own modules - just add them to the ./byob/modules/ directory and your modules can be remotely loaded into memory and directly imported into the currently running process, without writing anything to the disk!
1 Like
I spoke about my thoughts on this project on twitter and I disagree with what a lot of people are saying.
Learning this kind of thing is really useful to understanding how a C2 works. This is the entire thing of offensive security.
Good job dude! This could even be used for engagements to demonstrate and test the impact of a potential botnet. Red Team simulations are everything to some top companies.
I must say, Iāve read through the code and it looks pretty good man. Youāve used sensible function names, youāve used functions, and youāve used classes. All that stuff is good coding practice. Iāve seen a lot worse code in my time. Donāt listen to those tryna knock the hustle.
Keep it up, man! You should check out IRC too. webchat.0x00sec.org / irc.0x00sec.org:6697+, weād all love to chat with you about it and ethics and stuff.
9 Likes
In fact mate @colental, you should definitely do a write-up here on your tool. How to use it and how youāve designed it.
That would be amazing.
7 Likes
Damn dudeā¦ this is cool. Nice share. As pry0cc suggested, please do a write up. That would be awesome!
3 Likes
Really nice tool! Canāt wait to look over and play with it!
Besides that I totally agree with @pry0cc. A write up would be phenomenal! Especially, I would like to read more about your design and development process (e.g. what was your initial idea, how has it changed during development, what kind of problems did you encountered etc.).
4 Likes
Thanks man, I canāt tell you how much I appreciate you taking the time to look over the code and share your thoughts on it.
I will definitely do a write up on how to use the tool and how Iāve designed it (and Iāll check out IRC today too)!
1 Like
Awesome, thanks! Iām getting started on a write-up right now - hope to hear your thoughts on it after I post it!
1 Like
Glad to hear youāre interested in it man - Iām getting started on a write-up now!
4 Likes
Iāll prolly read through your code and merge ZeroSpy with it. Good job and forget the haters.
#Sergeant
4 Likes
Awesome project man, looking forward to reading your writeup! But whatās the reason you went for python2 instead of 3?
1 Like
Same here. Actually, I was pretty surprised when I saw that this project belongs to someone from 0x00sec. Iāll check the source code as soon as I can. Thanks for such a great project.
2 Likes
Good question - support for python3 may be implemented in the future, and my reasoning for choosing python2 may be flawed, so please let me know if I have over-looked something.
One goal I had for this project was for it to ājust workā without needing to install/configure anything - so basically the decision came down to the fact that, to the best of my knowledge, python2 is installed by default on Linux & macOS, where as python3 is not installed by default on any major platform that Iām aware of.
1 Like
Well Done bro , Iāve made my own botnet long time ago and after reading your source code i think you really made it well .
it would be fun to work with you bro just tell me if u need any help .
2 Likes
Well to my knowledge itās installed on all major distros. Guess the exception is RHEL/CentOS and a lot of servers run that. So you have definitely made the right decision. Great work!
1 Like
reminds me of the early 00ās when ryan1918 was around, we had pretty much huge chunks of āplug n playā type code that noobs were just slapping together and running. (he was arrested btw, and the scene moved on)
I think a project like this should help move security forward, it may not be the āpcā way of doing it, but as we all know the best way to get something fixed is to break it and show people itās broken.
i like it. (but i dont like your haircut lol)
2 Likes
What do you all think is the best botnet available at the moment? would you consider this one?
What are some of the harder botnets to detect ?
3 Likes