Betabot 1.8.0.11 full panel function+ Builde
Betabot 1.8.0.11
===================================================================
Bot
===================================================================
[x] 1. BTC Miner proactive defense mode added. You can now set a new proactive option that only blocks BTC miners. In addition, the BTC miner detection for the botkiller/pro. defense is now more accurate (#1)
[x] 2. Bot now reports whether or not a samsung/apple phone/device (galaxy, iphone, ipad, etc) was ever connected to the PC.
[x] 3. Formgrabber/DNS hooks now more compatible if existing software is hooking relevant functions. Bot will hook the callback of an already installed hook, if necessary
[x] 4. Formgrabber can now handle filters by content. Instead of specifying URLs to grab from, you can alternatively have the bot search for specific content of a POST request and upload if found (eg: *&password=*)
[x] 5. POP3 grabber now can intercept logins over SSL-protected connections around 40%+ of the time. Outlook mail client x86 supported. (#2)
[x] 6. Live login grabber (pop3/ftp) now uploads the domain the captured login was associated with instead of the IP address of the server. If the domain is unable to be determined, the IP will be sent instead. (#2)
[x] 7. "Ignore child processes of bot process" option added to botkiller
[x] 8. HIPS bypass updated for:
* Norton AV/IS (HIPS)
* ESET products (HIPS)
* Microsoft Security Essentials - Fixed HIPS issues
* McAfee av killer fixed. Several other McAfee products are now detected and disabled
* Malwarebytes Pro
[x] 9. Download task / DLL load option is now fixed. Additional options added to run a CPL file, and an option to use Rundll32.exe instead of zombifying a trusted process for the downloaded DLL
[x] 10. Extra UAC bypass method implemented. It's not undiscovered, but it's relatively unused and viable for Windows 7+. Only used when bot is injected into Windows processes.
[x] 11. Disables core components of older Betabot versions (such as persistence, botkill (sometimes) and hook restoration). This functionality can be turned on/off.
Panel
===================================================================
[x] 1. You can now view what bots completed a specific task, and also specific error/success information (if available) (#3)
[x] 2. "Quick info" expandable area added for each bot entry on the main page. You can now see slightly more info on each bot by expanding it
[/] 3. Added more statistics and some graphs regarding dead bots to the statistics page
[x] 4. Individual grabbed login entries can now be deleted
[x] 5. Added more task filter options:
* Apply task only if bot is currently marked as dirty
* Do not apply task to any bots marked as a favorite
* Apply task only on bots older than 24 hours
* Apply task only on bots older than 6 hours
[x] 6. Added 'gate filters' to security settings. You can now block bot communications by country
[x] 7. Updated geoip CSV included in panel files
[x] 8. Changed look of parts of the panel
[x] 9. Added more log options for event monitor
[x] 10. Added a few options to panel settings to help optimize / speed up page loading
[x] 11. Added a new range of options in panel settings for changing minor aspects of bot functionality
[x] 12. gate_err.txt gate debug output (logs request failures) can now be toggled on/off
[/] 13. "View bot information" page added. In addition to all the other extended information (including some new attributes), you can configure the bot to upload the system process list, autostart entries from most commonly used autostart registry locations and the installed software list. These additions will give you a much greater ability to guage the usefulness of individual machines. As time goes on, more information can be collected and uploaded if useful enough
[x] 14. Panel alerts/notices feature has more options. Users can create notices in the red alert color and also create notices that are displayed on the tasks / statistics page for greater exposure. Up to 3 notices are now displayed so responses can be viewed, and the user will be notified if more than 3 notices exist.
Fixes/Tweaks
===================================================================
[x] 1. Update functionality now slightly more reliable
[x] 2. Improved panel main bot list load time
[x] 3. Formgrab filters page now enforces filter limit. Although the bot has always refused to load a list of filters greater than 1024, now the panel actually prevents that many from ever being added
[x] 4. Fixed alignment issues on statistics page with large bot counts, as well as issue with current group display name
[x] 5. Bots marked as 'deleted' are now cleared when 'Delete dead bots' is clicked in panel settings
[x] 6. Minor changes to page numbering and the number of grabbed forms/logins displayed at one time
[x] 7. Misc tweaks made to AV killer
[x] 8. Bot now properly recognizes Windows 8.1 (as W8 on panel). Previously forgot to do this
[x] 9. Data for UDP ddos is now more randomized
[x] 10. C2 server requests optimized to consume slightly less bandwidth when bot registers with server on reboot
[x] 11. Fixed bug in formgrabber where URL filters were case-sensitive, resulting in some missed form captures if actual URL was a different case than the filter
[x] 12. Fixed a few bugs in botkiller and made some additional enhancements
[x] 13. Fixed injection issue related to low integrity processes (such as IE9+) that was causing seemingly random crashes from time to time
[x] 14. Fixed issue with memory cache support on panel where two different panels served by the same web daemon would use the same memory cache variable, thus producing very crazy results
[x] 15. Fixed encoding issue with database queries causing some characters to show up oddly
[x] 16. Fixed a bug with the login grabber sometimes (albeit rarely) mismatching credentials from different sessions
[x] 17. Fixed installation issue regarding improper DACL usage
[x] 18. Fixed issue where two updates at the same time could cause bot to corrupt installation and not come back
[x] 19. Fixed some improper uses of signed int by panel on 32-bit servers
[x] 20. Fixed by causing IP filters for tasks to not work
[x] 21. Fixed issue where log options could be unset even if user account has no privileges to view/configure logs
[x] 22. Significantly improved load time of grabbed forms/logins page
[x] 23. Made changes to reduce "duplicate bot" entries
[x] 24. Botkiller now disables unsigned BHOs for IE if option is selected. Previously was broken
[x] 25. Fixed crash issue on Windows 8 x64
Notes
===================================================================
#1: A seperate option for Cryptocurrency miner proactive defense was added because the "General proactive defense" is still too effective to run successfully on a net that you download other tools to. We recommend you keep "General proactive defense" OFF unless you know what you are doing
#2: The live login grabber has undergone some relatively decent changes. First, some ssl pop3 sessions, and to a more limited degree, ftp as well, are able to be inspected. SSL POP3 grabber does not grab ALL email logins over SSL as each mail client has their own ways of handling cryptography. However Outlook and some others are supported which in turn has drastically boosted the number of relevant logins able to be captured. Valuable logins such as Hotmail/Live and GMail are now more prevelant. Lastly, if the bot is able to determine what domain was used to contact the server, it will be sent instead of the IP address.
#3: Not all tasks report more detailed information. Currently only download/update/botkill tasks are informative
#4. AVKill development has stopped for the time being and some methods have been removed. AVKill will not be nearly as effective for this reason.
requirements
================================================== ===============
1. The latest version IonCube Loader
** On all panels is binding domain
2. PHP 5.4 + MySQL
Want buy builder
Contact us:
https://www.sendspace.com/file/mmtehf
|