Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/rek7/ddoor
DDoor - cross platform backdoor using dns txt records
https://github.com/rek7/ddoor
Last synced: 3 months ago
JSON representation
DDoor - cross platform backdoor using dns txt records
- Host: GitHub
- URL: https://github.com/rek7/ddoor
- Owner: rek7
- License: mit
- Created: 2021-09-27T15:20:08.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2021-09-27T15:30:27.000Z (about 3 years ago)
- Last Synced: 2024-04-12T18:14:38.471Z (7 months ago)
- Language: C++
- Homepage:
- Size: 73.2 KB
- Stars: 27
- Watchers: 4
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ddoor
cross platform backdoor using dns txt records
## What is ddor?
ddor is a cross platform light weight backdoor that uses txt records to execute commands on infected machines.
## Features
+ Allows a single txt record to have seperate commands for both linux and windows machines
+ List of around 10 public DNS servers that it randomly chooses from
+ Unpredictable call back times
+ Encrypts txt record using xor with custom password
+ Supports DNS over HTTPS (Shoutout to Keith @keharv for adding this!)
#### Linux Features:
+ Anti-Debugging, if ptrace is detected as being attached to the process it will exit.
+ Process Name/Thread names are cloaked, a fake name overwrites all of the system arguments and file name to make it seem like a legitimate program.
+ Automatically Daemonizes
+ Tries to set GUID/UID to 0 (root)
#### Windows Features:
+ Hides Console Window
+ Stub Size of around 700kb
## Installation
To install the dependencies needed for the python generation script run.
```bash
pip3 install -r requirements.txt
```
Make sure to edit config.h and replace the provided domain with yours, you can change the fake name as well as the password.
#### To create a Linux binary:
Run the compile.sh script, this will create a file called binary in the bin folder.
#### To Create a Windows Binary:
This project was built using VS 2019, if you open the sln file using VS2019 select the release build and build it.
## Usage
Run payload_manager.py with python3 to create a hex encoded payload, then update or create a txt record for your domain, make sure that the **TTL is set to 300 seconds!!!**
#### Payload Manager Usage:
```bash
$ ./payload_manager.py -h
@@@@@@@ @@@@@@@ @@@@@@ @@@@@@ @@@@@@@
@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@@@@@
@@! @@@ @@! @@@ @@! @@@ @@! @@@ @@! @@@
!@! @!@ !@! @!@ !@! @!@ !@! @!@ !@! @!@
@!@ !@! @!@ !@! @!@ !@! @!@ !@! @!@!!@!
!@! !!! !@! !!! !@! !!! !@! !!! !!@!@!
!!: !!! !!: !!! !!: !!! !!: !!! !!: :!!
:!: !:! :!: !:! :!: !:! :!: !:! :!: !:!
:::: :: :::: :: ::::: :: ::::: :: :: :::
:: : : :: : : : : : : : : : : :
usage: payload_manager.py [-h] [-l LINUX_CMD] [-w WINDOWS_CMD]
[-d DOMAIN_SEARCH]
ddoor, crossplatform dns backdoor
optional arguments:
-h, --help show this help message and exit
-l LINUX_CMD Linux Command
-w WINDOWS_CMD Windows Command
-d DOMAIN_SEARCH Domain to Check Commands On
```