Necromancer

Botnet made for educational purposes

Prerequisites • Getting started • Configuration
Commands • About • Credit • Roadmap

Prerequisites:

• Node.js for the runtime environment.
• Babel for compiling to ES5.
• pkg for compiling the client to an executable.
• create-nodew-exe for making the executable silent.

---

Getting started:

git clone https://github.com/brplcc/Necromancer.git
cd Necromancer
npm install

To build the executable:

npm run build

To make the Windows executable run silently in the background:

create-nodew-exe <src> <dst>

---

Configuration:

Use example.env as reference and make sure to add the dotenv file at:

• config/.env

---

Commands:

Here is a list of some commands:

Command	Functionality	Usage
exec	Executes shell commands remotely	exec (command)
clear	Clears the terminal	clear
instances	Limits number of machines running a command	instances (number)
logging	Log output to text files	logging (boolean)
select	Select one bot to control	select
silent	Silent output coming from bots	silent (boolean)
slowloris	Slowloris DDOS attack	slowloris (ip) (port) (duration) (sockets)
yank	Steal a file from a victim's machine	yank (file name)

---

About:

I started this project in hopes of improving my TCP networking skills and because I was interested in the subject. DISCLAIMER: I am not liable for any perceived damages or harm that may result from the improper use of this software; it was only created for educational purposes. Merely a proof of concept.

This repository contains both the C&C server and the client/malware.

Credit:

Special thanks to Looseman and Scrippy for helping me with testing and debugging.

The project also had help using:

• A modified version of yosif111's Slowloris implementation.
• creationix's TCP based chat server as a starting template for the server.

---

Roadmap:

• Add an instances option that limits how many machines will run a command.
• Add DDOS attack feature (any kind).
• Download files from a victim's computer.
• Upload files to a victim's computer.