IRC Zombie Network principle

Start working on the IRC botnet this week, first to understand its principles and processes.

(1) Infection: Zombie hosts download bot.py and attack programs from the Hanging Horse website

(2) Registration: Bot.py automatically runs on the zombie host to connect to the server

(3) View bot list: The controller connects to the server to see if those machines have been infected.

(4) Send Attack command: The controller sends a JSON-formatted attack command through the server to the zombie host

(5) Migrating server: To prevent server 1 from being compromised, the entire botnet is paralyzed

(6) View attack Effect: Target machine attack effect is stored in the database, the controller can directly access the database

Note: The Controller and the zombie host need to be added to the same server's channel.

IRC Zombie Network principle