forkyyy/nodejs_cnc

NodeJS SSH2 Command and Control server to launch DDoS attacks using API

Coded by forky (tg: @yfork)

Installation:

curl -sL https://deb.nodesource.com/setup_16.x | sudo bash -
sudo apt -y install nodejs
npm i ssh2 axios

Setup:

Update servers.json to your methods/API servers
Update users.json to your username/passwords and concurrents/maxboot
Update line 21 to change the botnet name
Update line 22 to change the botnet port

Firewall:

Protect your CNC by creating a firewall if it's accessible to the public

Use this iptables ratelimit in combination with an OVH/Path server to prevent most handshake DDoS attacks. Don't forget to substitute 2222 with your CNC port

iptables -A INPUT -p tcp --dport 2222 -m connlimit --connlimit-above 1 --connlimit-mask 32 -j REJECT --reject-with tcp-reset
iptables -A INPUT -p tcp --dport 2222 -m recent --set --name ratelimit
iptables -A INPUT -p tcp --dport 2222 -m recent --update --seconds 1 --hitcount 10 --rttl --name ratelimit -j DROP