This is dedicated to all the hackers and the crackers
I see in binary, I speak source code
Step on my toes, I'll post a million jpegs of you in a fag pose
In your digital stance, getting firewalled ho
Cause I'm riding the net in my six-fold
I was a dick with my 56
Now with my cable, I'm able to get that stable
On the out, my name is Ace and I'm a Leo
On the digital highway, my name is Neo and I'm a Nero
In a flash, I'll screw you on burning dreamcast
You need some ISO? Let me through my hard drive rifle
Our exchange you could never stifle
In a digital hug, you just caught the love bug
I bootlegged your CD, I caused a fight between Un and Jay-Z
Your CG, it's all gonna be free
Whether we take it by force or we take it nicely
You feel that rattle in your bones?
When I tell you we just packed out Jones
And NASDAQ leaves you flat on your back
Cause I am he who loves to hack and crack
This is dedicated to the hackers and the crackers
Cereal cards, source codes, ISO, RAN, SIP, SIS
This is dedicated to the hackers and the crackers
Welcome to Binary Revolution Radio
This is a very special episode with no episode number
I'm your host, Verbal
And with me is Savant
I'm sure you're all familiar with him
He's done a few shows before
Hello
Yeah, are you sticking me up? Okay
Alright, today we're actually going to do
A very technical, in-depth episode
On the current state of botnets
And we'll also go into a little bit
About looking at some of the next-gen botnet technologies
That we're starting to see
And maybe what we will be seeing in a couple of years
So, so botnets
That's like, that's where the Transformers hang out, right?
Exactly
Okay
So, before we get started
We have a little housekeeping to do
I have a couple of things
And I think Savant had a couple of things
Yeah
So, what I want to mention first of all
Is that, just give an update
On the mentorship program
The last time I was on the show
I had said that it was going great
And it's still going great
But the thing is
We do need more mentors
I get about
I still get about one email
At least a week
Asking about the mentorship program
And mostly it's people who want to be mentees
And the list of people
Who are requesting to be mentees
Are slowly climbing
So, if you have any skill at all
In anything
And have the time
And, you know, that's the important part
Make sure you have the time to do this
Just send me an email
And tell me what you're willing to mentor people in
And I will hook you up with someone
As soon as I can
And also
Right now we are working on a webpage
To kind of facilitate things a little bit
With the mentorship program
It will have some automated submissions for requests
You know, so I don't have to personally
Look through every email
And, you know, fucking
You know, do all that shit myself
And also there's going to be
Some tools like a wiki page
And, you know, just a way to
Browse
Like the number of people
Who are involved in this
And to see, you know
What kind of expertise are out there
That maybe, you know
You didn't know
You wanted to learn something
Or thought that no one knew it
That you can, you know
Ask us about
So that's going to be coming along
We're working on that now
The second thing I had to say
Is actually
Right now, you know
Within the DDP
We've been talking about
Doing a lot of projects
I mean, we've always
Have ideas and things in the pipeline
Just not, you know
Time is always against us
So I am actually asking
For people who are listening
And people on the forums
I mean, whoever
To see whether there's an interest
In people participating
In bin rev projects
Mainly for coding
We need some web designers
But, you know
I'm not going to go into the details
Of each project right now
But if you have some free time
And you know how to code at all
You know
Please let me know
And I'll kind of, you know
Keep your file on somewhere
And when we need you
Which will be very soon
We'll call on you
Some of the areas
We're looking for
Are web dev people
Web designers
And people coding
And I mean
Coding in anything really
Just like C, Java
Or even C sharp
And people to write
Some scripts for stuff
We have
You know, whatever
So just let me know
And you can email me directly
At verbal
At bin rev dot com
Or you can just email
You know
The general radio feedback
Email feedback
At bin rev dot com
And just let us know there
So, Vaughn
Do you have anything
You want to add?
Yeah
Okay
So recently we had
In Southern California here
A little
Xbox mod party
Or at least that was the plan
What it ended up
Turning into
Was an impromptu
Bin rev west coast meeting
Where we had a little barbecue
And everybody got together
And we hacked some Xboxes
And had a pretty good time
And so
What I'd like to do
For us west coasters
Out here
Is set up something
A little more formal
Maybe a monthly meeting
Where we all get together
And have a floating location
Where we can get together
And have a trip
One thing we're talking about doing
Is possibly a
Hacking Disneyland trip
So if you're on the west coast
Or willing to make a drive
Or a flight
Give us a shout
And I highly recommend
That people in other regional areas
Set up something similar
To sort of
Break the tedium
Of
Of just a weekly
A monthly meeting
Now not to say
That there's anything wrong
With the meetings
Because there's not
You should go to them
If there isn't one in your area
You should set them up
But I'd like to see something
Where other meetings
Get together
To do a coastal
Or a regional meeting
Where maybe
Once every couple months
We make something out of it
So Disneyland is on the
On the agenda
And if you have any other ideas
We'd like to hear it
You can send us an email
To
Verbal
At
BinRab.com
Or
Savant
At
Feartubes.com
And yeah
Give us your feedback
Let's know how it goes
Yeah like
It started out as a thing
Where you know
Like
I'd come down to
San Diego
For a while
And you know
A couple times
And I found out recently
That Savant was here
So we'd been hanging out
You know
Strom's in LA
So
Whenever I would come down
He would come up
And we just kind of got
Like a little gathering going
And you know
Like people like
Gene Eric
Who recently started
Going on the IRC channel
He's from this area too
So I mean
I'm sure there's a ton
Of people on the west coast
And we just want to
Get something going
Because you know
We're kind of doing that anyway
Just kind of extending
The invitation out
To all BinRabbers out there
Yeah
Florida's
Monotonized
Or
Monopolized
Sorry
I think
Because it's
Monopolized
The awesome people
In BinRab
In terms of getting together
And making it really established
So let's get something going
Alright
So I think that's all
The housekeeping we have
And
In contradiction
To true
BinRab radio style
We are not going to do
An emails
We have too much content
And we didn't want to
Break the show up
Into multiple shows
So we're just going to
Dive right into
The main topic
So
The main topic
As I said before
Are botnets
Now
To my knowledge
There hasn't been
A BinRab radio
On this topic
And you know
It's something
That's becoming
More and more prominent
You know
If you went to
The last DEF CON
Or any of the
Recent cons that happened
That happened
Talks about them
You know
A couple of talks
And they kind of
Basically just gloss over
What they are
And you know
Who uses them
And why
But we're going to
Try to dive in
A little bit
And see if we can't
You know
Expose
The botnet
Phenomena
Open the kimono
What?
Yeah
Open the kimono
I've never heard
That expression before
Okay
Well that's
One I picked up
On the late night
Corporate amateur
Videos
Anyway
Okay
Alright
So
Let's start
With the easy stuff
What is a botnet?
So
A definition
That we kind of
Came up with
Is
By no means
You know
Authorities
But
What we think
A botnet
Is
Is a collection
Of compromised
Computer systems
That are coordinated
And used by a third party
To do something
And you know
We'll get into
That a little bit later
But the point
Is that
It is
The computer systems
In the botnet
Are compromised
And the third party
You know
Is most likely
A malicious party
That wants to do something
You know
Because they're compromising
Boxes to begin with
But
You know
They kind of
End up forming
An overlay network
Over the internet
And they somehow
Coordinate together
And you know
Do something
Stuff that we'll
Talk about later
And
It's also important
To mention
We kind of
Defined them
As compromised
Hosts
But this is
Not necessarily
Always the case
There are a couple
Reasons where
A person might
Want to set up
A legitimate botnet
And they may
Rent one
From a
Bot hosting provider
That you can find
On the internet
Or perhaps
They just want
To run a series
Of bots
In IRC channels
To help
Command and
Maintain things
Like operator
Features
And additional
Features such as
A whole
Hamdog
The IRC
Bot that used
To hang out
In the
Bitrep channel
Would do things
Like convert
URLs into
Tiny URL format
And vice versa
So it's not
Necessarily evil
But 90%
Of the bots
That are in
Circulation
Probably are
And in case
You're wondering
Where I got
Those numbers
I'm referencing
Them directly
Out of my ass
Yeah
That's always
A good place
To put numbers
The Wikipedia
Article actually
References my ass
So I figured
It was moderately
Authoritative
If it's on the
Internet
It must be true
So now that
You kind of
Got a feel
Of what botnet
Is
Obviously there's
A reason for
You know
Having them
Or else you
Just use your
Own freaking
Computer
So why
You know
We want to
Know why
These botnets
Are set up
And why
People are
Going to
Take the time
To compromise
Machines
Or to buy
Them
Actually
You just
Mentioned
That people
Will sell you
Botnets
Is that true?
Yeah
You can go
If you go
Into any
Of the major
IRC channels
That don't
Explicitly
Prohibit them
I believe
Fnet
Has a
Bot
Friendly
Policy
And I
Know that
Gigachat
Dot
Net
Does
If you
Scan the
Topics
Of the
Channels
In there
Often times
You'll see
Advertisements
For companies
That will
Rent out
Bots
And that
You can
Buy them
On a
Monthly
Subscription
Oh okay
I didn't
Know that
Alright
So if
You need
Bots
And you
Don't
Want to
Own any
Boxes
Then I
Guess
You can
Pay for
It
It's worth
Mentioning
That if
You're
Going to
Buy a
Botnet
And you're
Going to
Pay for
It
With money
Don't
Be a
Noob
If you're
Going to
Use it
For malicious
Purposes
Don't
Buy it
With credit
Or something
With your
Name on it
I know that
Goes without
Saying
But I
Don't
Want to
Feel
Responsible
If
Somebody
Gets
Pwned
Because they
Weren't
Paying
Attention
But they
Were
Listening
To the
Show
Just use
Someone else's
Crench
Yeah
Exactly
You're
Golden
They're
Like
Three
Dollars
A piece
Come on
Okay
So
Once you
Get one
What can
You do
With it
You know
Like
Some people
Have them
For
You know
Whatever
Like stealing
Money from
Your grandmother
Or like
Savant said
You know
You're running
Bots on
RSC
Just to
Do whatever
You know
Keep the
Channel
Live
Or do
Whatever
You want
So
Actually
I'm
Going to
Tell Savant
To talk
A little
Bit
About this
Because he
Has some
Experiences
In how
People actually
Use botnets
Okay
So we're
Going to
Go over
A bit
Of the
Malicious
Features
Nobody
Listening to
The radio
Show
Is terribly
Interested
In the
Squeaky
Clean
Functionality
Of a
Botnet
So
One of
The
Things
That a
Botnet
Is used
For
Is click
Fraud
So
Say
You've
Got a
Website
That's
Not
Doing
Too
Well
And
You
Might
Have
Google
Ads
Or
Some
Per
Click
That
You
Receive
On
Their
Website
It's
Pretty
Basic
Concept
So
I'll
Just
Skip
Over
What
Clicking
Referral
Services
Do
But
What
A
Person
With
A
Botnet
Might
Do
Would
Be
To
Have
10,000
Or
However
Many
Machines
Autonomously
Click
A link
Which
Will
Then
Incrue
You
Know
X
Five
Cents
Per
Click
Or
What
Have
You
And
So
If
You
Have
10,000
Bots
On
10,000
Different
IP
Addresses
That
You
Know
However
Much
Money
Times
Five
Cents
You
Know
It
Adds
Up
Pretty
Quickly
But
A
More
Common
Use
For
Botnets
Would
Be
For
Denial
Of
Service
Attacks
Although
With
A
Botnet
It
Would
Be
Specifically
A
Distributed
Denial
Of
Service
And
If
There
Is
Anyone
Out
There
That
Doesn't
Know
That
Is
Where
A
Series
Of
Computers
Which
Are
Controlled
By
A
Centralized
To
Attack
A
Site
So
They
Are
Listening
For
A
Specific
Command
Where
They
Will
Wake
Up
And
Fire
Up
Their
Elite
UDP
Perl
Program
And
Just
Send
A
Shitload
Of
Traffic
Down
The
Pipes
To
Where
Eventually
There
Is
So
Much
Traffic
That
It
Knocks
The
Host
Off
The
Internet
A
Couple
Years
Back
And
I
Want
To
Say
It
Was
In
96
And
I
Can
Pull
Out
The
Book
If
Well
I'll
Show
Them
How
Tough
I
Am
Har
And
He
Set
Up
A
Botnet
And
Ended
Up
Taking
Down
I
Think
He
Took
Down
Yahoo
He
Took
Down
Ebay
He
Took
Down
Microsoft
A
Series
Of
High
Profile
Big
Money
Sites
With
A
Lot
Of
Legal
Teams
Behind
Each
Of
Them
And
Yeah
He
Did
Get
Arrested
And
As
Far
As
I
Know
He
Is
Still
In
Big
See
What
Else
So
Where
Okay
Let's
Talk
About
This
A
Little
Bit
Even
Though
I
Know
That
All
Of
Our
Listeners
Are
Honest
Upright
Citizens
Who
Would
Never
Dream
Of
Pirating
Software
Open
Source
For
Life
There
Is
Such
A
Thing
Called
Wares
It
Is
Distributed
Despite
Copyright
Law
And
These
Bots
Will
Be
Set
Up
In
Such
Where
They
Will
Host
The
Files
Them
On
The
Servers
And
You
Can
Join
An
IRC
Channel
And
Issue
A
Command
That
Will
Cause
The
Bot
To
Display
A
List
Of
All
The
Files
That
Are
Available
To
It
And
With
Another
Command
It
Will
Queue
Up
And
Then
Send
You
That
File
Which
Makes
Really
Convenient
For
Downloading
Your
And
Your
Software
There
Programs
Out
There
Such
As
One
Called
Bot
Alert
Which
Will
Log
Into
An
IRC
Channel
And
Will
Automatically
Query
Every
Bot
In
The
Channel
For
A
List
Of
Available
Downloads
And
Then
Sort
Of
Act
As
A
Macro
To
Allow
You
To
Point
And
Click
Download
The
Wares
Through
These
Bots
Of
It's
Worth
Mentioning
That
Almost
Every
IRC
Network
I've
Ever
Seen
Will
Ban
You
Immediately
Will
K-line
Your
ISP
If
You
Are
Using
Bottle
So
Don't
Do
It
Including
IRC.BinRev.net
Maybe
If I
Find
It
And
Get
Around
To
It
Yeah
So
If
You're
Pirating
Softwares
On
BinRev
And
Verbal
Board
You
Might
Get
Your
Ass
Kick
Actually
So
I
Was
From
My
Experiences
For
Wares
Sites
Like
You
Talked
About
What
Are
You
Drinking
You
Have
This
Huge
Bottle
And
This
Is
From
Rock
Bottom
Brewery
Here
In
San
Diego
It
Is
A
Growler
Of
Red
Beer
And
It
Is
64
Fluid
Ounces
Of
Yumminess
Support
Your
Local
Brewery
Support
Your
Local
Brewery
Anyway
So
From
What
I've
Seen
People
Who
Kind
Of
Want
To
Set
Up
Wares
Networks
Either
On
IRC
Or
From
TP
Sites
They
Own
Boxes
Manually
Now
I
Don't
Know
If
That's
Just
Because
You
Know
They
Don't
Have
Access
To
A
Botnet
Or
They
Just
Not
Pros
And
Cons
To
Owning
Boxes
With
A
Botnet
Via
You
Know
Manually
Maybe
Like
You
Only
You
Don't
Usually
Get
Root
With
A
Botnet
Or
Whatever
You
Know
That
Would
Kind
Of
Make
People
Who
Are
Setting
Up
Wares
Networks
On
You
Know
To
Host
Their
Wares
On
FTP
Sites
Kind
Of
Attract
Them
More
To
Manual
Owning
Or
Manual
Rooting
Rather
Than
Using
A
Botnet
Well
I
Think
What
We're
Seeing
With
Wares
In
Regards
To
Bots
In
The
Transition
Between
Manually
Owning
A
Box
Versus
Automated
Box
Owning
Is
That
Nowadays
It's
So
Easy
To
Script
And
Automate
An
Attack
That
Is
Not
Necessarily
To
Have
Any
Large
Level
Of
Skill
And
So
A
Lot
Of
People
That
You're
Seeing
That
Are
Trafficking
Wares
The
Ones
That
Aren't
Hardcore
Into
The
Scene
Running
With
Razor
And
The
Other
Groups
You
Might
See
In
That
Little
Mockumentary
TV
Show
Called
The
Scene
They
Tend
Not
To
Be
That
Talented
And
So
They
Will
Prefer
The
Automated
Attack
Method
And
With
The
Proliferation
Of
PHP
Exploits
And
Things
You
Don't
Need
Root
To
Upload
Files
Or
To
Host
Them
In
Fact
You
Don't
Need
Any
Special
Privileges
To
Run
An
IRC
Bot
And
Since
The
IRC
Port
Is
So
High
That
You
Can
Open
It
Up
On
The
System
Without
Actually
Having
Root
Privileges
So
Provided
The
Firewall
Doesn't
Block
It
Explicitly
That's
A
Really
Handy
Way
To
Get
In
There
Upload
A
File
Publish
A
Link
Have
The
Bot
Net
Log
Into
A
Specific
Channel
And
You're
Up
And
Ready
To
Go
All
Right
So
What
Other
Things
Do
People
Use
It
For
Because
I
Know
There
Are
Some
Other
Uses
Like
Shell
Bots
And
Things
Like
That
Sure
So
What
A
Shell
Bot
Is
Keeping
In
Line
With
The
Tradition
Of
How
Command
And
Control
Bot
Works
Rather
Than
Offer
Files
Or
Do
DDoS
Attacks
It
Simply
Does
A
Pass
Through
And
Allows
You
To
Run
Commands
On
The
System
So
In
You
Can
Send
Commands
To
It
As
If
You
Were
Sitting
Right
In
Front
Of
The
Box
And
It
Will
Respond
To
You
Through
IRC
Or
Through
The
Command
And
Control
Network
In
Instant
Message
So
You
Can
In
Theory
Cause
A
Lot
Of
Boxes
To
RM
Minus
RF
Flash
Or
Format
Themselves
Or
Who
Knows
Download
The
Latest
Britney
Spears
MP3
And
Span
People
Through
Asterisk
Or
Something
So
You
Can
Have
1,000
Copies
Of
The
MP3
Yeah
See
In
Case
You're
Ever
Wondering
How
Britney
Spears
Still
Has
A
Career
That's
Why
So
Stop
It
So
She'll
Go
Away
Anyway
Actually
At my
Hotel
This
Morning
I
So
I
Get
Up
Around
Noon
And
I
Fucking
Walk
Out
The
Door
And
I
Pick
Up
The
Newspaper
And
On
The
Front
Page
It
Says
Britney
Spears
Is
And
What
You
Know
Never
Mind
I'm
Just
Wondering
Why
She's
Still
On
The
Front
Page
That's
Front
Page
Goodness
So
We're
Back
From
Spectacle
Difficulties
We
Had
A
Caller
Call
In
Nobody
Realized
That
This
Was
A
Call
In
Radio
Show
So
Anyway
Back
To
The
Topic
At
Hand
We
Covered
A
Bunch
Of
Ways
That
Things
You
Can
Do
With
The
Bot
Net
So
In
Order
To
Figure
Out
Why
They
Exist
And
All
That
We're
Going
To
Talk
A
Little
Bit
About
Who
Uses
Them
So
Obviously
When
You're
Talking
About
All
These
Click
Fraud
DOS
Attacks
They're
Probably
People
With
Malicious
Intent
Maybe
Extortion
Or
Just
To
Get
Money
From
Redirects
Or
Whatever
But
I
Just
Want
To
Ask
Do
You
Know
What
Specifically
What
Groups
Of
People
Because
There
Are
Several
Classes
Of
These
Super
Villains
For
Example
It
Could
Just
Be
Bored
Kids
Sitting
At
Home
Or
The
Russian
Mob
Or
Whatever
Do
You
Have
Any
Information
That
You're
Allowed
To
Divulge
About
That
Sure
I
Won't
Get
Into
Any
Specifics
But
Yeah
There
Are
Several
Different
Classes
Of
People
Who
Will
Use
Bot
Net
First
And
Foremost
Would
Be
The
Obvious
One
Would
Be
Fishers
Often
Use
Bot
Nets
To
Crap
I
Totally
Derailed
My
Train
Of
Thought
Anyway
So
Fishers
Will
Use
Bot
Nets
Maybe
Through
The
Latest
Internet
Explorer
O
Day
And
Will
Infect
Your
Machine
And
Then
From
That
They
Will
Use
Your
Box
To
Send
Out
Spam
Email
One
Example
Lately
We're
And
That
Was
Recently
Being
Tributed
To
By
Jose
Nazario
At
Arbor
Networks
As
Directly
Related
To
Bot
Nets
And
To
The
Malware
Problem
So
One
Example
Is
These
Guys
Are
Sending
Out
Spamming
Phishing
Emails
For
Penny
Stocks
And
They'll
Be
Some
Random
Crap
Acme
Chemical
Company
Stock
That's
Maybe
Selling
For
30
Cents
A
Share
If
That
And
They
Will
Spam
It
Up
And
That
Will
Generate
Enough
Interest
To
Where
The
Stock's
Price
Will
Start
To
Rise
And
Slowly
But
Surely
It
Will
Gain
More
Momentum
And
Serious
Traders
Will
See
That
There's
A lot
Of
Activity
On
This
Site
That
They
Received
Some
Random
Facts
For
Some
Email
For
Some
Company
And
Then
They'll
Say
Oh
Shit
Acme
Chemical
Company
Is
Going
Up
Buy
We
Want
Some
Of
And
That
Will
Cause
The
Stock's
Price
To
Skyrocket
And
At
The
Last
Minute
The
Stocks
Will
Sell
The
Prices
The
Attackers
Will
Sell
When
It's
Really
High
And
Since
It's
All
Artificial
Inflation
Since
The
Company
Doesn't
Really
Either
Exist
Or
Doesn't
Have
A
Viable
Product
Then
Once
The
Hype
Disappears
Then
The
Stock
Price
Will
Plummet
So
That
Everybody
Who
Bought
At
$50
A
Share
Suddenly
Per
Share
To
These
Attackers
All
Right
Yeah
So
I
Guess
Most
Of
The
Uses
Are
Malicious
But
I
Mean
You
Have
Basically
You
Have
An
Army
At
Your
Disposal
And
It
Depends
On
How
You
Going
To
Use
It
Okay
So
Let's
Move
On
And
Let's
Actually
Talk
About
How
They
Work
And
You
Know
How
You
Can
Build
A
Button
Of
Your
Own
Okay
So
The
First
Thing
Is
Did
You
Hear
That
Giant
Ass
Cricket
Just
Flew
In
Here
All
Right
We
Need
To
Edit
That
Out
Okay
We're
Not
Going
To
Be
Able
To
Have
That
Anyway
Okay
So
Anyway
Um
I
Lost
My
Train
Okay
Yeah
Basically
There
Are
Two
Parts
To
Every
Single
Bot
In
The
Bot
Net
You
Have
A
Part
That
Does
All
The
Networking
That
Talks
To
The
Other
Bots
And
Receives
Commands
And
You
Have
A
Part
That
Deals
With
The
Host
You
Know
Initially
It
Will
Exploit
The
Local
Host
With
Whatever
Zero
Day
You
Have
And
Then
It
Will
Kind
Of
Actually
Do
The
Work
Right
So
If
You
Think
About
On
The
Bot
There
Some
Program
Running
There
And
There
Are
Techniques
To
Hide
It
And
All
That
Stuff
But
We
Won't
Get
Into
That
Right
Now
As
For
The
Whole
Bot
Net
Network
There
Are
Also
Two
Parts
Two
Main
Parts
One
Is
The
Bots
Themselves
That
Actually
Execute
The
Command
And
They
Are
Your
Network
And
The
Other
Part
Is
What
Is
Most
Commonly
Referred
To
As
The
Command
And
Control
So
I
Mean
The
Point
Is
Once
You
Have
These
Bots
That
You
Own
Out
There
And
That
You
Control
You
Have
To
Somehow
Control
Them
Via
Some
Channel
That
Out
Of
Band
Now
Up
Until
Recently
I
Think
If
You
I
Think
Correct
Me
If
I'm
Wrong
But
I
Think
That
Most
People
Have
Been
Using
IRC
To
Deal
With
This
So
What
They
Would
Do
Is
Say
Have
All
Their
Bots
Log
In
To
Some
IRC
Channel
After
It's
Been
Compromised
And
The
Actual
Person
Who
Is
Controlling
The
Botnet
Will
Go
And
Execute
Commands
On
Each
Bot
And
It's
Also
A
Good
Way
To
Keep
Tabs
On
The
Bot
So
You
Can
See
How
Many
Bots
You
Have
And
Stuff
Like
That
So
Those
Are
The
Main
Parts
Now
Yeah
That's
Absolutely
Right
So
The
Other
Thing
You
Want
To
Know
Is
How
Do
They
Connect
With
Each
Other
Most
Of
The
Bot
Nets
Right
Now
Are
Actually
Pretty
Primitive
Technologically
So
The
Way
That
Most
Of
The
Bot
Nets
Know
About
Each
Other
Is
That
They
Just
Have
Some
List
So
If
You
Are
In
The
Command
Control
Or
I
Mean
If
You
Are
In
The
IRC
Channel
Then
You
Know
Who
Everyone
Else
Is
And
That's
One
Or
I
May
Not
Static
Keep
A
List
Of
All
The
Bots
That
Are
In
The
Network
And
If
Some
New
Box
Gets
Owned
Or
Someone
New
Bot
Joins
Then
They'll
Just
All
Add
That
New
Bot
To
The
List
So
That's
How
They
Keep
Everything
Yeah
It's
Worth
Mentioning
That
Most
Of
The
Time
The
IRC
Command
Control
Servers
Are
Set
Up
That
Way
The
Channel
That
They
Are
Collaborating
In
Will
Tend
To
Be
Password
Protected
And
So
It
Is
Assumed
Although
Not
Always
True
That
If
You
Have
The
Password
That
You
Must
Be
A
Member
Of
The
Bot
Net
Of
Course
It
Doesn't
Take
Into
Account
Researchers
Or
Other
Hackers
Who
May
Have
Compromised
A
Single
Host
In
The
Bot
Network
And
Then
Use
That
Information
To
Log
In
Them
To
Monitor
Them
Okay
Yeah
So
Definitely
So
Let's
Go
Back
To
Kind
Of
The
Actual
Bot
For
A
Little
Bit
Now
In
Each
Bot
You
Have
The
Part
That
Owned
The
Box
To
Begin
With
So
Obviously
It
Has
To
Have
Some
Code
To
Exploit
Certain
Things
So
It
Almost
Like
A
Worm
Right
And
Now
The
Question
I
Guess
Is
To
You
Sivan
Is
Whether
The
Actual
Bot
Will
Have
A
Bunch
Of
Exploits
Or
If
Usually
They
Just
Kind
Have
One
That
They
Try
To
Use
And
Try
To
Spread
With
That
Exploit
As
Much
As
Possible
Or
If
They
Kind
Of
More
Intelligent
And
I
Guess
Polymorphic
Like
The
Worms
We've
Been
Seeing
Lately
Generally
Speaking
Most
Of
The
Bots
We've
Seen
Out
There
Have
Been
Pretty
Much
Off
The
Shelf
Modifications
Of
Commercially
Available
And
Traditionally
Non
Malicious
Bots
Such
As
The
Egg
Drop
Bot
Or
Energy
Mech
Bot
But
The
Ones
That
Are
Custom
Written
Will
Have
These
Exploit
Vectors
That
You're
Talking
About
The
Majority
Of
Them
Will
Only
Take
Advantage
Of
One
Vulnerability
For
Example
My
Favorite
Recent
Vulnerability
Is
And
That
Will
Automatically
Install
Itself
The
Majority
Of
Them
To
Answer
Your
Question
Tend
To
Be
One
Trick
Punmies
Although
I'm
Sure
The
Polymorphic
Or
Hydra
Style
Multi-headed
Botnets
Do
Exist
They
Just
Tend
To
Be
Operated
And
Installed
By
People
Who
Maybe
Have
A
Little
Bit
More
Skill
And
Know
Better
Know
How
To
Not
Get
Caught
Essentially
So
That's
The
Actual
Part
That
Does
The
Exploiting
But
So
I
Guess
Once
Okay
So
Let's
Go
Through
The
Life
Cycles
Of
One
Let's
Start
By
When
A
Host
Gets
Infected
Now
When
Let's
Say
You
Obviously
Want
Your
Botnet
To
Grow
So
In
Order
To
Own
More
Boxes
Are
They
Usually
Say
You
Know
The
Person
Who
Originally
Install
Them
Will
Just
Go
Out
There
And
Keep
On
Trying
To
Infect
More
Host
Or
Do
The
Bots
Themselves
Take
The
Responsibility
Of
Trying
To
Own
More
Host
With
That
Actual
Exploit
That
Itself
Was
Owned
With
It's
A
Combination
Of
Both
Although
One
Bot
That
I'm
Seeing
Recently
Is
By
The
Same
Guy
Who
Wrote
The
Santee
Worm
Not
Too
Long
Ago
Which
Utilized
A
PHP
Bolton
Board
Exploit
And
Google
To
Compromise
Sites
So
These
New
Bots
Now
Have
Google
Searching
Capabilities
Which
I
Might
Add
Do
Not
Use
The
Google
API
And
Therefore
Are
Still
Illegal
But
I
Digress
So
Then
These
Bots
Will
Then
Yeah
We'll
Troll
Google
And
Look
For
New
Additions
That
Are
To
Have
Vulnerable
Sites
And
Then
It
Will
Spread
Itself
And
Those
Bots
Will
Exponentially
Start
That
It
Will
Still
Continue
To
Function
Even
Long
After
The
Group
That
Is
Controlling
It
Has
Moved
On
To
Bigger
Better
Things
Or
A
Different
IRC
Network
Or
Maybe
Even
A
Different
Infection
Vector
But
I
Mean
So
Once
They
Do
That
And
They
Move
On
And
Like
Let's
Say
For
The
Sake
Of
Argument
They're
Using
An
IRC
Channel
To
Coordinate
These
Are
Basically
Zombies
That
Still
Find
Ghosts
And
Votnets
All
Over
The
Place
We
Talked
Briefly
About
Depenthes
In
A
Previous
Episode
Which
Is
A
Honey
Net
That
Emulates
Vulnerabilities
In
Windows
Systems
And
Catches
All
The
Worms
That
Are
Flying
Around
The
Internet
At
Any
Given
Time
And
You
Can
Still
Find
Hundreds
Of
Bots
That
Just
Log
Into
A
Network
And
Sit
There
Static
Because
Maybe
The
Person
Running
Went
To
College
Or
Got
A
Girlfriend
Or
Got
Arrested
Or
Maybe
Makes
A
Cushy
Living
At
Google
Now
Or
Cisco
Yeah
So
Anyway
So
That's
How
They
Spread
And
Now
With
The
Networking
Protocols
That
They
Use
How
Do
They
Commonly
Talk
To
Each
Other
Do
They
Just
Open
Some
Random
Port
And
Do
They
Have
Their
Own
Specific
Protocols
Or
Do
They
Not
Do
Kind
Of
A
Peer
Man
System
I
Mean
Like
How
Sophisticated
Are
These
They
They're
Sophisticated
In
That
They
Almost
All
Of
Them
Will
Have
Some
Form
Of
Auto
Update
Feature
Where
Hacker
X
Can
Say
Okay
Now
I
Want
You
To
Log
Into
This
Network
And
This
Channel
And
It
Will
Push
The
File
To
One
Location
And
Each
Of
The
Bots
Will
Download
And
Then
They'll
Get
The
Hell
Out
Of
Dodge
And
Tend
To
Be
Written
To
Serve
Only
One
Function
And
So
We're
Not
Seeing
A
Whole
Lot
Of
Terribly
Sophisticated
Ones
But
You
Know
It's
Worth
Mentioning
That
The
Ones
That
We're
Finding
Are
Not
Necessarily
Indicative
Of
The
Newest
Thing
Out
There
They're
Just
Getting
Better
About
Not
Getting
Caught
As
The
Bot
Net
Problem
Continues
To
Rise
In
The
Public
Eye
And
On
The
Net
Do
You
Actually
Kind
Of
Just
Replace
The
Whole
Executable
That's
Running
On
The
Compromised
Host
Actually
Usually
It's
Just
A
Configuration
File
So
They'll
Put
It
On
A
Website
And
Then
Maybe
Once
Every
Ten
Days
Or
At
A
Certain
Command
In
The
Command
And
Control
Server
It
Will
Then
Reach
Out
Grab
A
Web
Page
Or
Maybe
Check
An
Email
Account
Or
Log
Into
An
SEP
Server
And
Just
Download
A
Quick
Text
File
And
Will
Then
Download
Itself
Although
It
Would
Be
Trivial
To
Just
Have
A
Subroutine
In
That
Text
File
That
Would
Then
Tell
Itself
To
Update
The
Binary
So
Both
Are
Certainly
Possible
Although
In
Terms
Of
Trends
It's
Usually
Just
A
Configuration
File
For
The
Command
And
Control
Server
Not
Seeing
Too
Many
Feature
Upgrades
Right
So
I
Mean
Basically
These
Bots
Aren't
Really
Learning
Any
New
Tricks
And
I
Guess
That's
A
Byproduct
Of
How
They're
Used
Mainly
So
If
You
Have
Them
In
The
IRC
Channel
The
First
Thing
Comes
To
Mind
Is
That
It
Doesn't
Really
Seem
To
Scale
Really
Well
So
I
Mean
It's
Like
Okay
You
Can
Have
What
Like
A
Hundred
Bots
In
There
Or
You
Know
A
Thousand
Or
Whatever
But
After
A
While
You
Know
It
I
Mean
If
I
Were
Doing
It
Might
Be
Kind
Of
A
Hassle
To
Update
And
Keep
Track
Of
All
Of
Them
In
One
RC
Channel
Because
You
Have
To
Send
Updates
To
Them
And
You
Have
To
Tell
Each
One
Of
Them
What
To
Do
Now
I
Mean
You
Can
Definitely
Send
A
Message
To
All
Them
Have
Them
Do
Stuff
But
With
The
Scalability
Well
Actually
Before
We
Get
Into
How
It
Scales
Let's
Talk
About
What
You're
Really
Seeing
Out
There
In
Terms
Of
Size
Like
What's
Kind
Of
The
Average
Size
Of
The
Bot
Nets
That
You're
Seeing
You
Know
Some
Of
The
Smaller
Ones
That
People
Just
Do
Like
For
Dossing
People
That
Like
Make
Fun
Of
The
Monarchia
Whatever
Are
Probably
Fairly
Small
Let's
Say
Like
A
Hundred
Notes
Or
Whatever
Yeah
I
Forget
Which
Country
It
Is
But
Recently
And
I
Want
To
Say
It
Was
A
Dutch
Country
Or
Somewhere
In
The
Netherlands
But
They
Discovered
Something
Like
A
Six
Million
Node
Bot
Net
That's
A
Lot
Of
Computers
Six
Fucking
Million
Bots
Out
There
At
The
Command
Of
One
Person
When
You
Have
A
Bot
Net
That
Big
Then
Suddenly
You
Start
To
Gain
Interest
From
A
Lot
Of
God
Net
Is
To
Hijack
A
Casino
An
Online
Gaming
Site
And
Extort
Money
From
Them
Saying
Hey
You
Make
Five
Billion
Dollars
A
Day
But
If
You
Have
Ten
Seconds
Of
Down
Time
It
Cost
You
A
Ferrari
Every
Second
So
You
Better
Give
Us
$500,000
Or
We're
Going
To
Disappear
And
Take
Your
Business
With
Us
And
Generally
These
Casinos
We run
Out
Of
Brazil
Or
Something
And
Their
Policy
Has
Always
Been
To
Shut
Up
And
Pay
Because
It's
So
Much
Cheaper
For
Them
To
Pay
Off
The
Extortionist
Than
It
Is
To
Loot
The
Business
But
Like
You
Were
Saying
The
Piss
Ant
Bot
Nets
Which
I
Like
To
Call
Them
We
Had
A
Visitor
In
The
IRC
Channel
Not
Too
Long
A
Who
Thought
That
He
Would
Flex
His
E
Penis
And
Knock
A
We'll
Get
Into
That
A
Little
Bit
Later
In
Terms
Of
How
We
Found
Out
As
Much
As
We
Know
About
Him
But
Let's
Just
Say
That
If
You're
Going
To
Be
An
Asshole
And
Talk
Smack
To
People
That
Are
Smarter
Than
You
Make
Sure
You
Lock
All
Your
Doors
And
Windows
Exactly
Yeah
We'll
Definitely
Get
Into
That
Later
Now
So
With
That
Bot
Net
The
6
Million
Node
Bot
Net
I
Mean
Not
Even
6
Million
Nodes
Let's
Say
It's
Like
5
000
Sure
Do
You
Think
They
Can
Still
Control
It
From
An
IRC
Channel
Well
One
Thing
That
Again
Joe
Was
Saying
Was
That
We're
Seeing
A
Migration
From
IRC
To
Other
More
Covert
Channels
In
Some
Cases
HTTP
Or
Over
FTP
Or
Basically
Any
Protocol
That
You
Can
And
Receive
Information
From
Hell
Even
UDP
Just
Send
Information
You
Can
Control
A
Bot
Net
From
And
The
Thing
Is
Since
This
Is
Such
A
New
Idea
And
They're
Starting
To
Do
This
Unless
You
Manage
To
Capture
A
Worm
In
The
Wild
Or
You
Have
A
System
That
Got
Owned
And
You're
Looking
For
Your
Files
And
You're
Starting
To
See
Some
Of
This
New
Stuff
It's
So
New
That
We
Have
Too
Many
Statistics
On
Where
They're
Going
Other
Than
It's
Starting
To
Get
Quiet
On
IRC
Well
So
I
Mean
Okay
So
Regardless
Of
The
Transport
Pro
Call
You
Use
They
All
Still
I
Mean
From
What
We've
Talked
About
So
Far
They
Still
All
The
Bots
Still
Log
On
To
One
Place
To
Get
Their
Command
Right
Correct
I
Mean
If
You
Have
Six
Million
Bots
You're
Not
Going
To
Six
Million
Connections
Coming
Into
Some
Place
And
Control
Them
Or
I
Mean
Is
That
What
They're
Doing
Because
That
Seems
To
Be
Pretty
Indicative
Of
Something
Messed
Up
Going
On
If
You
Have
Like
A
Single
Point
Of
Failure
For
Six
Million
Bots
Well
Not
Even
Just
The
Failure
But
It's
Like
From
A
Forensics
Perspective
Where
You
Just
See
Like
Okay
All
These
Machines
Are
Not
Going
To
This
Random
Right
Some
Schmuck
Box
In
Korea
Where
He
Runs
The
Net
Stat
And
Sees
Six
Million
Random
Connections
And
Wonders
Why
He's
Not
Getting
His
Brittany
MP3
Anymore
Right
Well
One
Thing
You'll
See
A lot
Is
Redundant
IRC
Connections
So
The
Better
The
Botnet
Is
Maybe
You'll
Have
Half
Of
Them
Or
All
Of
Them
Will
Log
In
Six
Different
IRC
Network
And
They'll
Be
Logged
In
Simultaneously
So
If
One
Goes
Down
Or
They
Get
Popped
Then
There's
Five
But
So
Say
You've
Got
Ten
Out
Of
Those
Six
Million
Bots
That
Are
Simultaneously
In
Maybe
Five
Different
Channels
All
That
Bot
Would
Then
Have
To
Do
Would
Be
To
Assume
The
Role
Of
A
Virtual
Botnet
Herder
And
Utter
To
The
You know
However
Many
Thousand
Nodes
In
Each
Of
The
Different
Network
The
Command
To
Switch
To
A
Different
Network
So
There's
Some
Level
Of
Redundancy
In
That
Aspect
Where
They
Leave
Themselves
A
Couple
Doors
And
Ways
To
Pick
Up
Shop
If
They
Need
To
Okay
So
I
Mean
Because
I
Was
Asking
Earlier
Whether
The
Bots
Themselves
Talk
To
Each
Other
So
Some
Of
The
More
Sophisticated
Ones
You
Have
Seen
That
Do
That
And
Kind
Of
Spread
Information
Kind
Of
In
A
Peer
To
Peer
Fashion
Yeah
The
Energy
Mech
Bot
Is
Really
Popular
For
That
It
Got
That
Sort
Of
Failsafe
Redumnity
And
Energy
Mech
Open
Source
Software
You
Can
Download
It
Right
Now
If
You
Google
It
If
You
Stand
By
For
One
Second
I
Will
Get
You
A
Link
Energy
Mech
Dot
Net
How
Easy
Is
That
There
Is
An
IRC
Channel
Called
Number
E-Mech
Town
E-Mech
On
Stalling
I
Don't
Know
Which
Network
This
Is
Well
Disclaimer
Venrev
Does
Not
Officially
Support
The
Use
Of
Malicious
Software
Yeah
Don't
Do
And
If
You
Do
Don't
Tell
Them
You
Heard
It
From
Us
Exactly
Don't
Ruin
It
For
The
Rest
Of
This
Is
Why
We
Can't
Have
Nice
Things
Exactly
Listen
To
The
Man
Okay
So
Now
We
Talked
About
How
Kind
Of
They
Work
And
How
They
Spread
And
How
Many
Of
Them
There
Are
And
How
They
Controlled
Let's
Get
Into
Kind
Of
The
After
The
You
Know
The
Process
Like
What
Do
You
Do
After
That
Or
What
Happens
After
Botnet
Is
Deployed
So
Let's
Go
With
The
Most
Interesting
Thing
Let's
Say
You
Have
Some
Douchebag
Who
Is
Dossing
You
Dossing
You
Well
For
The
Sake
Of
Let's
Call
Google
Man
I
Like
That
Name
I
Like
Google
I
Like
Men
Ah
Someone's
Going to
Loop
That
Into
A
Remix
It's
Probably
It's
Going to
Be
Stank
Dog
He's
Going to
Get
Back
At
Me
So
How
What
Kind
Of
Stats
Would
You
Go
To
Take
Over
Someone's
Botnet
So
Let's
Say
I
Have
My
Awesome
Fear
Tubes
30
Node
Botnet
And
I
DDoS
You
And
Stank
And
Ratchet
And
Whoever
Else
Is
On
And
Strom
Of
Course
And
You
Know
Like
How
Would
You
Take
Over
My
Botnet
Well
First
Things
We
Need
To
Know
At
Least
Some
Of
The
Bots
In
The
Node
Or
Their
IP
Addresses
So
Hopefully
You've
Got
Some
Form
Of
Firewall
That
Will
Drop
Fragmented
Packets
Or
You
Can
Run
A
PCAP
And
Just
Get
Some
Of
The
IP
Addresses
Of
The
Bots
That
Are
Attacking
You
From
There
Run
A
Ports
Scan
Find
Out
If
Of
His
30
Node
Fear
Tubes
Botnet
He
Left
A
High
Open
Port
It
Was
Like
Port
4000
And
I
Thought
That
Was
Weird
Port
4000
So
You
Know
Fire
Up
Telnet
Connected
Port
4000
Hit
Enter
Twice
And
Bam
All of
A
Bat
Shell
So
Yeah
Ta-da
Nothing
Over
Here
Nothing
Over
Here
Rabbit
Out
Of
The
Hat
And
So
In
This
Particular
Instance
Once
We
Gained
Access
To
The
Shell
A
Quick
Running
A
Quick
Listing
Of
The
Running
Processes
Revealed
That
There
Were
Connections
Coming
From
An
Odd
File
Running
Out
Of
The
Temporary
Directory
So
You
Go
To
Slash
Temp
Check
Out
The
File
And
All
Of
The
Oh
What's
This
They're
Logging
Into
Googleman.noob.net
Bang
Idiot
And
The
Password
Is
Noob
Tacos
And
The
Admin
Is
You
Know
Bang
At
Bang
Dot
Noob
Dot
Net
Or
Bang
At
Bang
Or
Maybe
Verbal
At
Star
So
Depending
On
How
They've
Got
The
Bot
Herder
Configured
It
Sometimes
It's
Simple
As
Just
Changing
Your
Nick
To
That
Of
The
Person
Commanding
Them
And
All
Of
A
Sudden
You've
Authenticated
Yourself
Or
You've
Got
The
Password
In
Combination
With
The
Nick
Or
If
You're
Really
Good
And
You're
Really
Angry
You
Could
Compromise
The
Host
Or
So
You've
Got
A
Trusted
Host
And
Then
You're
Just
Assumed
Permission
To
Control
The
Bot
Network
So
Actually
Some
Of
The
Malware
Is
Kind
Of
Interesting
That
We've
Been
Catching
Has
The
Passwords
Built
Into
The
Executable
So
If
You're
Just
Running
TCP
Dump
Or
Wire
Shard
You
Can
See
The
Authentication
Going
Across
The
Wire
Even
If
It's
Obfuscated
In
Some
Way
You
Can
Do
A
TCP
Replay
Attack
And
Send
The
Hash
Down
The
Line
So
It
Will
Definitely
Match
With
What
The
Bot
Is
Expecting
And
Then
From
That
Point
You
Can
Usually
Just
Take
Over
Well
I
Mean
Basically
The
Thing
Is
You
Know
Exercise
If
You
Don't
Want
Your
Bot
Net
To
Get
Taken
Over
You
Know
Exercise
The
Same
Security
You
Would
Normally
If
You
Were
Just
Doing
Whatever
From
Your
Box
You
Know
Because
Like
I
Know
That
It
Is
Kind
Of
Different
Because
You
Have
All
These
Machines
Supposedly
The
Bot
Net
Controller
Has
All
These
Machines
That
He
Has
Access
To
And
He
Is
Not
Going
To
Baby
Them
Like
He
Would
His
Box
But
I
Mean
You
Got
To
Keep
That
In
Mind
If
Your
Bots
Are
Vulnerable
And
They
Probably
Are
Because
You
Own
Them
Then
Just
Don't
Do
Anything
Stupid
And
Don't
Get
Traced
And
You
Should
Be
Okay
I
Mean
Jesus
Common
Sense
People
Yeah
So
Actually
Going
Back
To
The
Scalability
Of
Bot
Nets
For
A
Second
Not
So
Much
How
Many
Bots
Are
In
One
Particular
Bot
Net
But
Like
At
This
Moment
How
Many
Bot
Nets
Would
You
Say
Are
Out
There
Right
Now
That
That's
A
Really
Good
Question
And
You
Kind
Of
Caught
Me
Off
Guard
I
I'm
Scrambling
To
Try
And
Find
Statistics
On
It
Would
You
Accept
A
Butt
Load
Would
That
Be
A
Violet
I
Think
That
Will
Work
Let
Ding
All
Right
Three
Thousand
Dollars
And
All
Seriously
Though
We
Can't
Really
Have
Any
Terribly
Accurate
Measure
All
We
Can
Seriously
Measure
Is
How
Many
Reported
Bot
Nets
There
Are
And
It's
Worth
Mentioning
That
The
Average
Lifespan
Of
A
Single
Bot
Network
Tends
To
Last
24
Hours
Or
Less
Which
Believe
It
Or
Not
Usually
So
If
You've
Got
You
Know
10
Thousand
Bots
All
Running
A
DOS
Attack
The
Administrators
Of
The
Majority
Of
Those
Boxes
If
They
Don't
Have
Their
Head
Surgically
Implanted
In
Their
Asses
Are
Going
To
Realize
That
Something
Funny
Is
Going
They
Tend
To
Go
Down
Pretty
Quickly
So
It's
Kind
Of
A
Cop
Out
Answer
But
At
Any
Given
Time
That
Number
Fluctuates
So
Greatly
That
It's
Kind
Of
Hard
To
Get
An
Idea
Yeah
I
Mean
They're
Out
There
And
It's
Not
It's
Not
Enough
That
Your
Other
Computer
Is
A
Cray
Anymore
It's
All
About
The
Numbers
So
You
Know
Whether
You
Want
Your
Botnet
Of
Your
Own
Or
If
You
Want
To
Protect
Against
Them
Just
Have
It
In
Your
Mind
That
They
Exist
You
Know
And
You
Gotta
Be
Aware
Of
That
And
Take
Precautions
So
We
Kind
Of
Went
Through
Most
Of
The
Stuff
That
We
Had
But
Do
You
Have
Anything
Else
About
How
Not
To
Get
Caught
Or
You
Know
Whatever
Or
Found
Out
If
You
Do
Have
A
Botnet
Of
Your
Own
Because
I
Mean
We
Mentioned
Basically
Not
Doing
Anything
Stupid
But
Once
You
Have
A
Botnet
Out
There
And
You
Want
The
Shelf
Life
To
Be
More
Than
24
Hours
What
Kind
of
Measures
Can
You
Take
Okay
Well
Let
Me
Put
On
My
Black
Hat
For
Second
One
Thing
You
Want
To
Avoid
Getting
Noticed
Is
Well
Don't
Do
Any
Dumb
Shit
Thing
That's
Going
To
Get
You
Noticed
If
You're
Running
A
DDoS
Botnet
Then
There's
A
Much
Greater
Chance
That
Someone
Is
Going
To
Say
Hey
What
The
Hell
Why
Are
These
Bots
Spewing
A
Gigabyte
Per
Second
At
Where
Is
All
This
Traffic
So
Throttle
Yourself
Show
A
Little
Self
Restrain
I
Know
That's
Hard
For
Some
Of
You
Out
There
But
Just
Don't
Go
Into
Every
Situation
Guns
Blazing
And
Then
Another
Thing
You
Could
Do
Would
Be
Take
The
Same
Precautions
That
You
Would
If
You
Were
Seriously
Intent
On
Hacking
Into
A
System
Don't
Do
It
From
Your
House
Duh
I
Know
This
Is
Obvious
But
It
Be
Repeating
All
Of
Your
Steps
Every
Step
That
You
Take
To
Set
Up
The
Bot
Net
Tunnel
It
Through
Some
Proxy
Preferably
One
That
You
Know
Or
Trust
Or
Isn't
Run
By
The
Feds
I
Mean
All
It
Takes
Is
One
Mistake
On
Your
Part
For
People
To
Have
A
Place
To
Find
You
So
You
Need
To
Be
Very
Tevious
In
Your
Activities
To
Not
Get
Caught
One
Way
I
The
Majority
Of
The
Organized
Crime
Related
Bot
Nets
Since
They
Are
Distributed
Through
Zero
Day
Exploits
Hosted
In
Web
Pages
Like
The
WMF
Exploits
Which
Automatically
Downloads
A
Bot
From
A
File
Out
And
You
Know
No
Pants
Of
Stan
Or
Something
Then
You
Want
To
Make
Sure
That
You
Are
Hosting
On
A
Compromised
Box
Itself
Or
That
You
Are
Paying
For
Something
In
Your
Own
Name
Preferably
Operated
Out
Of
A
Country
Like
Most
Of
Them
Do
That
Don't
Have
Any
Law
On
The
Books
That
Don't
Know
What
A
Bot
Net
Is
Enough
To
Make
It
Illegal
If
You
Were
Say
You
Know
We're
Going
To
Pick
On
Nigeria
Since
They're
The
Easiest
And
We
Do
It
All
The
Time
And
We
Haven't
Been
Car
Bomb
Yet
So
Say
You're
Running
Out
Nigeria
Just
Pay
Off
The
Right
People
The
Answer
Is
I
Mean
It's
Going
To
Cost
You
It's
Going
To
Cost
You
Time
Or
It's
Going
To
Cost
You
Money
Or
It's
Going
To
Cost
You
Friends
Or
Beer
Or
Something
Sexual
Favor
Sexual
Favor
Exactly
That's
How
I
Got
Verbal
Installed
A
Bot
Net
For
Me
That's
How
You
Said
That's
How
I
Got
Verbal
Installed
Yeah
That's
How
Generally
Don't
Tell
Someone
Don't
Tell
People
Like
If
You're
Hacking
Into
A
Box
Don't
Sign
It
With
Your
Name
Don't
Leave
Significant
You
Know
Characteristics
For
The
Bots
A
Lot
Of
These
Guys
Are
So
Proud
Of
Their
Custom
Pro
Bot
Net
That
They'll
Leave
A
Tag
In
There
That
It says
Ponzered
By
Papa
Joe
Mama
Or
Something
And
Then
You
Google
Papa
Joe
Mama
And
Sure
Shit
There's
His
Myspace
Account
Again
You
Know
With
Pictures
Of
His
Friends
And
His
Family
And
His
Baby
And
His
Kid
Or
Whatever
You
Know
Just
Don't
Be
A
Dumbass
You
Know
If
You
Want
To
Set
Up
A
Botnet
Restrain
Yourself
For
30
Days
And
Just
Read
Up
Everything
You
Can
It's
The
Thing
With
Any
Crime
I
Mean
Obviously
I'm
Not
Condoning
Or
Advocating
Anyway
But
Just
It's
General
Don't
Be
A
Noob
Things
To
Avoid
Getting
Caught
Yeah
It's
Like
Don't
Know
Enough
Just
To
Set
It
Up
Right
And
Get
F'd
In
The
A
But
You
Know
I
Mean
Learn
All
About
It
Seriously
Yeah
Okay
So
We've
Covered
All
The
Aspects
I
Wanted
To
For
You
Know
For
Bot
Nets
But
So
Let's
Kind
Of
Get
Into
A
Little
Bit
Like
Might
Be
Coming
Out
Hypothetically
Or
You
Know
Things
That
We're
Starting
To
See
In
The
News
Actually
This
Had
A
Lot
Of
Coverage
For
Some
Reason
And
You
Mentioned
It
That
Instead
Of
Using
IRC
For
The
Control
Command
And
Control
People
Are
Using
HGP
And
Other
Things
That
Aren't
So
They
Are
Less
Conspicuous
I
Guess
And
You
Know
Something
Like
That
So
Like
And
Also
Savant
Said
Whatever
We're
Talking
About
Is
Just
The
Things
That
We
Have
Been
Seeing
So
If
Someone
Has
Some
Like
Really
New
Technology
Out
There
That
Is
Really
Good
I
Mean
No
We
Might
Not
Even
Know
About
It
Yet
Because
They
Haven't
Been
Caught
Or
They
Just
Haven't
Been
Seen
Because
It
So
Good
So
I
Mean
You
Know
What
Do
You
Think
About
That
What
Other
Type
Of
Command
And
Control
Mechanisms
Can
You
Envision
For
The
Future
Well
I'm
Really
Surprised
That
It
Hasn't
Taken
Over
Like
The
Existing
Kaza
Network
I
Mean
That
Thing
Is
Crawling
With
Malicious
Files
And
You
Know
Viruses
And
Worms
And
Whatever
Else
The
Decentralized
Model
Worked
So
Well
To
Avoid
Being
Caught
By
The
RIAA
Or
The
MPAA
Or
You
Know
Head
Up
Your
SAA
Just
Some
Random
Decentralized
And
I'm
Really
Surprised
That
We're
Not
Seeing
More
Of
That
Although
How
You
Would
Control
It
From
The
Decentralized
System
Or
Authenticate
Would
That
Be
Pretty
Tough
See
That's
The
Thing
There's
No
Need
To
Have
It
Decentralized
Like
The
Command
Control
Because
There
Have
Already
Been
Research
For
Distributed
And
Ad
Hoc
Networks
Especially
Like
These
Overlay
Networks
Like
Some
Implementations
Of
Them
Anonymous
IRC
Network
That
Hasn't
Been
Worked
On
In
A
While
Since
2003
But
There's
Something
Called
IIP
Invisible
Net
I
Used
To
Use
That
And
It's
A
Shame
That
The
Person
Who
Was
The
Lead
Developer
On
It
Stopped
Doing
It
But
There
Are
It's
Possible
There
Are
Technologies
Out
There
That
Allow
You
To
Control
A
Bunch
Of
Host
Or
Talk
To
A
Bunch
Of
Host
In
A
Distributed
Way
And
You
Can
Even
Do
It
Anonymously
And
Covertly
You
Don't
Need
To
Do
This
Centralized
Crap
Where
Everyone
In
Your
Botnet
And
Their
Grandmother
Connect
To
One
Server
And
You
Issues
Command
Out
To
Them
So
I
Think
The
Network
Layer
And
The
Protocol
Side
Can
Have
A
Lot
Of
Enhancements
Because
Right
Now
Just
Doing
The
Dumbest
Thing
Possible
And
You
Can
Just
Do
A
Little
Tiny
Delta
And
Make
It
The
Fuck
Better
And
It
Will
Be
So
Much
Harder
For
People
To
Track
You
And
If
You
Are
At
The
Forefront
Of
This
Development
And
You
Keep
On
Evolving
Your
Bot
Nets
And
Adding
New
Things
To
Make
Them
Smarter
Then
All
The
Other
People
Like
The
Law
Officials
And
The
Superior
Researchers
Are
Not
Going
To
Find
You
Until
Enough
People
Start
Using
That
Shit
Then
You
Just
Move
On
But
The
Network
Side
Is
Definitely
One
Way
To
Do
It
Like
When
We
Talking
About
The
Updates
Right
You
That
You
So
I
Was
Saying
That
There
Are
Bot
Nets
That
Tell
You
Relay
The
Update
Message
To
Each
Other
In
Some
Way
But
You
Can
Do
That
All
The
Time
You
Don't
Need
To
Connect
To
Every
Single
One
At
Any
Point
For
Anything
Just
Connect
To
A
Couple
And
Then
They
Take
Care
Of
The
Rest
But
That
Does
Make
Mean
That
The
Bots
Themselves
The
Software
On
Them
Has
To
Be
More
Intelligent
And
They
Have
To
Keep
Some
Sort
Of
Some
Sort
Of
Networking
Routing
Protocol
That
Is
An
Overlay
For
Everything
Else
Right
So
You
Know
It
Like
You
Can
Do
So
Much
In
That
Area
And
I
Just
Surprised
That
People
Aren't
Doing
That
You
Know
One
Thing
I
Forgot
To
Mention
Earlier
About
One
Thing
That
As
A
Researcher
That
Gives
Me
Trouble
When
Trying
To
Monitor
Bot
Nets
Is
The
Use
Of
The
IRC
Daemons
Unreal
And
Ultimate
Who
Both
Have
Various
Methods
Of
Obfuscating
The
IP
Address
So
If
You
Are
Not
In
Cahoots
With
The
Person
Who
Is
Actually
Running
The
IRC
Server
If
They're
Not
A
Legitimate
Person
But
Maybe
Someone
From
No
Pants
Who
Has
A
Hard
On
Against
The
U.S.
Or
Whatever
And
Wants
To
Run
These
Servers
If
You're
Just
Idly
Hanging
Out
On
The
Channel
Subpoenas
Or
Even
Email
The
Administrator
Of
The
Server
It's
Not
Always
It's
Not
That
Easy
Necessarily
Right
I
Mean
You
Don't
Have
To
Design
A
New
Transport
Protocol
For
This
Shit
Just
Know
A
Little
Bit
More
About
It
And
Maybe
There
Are
Loopholes
That
You
Can
Get
Through
To
Not
Get
Caught
Right
And
The
Other
Thing
That
I
Have
Not
Seen
At
All
Is
The
Use
Of
There
Is
An
Excellent
Book
And
The
Authors
I
Forgot
The
Other
One
But
One
Of
Them
Is
Morty
Young
And
They're
Crypto
Researchers
In
Some
University
In
No
Pants
Stand
And
The
Book
Is
Called
Malicious
Cryptography
And
It
Covers
A
Lot
Of
Things
That
I
Think
A
Lot
Of
People
Will
Find
Useful
So
For
Example
Some
Things
That
They
Can
Do
Is
Have
Crypto
Counters
That
Let's
Say
Some
People
Want
To
See
How
Many
Bots
They
Have
You
Don't
Need
For
All
Of
Them
To
Check
In
Some
Place
Just
Have
Them
Talk
To
Some
Other
Bot
And
They
All
Keep
A
Counter
Right
And
This
Crypto
Counter
What
It
Does
Is
It
Allows
You
To
Basically
Keep
A
Count
Of
Anything
And
If
You
Don't
Have
The
Proper
Key
For
It
Then
It's
Just
Gibberish
To
Anyone
Else
Who
Is
Looking
At
It
And
Something
Else
That
You
Can
Do
Is
To
Actually
Steal
Some
Piece
Of
Information
And
Take
It
Without
Them
Knowing
That
You
Took
That
Information
Or
Copied
It
You
Know
Okay
So
For
Example
Let's
Say
You
Wanted
To
Hack
Some
Box
And
Steal
The
Password
File
Right
So
You
Were
Normally
Without
Crypto
You
Just
Log
In
And
Then
You
It
So
They
Don't
Know
What
File
You
Copied
Where
You're
Storing
It
And
If
They
See
It
They
Don't
Know
What
It
Is
Or
Who
Created
It
Or
What
It
Was
Created
From
You
Know
There
Are
A
Lot
Of
These
Tools
So
If
You
I
Mean
You
Don't
Have
To
Be
A
Cryptologist
To
Use
These
You
Just
Need
To
Get
The
Implementation
And
To
Run
It
And
Incorporated
Into
Your
Botnet
Just
Know
Enough
To
Use
Software
Package
Which
Is
Available
At
Their
Site
I
Mean
Just
Go
Look
For
That
Book
You
Know
That's
Only
One
Of
The
Things
That
You
Can
Do
And
I
Mean
You
Know
You
Don't
Even
Need
To
Use
Like
Next
Gen
Research
Crypto
I
Mean
There's
Already
A
Lot
Of
Crypto
Out
There
That
You
Can
Use
Like
I
I'm
Ensure
You
Know
Most
Of
The
Bots
That
Are
Out
There
Are
Transmitting
Their
Shit
Through
Plain
Text
Right
I
Mean
Use
SSL
TLS
Whatever
You
Know
Just
Kind
Of
Protect
Yourself
Right
And
Okay
So
That's
My
Rant
For
Right
Now
You
Know
One
Thing
That
We
Didn't
Really
Cover
That
I
Think
Maybe
We
Should
Go
Into
Especially
Since
We
Look
Like
We
Have
Another
15
Minutes
Or
So
Is
We
Talk
To
The
Black
Hats
How
To
Not
Get
Caught
So
Maybe
We
Should
Send
Out
Something
To
The
White
Hats
And
The
Systems
Administrators
How
Do
You
Know
That
You
Been
Owned
Or
Where
Do
I
Look
To
See
In
My
System
If
I
Got
A
Botnet
Running
So
Some
Of
The
Things
You
Can
Do
Would
Be
To
As
We
Discuss
Earlier
To
Run
A
PSAUX
Temp
Directory
More
Often
Than
Not
Do
An
LS
Minus
L
A
H
Make
Sure
You
Getting
Those
Invisible
Files
Because
They
Like
To
Name
Directories
Dot
And
To
Anyone
With
The
Most
Careful
Sys
Admin
Or
Someone
With
Experience
You
Might
Glance
Right
Over
It
Who
Is
Your
Apache
User
Running
As
Is
Running
As
Nobody
Or
www
User
Or
Is
Running
As
Apache
Do
A
Find
Slash
Minus
User
Apache
Okay
So
We
Talked
About
Making
Sure
That
The
Apache
User
Shouldn't
Be
Able
To
Access
Files
That
It
Shouldn't
There
Is
No
Reason
That
Apache
Should
Never
Need
To
Access
A
Home
User
A
User's
Home
Directory
If
It's
Not
In
The
Web
Root
Or
If
It's
Not
That
User
Whose
Web
Server
It's
Running
On
Isolate
The
Privileges
Make
Sure
That
If
One
You
Don't
Suspect
Your
Users
Of
Anything
Malicious
But
Even
Still
Don't
Trust
Them
To
Be
Good
People
You
Need
To
Make
Sure
That
Let's
Say
You
Are
Specifically
Selling
Services
To
Someone
Who's
Got
Less
Than
Noble
Intentions
Are
They
Able
To
Access
Parts
Of
The
System
That
They
Shouldn't
Are
They
Able
To
Read
Configuration
Files
That
To
Run
Bot
You
Just
Need
To
Have
A
Command
Line
Access
Which
Apache
Can
Do
Through
PHP
Or
Perl
Or
Through
Any
Number
Of
Web
Application
Vulnerabilities
Just
You
Know
General
Sys
Admin
Goodness
Just
Take
Care
Of
Your
Shit
Take
A
Course
At
A
Night
Class
Somewhere
At
A
Community
College
Hire
The
Kid
At
Work
That
Wears
The
Black
T-shirts
All
The
Time
For
You
Non
Technical
People
Yeah
I
Mean
If
You
Don't
Want
To
Go
Through
All
The
Trouble
Doing
All
That
Shit
Yourself
There
Are
Tons
Of
Security
Tools
Out
There
And
One
That
I
Want
To
Highlight
Is
Bastille
Linux
It
Not
Only
Runs
On
Linux
It
Actually
Runs
On
Most
Unix
Systems
Including
Mac
OS
10
For
All
You
Apple
People
Out
There
But
What
It
Does
Is
It
Basically
Takes
You
Through
A
Firewall
What
Services
Do
You
Want
To
Let
In
Or
Let
Out
Or
Any
Of
That
Stuff
And
It
Is
Like
Do
You
Want
Your
UMass
To
Change
And
It
How
To
Set
The
UMass
For
User
And
All
That
Junk
I
Mean
Just
Run
It
Install
It
Should
Only
Take
You
About
15
Minutes
You
Know
Like
I
Done
It
On
OS
10
And
Linux
On
Gentoo
And
You
Know
Both
Of
Them
Were
Breeze
And
I
Didn't
Have
To
Worry
About
Doing
Any
Of
The
Shit
That
I
Normally
Would
Have
To
Do
So
I
Mean
There
You
That
Is
One
Example
But
There
Are
So
Many
Things
Out
There
That
You
Can
Use
And
You
Know
I
Don't
Want
To
Turn
This
Into
Kind
Of
Like
A
Secure
Your
Box
Rant
Because
I
Know
You
Heard
It
Before
But
Seriously
I
Know
A
Lot
Of
You
Don't
Do
It
You
Know
Just
Get
On
It
And
If
You
Are
Using
Windows
There
Are
Things
You
Can
Do
I
Mean
Using
Your
Computer
As
A
Responsible
Person
And
Not
Just
Fucking
Putting
Your
Box
Out
There
And
Basically
Hang
A
Flag
That
Says
Take
Me
Over
And
Use
To
Spill
Someone's
Money
And
You
Bring
Up
A
Good
Point
You
Talking
About
Windows
Patching
And
Just
Not
Being
A
Noob
That
Fine
And
Good
For
Those
Of
Us
Who
Are
Tech
Savvy
And
Who
Have
An
Active
Interest
In
Security
And
Want To
Make
Sure
That
We're
Exercising
Best
Practices
But
What
About
Grandma
You
Know
Is
Your
Grandma
Still
Running
Windows
95
Is
She
Just
Now
Upgraded
A
Cable
Modem
Because
You
Told
Her
To
Get
With
The
Future
But
She's
Still
Running
An
Operating
System
That's
No
Longer
Being
Supported
By
Microsoft
And
Is
Wide
Open
I
Mean
Those
Are
The
Machines
That
We're
Seeing
That
Are
Parts
Of
These
Five
Million
Node
Bot
Networks
I
Mean
Jesus
Five
Million
Nodes
As
Researchers
We're
Seriously
Outgunned
What
Can
You
Do
If
Grandma
Is
Still
Running
Windows
95
And
She's
Just
Doing
It
To
Check
Her
Email
Maybe
And
Read
The
Latest
Garfield
Comic
Online
Then
I
Don't
Know
Talk
To
Her
About
Linux
Say
Hey
Grandma
Let
Give
You
This
Is
Probably
Just
As
Easy
I
Mean
As
A
Responsible
Computer
User
I
Think
That's
On
You
To
Make
Sure
That
The
Internet
Is
Less
Hostile
Or
That
These
Fishers
And
These
DDoS
Bot
Operators
And
Organized
Criminals
Aren't
Getting
Away
With
It
It's
The
Apathy
And
The
General
Carelessness
That
Makes
This
Problem
As
Rampant
As
It
Is
Today
And
We're
Nowhere
Near
The
End
Of
The
Problem
It's
Not
Just
Going
To
Go
Away
On
Its
Own
As
Long
As
There's
A
Lot
Of
Money
To
Be
Made
And
It's
Easy
As
It
Is
Now
There's
Always
Going
To
Be
A
Return
On
Investment
For
These
Guys
And
There's
Always
Going
To
Be
One
More
Box
To
Root
One
More
Box
To
Make
Into
A
Botnet
And
It
Starts
All
Over
Again
This
Has
Happened
To
Me
On
More
Than
Several
Occasions
Then
Okay
This
Is
What
I
Want
To
Do
The
Next
Time
Someone
Like
If
Security
The
You
Know
The
Topic
Of
Security
Comes
Up
If
Someone
Says
I
Don't
Care
About
My
Computer
I
Don't
Have
Anything
On
It
That
I
Don't
Like
You
Know
That
I
Don't
Want
People
To
See
I
Mean
I
Want
Yeah
Don't
Want
Other
People
To
See
Then
Fucking
Slap
Them
On
The
I
Don't
Want
To
Take
Over
Your
Box
For
Your
Shit
I
Want
To
Take
It
Over
For
Your
Connection
And
Just
Have
A note
In
My
Botnet
To
Do
Some
Other
Junk
And
You
Know
I
Told
So
Many
Other
People
This
And
They
Don't
Seem
To
Care
And
I
Don't
Know
What
The
Deal
Is
But
You
Know
It's
Like
God
Don't
Be
Retarded
Now
One
More
Thing
I
Would
Like
To
Go
Back
To
A
Little
Bit
We
Kind
Of
Got
Off
In
A
Little
Rant
As
We
So
Often
Like
To
Do
We
We're
Prone
To
Do
Yeah
And
It's
About
The
Next
Gen
Botnet
Stuff
So
We're
Talking
About
Before
And
I
Was
Asking
Questions
About
Whether
Bots
Themselves
Get
Updated
And
They
Kind
Of
Change
Right
And
So
I
Was
Saying
They
Usually
Get
Updated
From
A
Config
File
Or
They
Only
Have
One
Vulnerability
And
Stuff
And
I
Think
For
Botnet
Designers
Out
There
You
Can
Take
A
Page
From
The
Worm
People
It's
Like
There
Are
Technologies
Out
There
And
It
Hasn't
Been
Done
Before
So
It's
Not
Like
Some
New
Rocket
Science
Thing
Where
You
Can
Make
Your
Bot
Not
The
Network
Part
But
The
Other
Intruding
Part
More
Intelligent
Where
You
Can
Give
It
More
Than
One
Vulnerability
And
If
You
Know
In
Like
Say
Every
Few
Months
You
Just
Update
The
Entire
Executable
On
That
Bot
And
Just
Run
A
New
Thing
With
Different
Exploits
And
Whatever
So
You
Can
Keep
Updating
It
Because
I
Mean
Like
You
Don't
You
Know
Like
So
I
Was
Saying
You
See
All
These
Ghost
Bots
Running
Around
Joining
RSC
Channels
And
Stuff
Like
If
You
Took
The
Time
Well
You
Didn't
Take
The
Time
But
If
Someone
You
Know
Wrote
Some
Software
To
Own
All
These
Boxes
You
Don't
Want
To
You
Know
Have
To
Go
Through
That
Again
You
Know
For
New
Exploit
It's
Like
You
You've
Owned
It
Just
Fucking
Update
Your
Software
I
Mean
It's
The
Same
Thing
With
Any
Piece
Of
Software
The
Technology
Already
Exists
The
Best
Practices
Are
Out
There
In
Terms
Of
Just
Building
Robust
Redundant
Software
If
Botnet
Building
Is
Your
Thing
And
You've
Got
Nothing
Else
To
Do
Get
A
Girlfriend
But
If
You
Can't
Find
A
Girlfriend
Then
Take
Extra
Steps
There's
Things
Like
Revolving
DNS
Where
I've
Seen
Phishing
Sites
That
Own
DNS
Servers
That
Have
PHP
Front
End
That
They
Flip
The
Switch
And
All
Of
Sudden
It
Just
Reroutes
All
The
Traffic
To
A
Different
New
Box
That
They
Just
Paid
For
You
Can
Come
Up
With
Fail
Safes
And
Remove
The
Single
Point
Of
Failure
And
Go
More
Covert
And
Like
You
Said
Use
Encryption
Is
Criminally
Underused
In
These
Things
And
You
Know
It
With
A
Heavy
Hard
That
I
Even
Admit
This
Because
As
My
Day
Job
I
Am
Security
Researcher
And
I
Do
Get
Paid
To
Sort
Of
Track
These
Guys
Down
And
To
Find
Out
What
We
Can
Learn
About
Them
But
Seeing
The
Ways
That
I
Know
That
We
Catch
Them
I
Can
Say
With
Certain
Most
Of
The
Time
If
You
Just
Take
In
That
Extra
Step
Lock
That
Other
Door
Close
That
Window
Then
Your
Bot
Is
Going
To
Live
A
Lot
Longer
You
Are
Going
To
Go
Unnoticed
A
Lot
Longer
And
You
Are
Going
To
Be
More
Successful
Whatever
Your
Endeavor
Is
You
Probably
Won't
Get
Caught
And
Go
To
Feral
Pound
Me
In
The
Ass
Prison
You
Know
And
It's
Worth
Mentioning
That
If
You
Do
Have
A
Fairly
Successful
Bot
Net
You're
Making
All
Sorts
Of
Cash
Send
Beer
To
Well
Just
Email
Me
And
We'll
Work
Something
Out
Maybe
At
The
Next
Conference
Or
Something
And
Share
Your
Stories
With
Us
Exactly
Yeah
We're
Always
Looking
For
Good
Material
So
I
Think
That
About
Wraps
It
Up
So
Let's
Do
Shouts
Why
Don't
You
Go
First
While
I
Stalled
To
Figure
Some
Out
Okay
Well
I
Just
Want
To
Give
A
Shout
Out
On
The
IRC
Channel
He's
Been
Really
Good
With
Helping
With
Bin
Rev
And
All
That
Stuff
Getting
Involved
Which
I
Urge
Everyone
Else
To
Do
And
Also
Tom
Who
Was
Supposed
To
Be
Doing
The
Show
With
Us
And
He's
Either
Drunk
Asleep
Or
Stoned
Or
Something
Or
High
And
He's
Not
Here
But
Thanks
A lot
Tom
For
All
The
Input
That
You
Gave
Before
The
Show
Yeah
Everyone
In
The
IRC
Channel
Everyone
On
The
Forums
Specific
Shouts
To
Beef
And
To
Black
Ratchet
And
To
Druid
From
Tipping
Point
Other
People
Who
Are
Helping
Me
It's
The
Master's
Project
I'm
Working
On
And
Shit
I
Don't
Know
My
Girlfriend
Her
Gecko
Everyone
Here
In
San
Diego
Jean
And
Yeah
The
Background
Noise
You've
Been
Hearing
That
The
Turping
Is
Courtesy
Of
Savant
Gecko
Yeah
My
Girlfriend's
Gecko
That's
Not
Just
The
People
In
The
Audience
That
Are
Terribly
Bored
Is
It
I
Mean
Maybe
We
Should
Loop
That
Anyway
So
Let's
Go ahead
And
Do
Our
Closing
Music
This
Is
A
Song
That
Just
Came
Out
Recently
It
Is
A
Really
Well
Done
Remix
Of
You
To
Sunday
Bloody
Sunday
Except
This
Guy
Named
RX
Chopped
Up
The
Some
Dialogue
From
President
Bush
And
Actually
Has
Him
Singing
The
Song
Sunday
Bloody
Sunday
Set
To
The
Music
It's
Pretty
Good
So
I
Hope
You
Enjoy
So
As
We
Always
Say
I'll
See
You
Again
Next
Week
Same
Hack
Time
Same
Hack
Channel
There's
A lot
To
Talk
About
This
Next
Song
This
Song
Is
Not
A
Rebel
Song
The
Song
Sunday
Bloody
Sunday
I
Can't
Believe
The
News
Today
I
Can't
Close
My
Eyes
And
Make
It
Go
Away
How
Long
How
Long
Must
We
Sing
This
Song
How
Long
Too
Long
Tonight
We
Can
Be
As
One
Tonight
Broken
Bottles
Under
Children's
Feet
Body
Turn
Across
The
Dead
Am
Steeds
But
I
Won't
Need
The
Battle
Fall
It
Puts
My
Back
Up
Puts
My
Back
Up
Against
The
War
Sunday
Bloody
Sunday
Bloody
Sunday
Bloody
Sunday
Bloody
Sunday
Let's
Roll
And
The
Battle
Has
Just
Begun
This
Many
Lost
And
Tell
Who
Has
One
To
Tracers
Those
Within
Our
Hearts
Mothers
Children
Brothers
Sisters
Born
Heart
Sunday
Bloody
Sunday
Bloody
Sunday
How
Long
How
Long
Must
We
Sing
This
Song
How
Long
Too
Long
Too
Long
Tonight
We
Can
Be
As
One
Tonight
Sunday
Bloody
Sunday
Bloody
Sunday
Let's
Roll
Anyone
Who
Want
More
Details
On
My
Agenda
Can
Find
Them
Online
The
Web
Address
Is
Not
Very
Imagitive
But
It's
Easy
To
Remember
Hard
Wipe
The
Tears
From
Your
Eyes
White
Your
Tears
Away
White
Your
Tears
Away
White
Your
Tears
Away
White
Your
Love
Shot
Eyes
Sunday
Love
Sunday
Love
Sunday
Love
Sunday
Love
Sunday
Let's
Roll
And
It's
Free
Not
A
Mean
One
Fact
Fiction
And
TV
Reality
And
Today
The
Millions
Talk
We
Eat
And
Drink
While
Tomorrow
They
Die
Sunday
Life
Sunday
Life
Sunday
Life
Sunday
Life
Sunday