id: malwared-byob

info:
  name: Malwared (Build Your Own Botnet) - Detect
  author: pdteam
  severity: info
  description: |
    Detects the presence of the Malwared - Build Your Own Botnet tool on the target system.
  reference:
    - https://github.com/malwaredllc/byob
  metadata:
    shodan-query: http.favicon.hash:487145192
    fofa-query: icon_hash="487145192"
  tags: panel,malware,byob,botnet,oss,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: word
        words:
          - "Build Your Own Botnet"
          - "Post-Exploitation Framework"
          - "malwaredllc/byob"
# digest: 4b0a00483046022100f0070c276e26e7af0a7456304fe8657090985b934c90b92f80750783766b7ffa022100e98430e8ee190b73ea86a213290264ca69fc3ff25c7c189ee6f431af49795bef:922c64590222798bb761d5b6d8e72950