imzoloft / gonetmaster

Simple C2 for ransomware

Gonetmaster

Command And Control For Ransomware

---

---

Introduction

• Gonetmaster is a command and control for ransomware.
• Includes logger, limiter and much more.
• Easy to customize.

---

Flow

Basically, your ransomware will generate a uuid v1 on client side and make a post request to the api endpoint: /users. After that, an key to encrypt the files will be generated and store in the database. The key will be received if the insert was sucessful.

The bot master has the possibility to see all the victims at /users via a get request with an API token.

The API token can be insert in the database this way:

INSERT INTO account (key) VALUES ('fdcb0a7c658c0835ab597898462e8f64ce6d87c914217e2a5ce7910f3408699d');

The key is a basic uuid v4 turned into base 64 hashed with sha256.

An example of the key can be found in database/database.go inside the function createTableAccount.

The get request to this endpoint can be done using curl:

curl --location '127.0.0.1:3000/users' \
--header 'X-API-KEY: API_KEY'

API_KEY is basically the string before hashing.

---

Warning

• This project was made for educational purposes only! I take no responsibility for anything you do with this program.
• If you have any suggestions, problems, open a problem (if it is an error, you must be sure to look if you can solve it with Google!)

Support me

• Thanks for looking at this repository, if you like to press the ⭐ button!
• Made by imzoloft.

Informations