id: malwared-byob

info:
  name: Malwared (Build Your Own Botnet) - Detect
  author: pdteam
  severity: info
  description: |
    Detects the presence of the Malwared - Build Your Own Botnet tool on the target system.
  reference:
    - https://github.com/malwaredllc/byob
  metadata:
    shodan-query: http.favicon.hash:487145192
    fofa-query: icon_hash="487145192"
  tags: panel,malware,byob,botnet,oss,detect,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: word
        words:
          - "Build Your Own Botnet"
          - "Post-Exploitation Framework"
          - "malwaredllc/byob"
# digest: 4a0a00473045022100aedd83f70173f03c54fe9d722f053c464855c390860b27ec015ccc9f9d474fed022061f618b43ea4ab7c337083c76e164961caf33154d0edf62a31e21e8dd04412dd:922c64590222798bb761d5b6d8e72950