0x4meliorate/toxnet

Decentralised P2P botnet using toxcore.

Toxnet

Warning: Only use this software according to your current legislation. Misuse of this software can raise legal and ethical issues which I don't support nor can be held responsible for.

Description

Toxnet is a proof-of-concept E2EE P2P C2.
Thanks to xbee and the developers of TokTok this project was simple to create.
The Toxnet code has been commented and is very easy to understand.
This project works by setting up a C2 and having it act as a relay for incoming and outgoing messages.
A better explanation and more features are yet to come! It's getting late, I'll do this tomorrow. 😅

C2 is written in Go and uses go-toxcore-c.
Client is written in C and uses c-toxcore.

Setup

Installation is straight forward on Debian-based Linux distributions:

• sudo apt install libsodium-dev libtoxcore-dev golang -y
• go get github.com/TokTok/go-toxcore-c
• Download qTox
• Place your Tox-ID (from qTox) into net/config.go in the "Admins" array on line 4. View
• Run go run main.go
• Upon starting the C2, this will present a "TOX-ID", add this Tox-ID using qTox.
• Once the server has accepted the incoming friend request and establishes a connection, send "help" as a message to the server.
• This will send instructions on how to use Toxnet. Example

Generate Linux payload: go run main.go -t linux

toxnet's Issues

memory leaks in client.c

checked with valgrind:
LEAK SUMMARY:
==6119== definitely lost: 173 bytes in 4 blocks
==6119== indirectly lost: 0 bytes in 0 blocks
==6119== possibly lost: 5 bytes in 1 blocks
==6119== still reachable: 1,720,496 bytes in 34 blocks
==6119== suppressed: 0 bytes in 0 blocks

Compiling statically causes core dump related to 'getaddrinfo'

/usr/bin/ld: /usr/local/lib/libtoxcore.a(network.c.o): in function `addr_resolve':
network.c:(.text+0x2aa3): warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking