From f61fab64f8a1b88fd58e3603e301f87efccfa68f Mon Sep 17 00:00:00 2001
From: Adam Muntner <unix23@gmail.com>
Date: Wed, 18 May 2016 13:06:25 -0400
Subject: [PATCH] Create bot_control_panels.fuzz.txt

from @tennc repo
---
 .../backdoors/bot_control_panels.fuzz.txt     | 1668 +++++++++++++++++
 1 file changed, 1668 insertions(+)
 create mode 100644 discovery/predictable-filepaths/backdoors/bot_control_panels.fuzz.txt

diff --git a/discovery/predictable-filepaths/backdoors/bot_control_panels.fuzz.txt b/discovery/predictable-filepaths/backdoors/bot_control_panels.fuzz.txt
new file mode 100644
index 0000000..1996745
--- /dev/null
+++ b/discovery/predictable-filepaths/backdoors/bot_control_panels.fuzz.txt
@@ -0,0 +1,1668 @@
+00284d896df6965cf6b6e99718ddcd99315200ca.file.rights.tpl.php
+00ebbfdc60999b54fdbf35a0699c3551b09a33b9.file.index.tpl.php
+04885805d2c6e064c2b145362c99e4adcc11ce47.file.search.tpl.php
+08ed091025f407cb757b6c832a4b61f6930556a2.file.links.tpl.php
+0.php
+0.res
+1
+100.php
+101.php
+102.php
+103.php
+104.php
+105.php
+106.php
+107.php
+108.php
+109.php
+10.php
+110.php
+111.php
+112.php
+113.php
+114.php
+115.php
+116.php
+117.php
+118.php
+119.php
+11.php
+12010L11014
+120.php
+121.php
+122.php
+1234567890.functions
+123.php
+124.php
+125.php
+126.php
+127.php
+128.php
+129.php
+12AzAONjkCYw
+?12da89=12355930
+12.php
+130.php
+131.php
+132.php
+133.php
+134.php
+135.php
+1367985494
+136.php
+137.php
+138.php
+139.php
+13bb870f32f183d8828dcfe9b199b3c68789155d.file.index.tpl.php
+13.php
+140.php
+141.php
+142.php
+143.php
+144.php
+145.php
+146.php
+147.php
+148.php
+149.php
+14.php
+150828
+150.php
+151.php
+152.php
+153.php
+154.php
+155.php
+156.php
+157.php
+15840555a5a9ed4c7488481ec83740e51465ceb2.file.logs_static.tpl.php
+158.php
+159.php
+15.php
+160.php
+161.php
+162.php
+163.php
+164.php
+165.php
+166.php
+167.php
+168.php
+169.php
+16.php
+1.7.0.exe
+170.php
+171.php
+172.php
+173.php
+174.php
+175.php
+176.php
+177.php
+1782da8d6812f696750e41aaf9e78e68e4f07578.file.ajax.tpl.php
+178.php
+1799.asp
+179.php
+17.php
+180.php
+18110123
+181.php
+182.php
+183.php
+184.php
+185.php
+18688
+186.php
+187.php
+188.php
+189.php
+18.php
+190.php
+191.php
+192.php
+193.php
+194.php
+195.php
+196.php
+197.php
+198.php
+199.php
+19.php
+1.asp?rands=DWLLOXLGLH&acc=vy&str=select%20top%201%20%20
+1.asp?rands=DWLLOXLGLH&acc=vy&str=select%20top%201%20%20 from%20tab_message%20where%20toid%20=%20'198'%20order%20by%20id%20asc
+1.asp?rands=XJOTLVALQF&acc=vy&str=insert%20into%20tab_online%20
+1.asp?rands=XJOTLVALQF&acc=vy&str=insert%20into%20tab_online%20 (mode,clientname,clientip,accessip,onlinetime,lasttime,regcode)%20values%20 ('0','victim','192.168.1.12','145.42.112.19','2011-06-08%2013:45:54',
+1js
+1oginv2.asp?hi2wsdf351&x.’..[xf)..<.3XqHr....)IL{..&y192.168.O.69
+1.php
+1.php?00-50-3b-ab-5d-65(1.1)|172.16.77.141|joe-8a81c76c9df|5.1.2600.Service%20Pack%203||
+200.php
+2011
+20111230.jpg
+2013
+201.php
+202.php
+203.php
+204.php
+2055?meth=gc&tid=2011506&cqe=3878658&inif=qKero9uLh4iCj4eIksvQ1ILS0IfAp6itNvX0dTI19DI19HWyNfU38Crp7St26ClvsiFiYvAqbW229PI18CuorWo29SF0d8=&syun=230
+205.php
+206.php
+207.php
+208.php
+209.php
+20.php
+210.php
+211.php
+212.php
+213.php
+214.php
+215.php
+216.php
+217.php
+218.php
+219.php
+21.php
+220.php
+221.php
+222.php
+223.php
+224.php
+225.php
+226.php
+227.php
+228.php
+229.php
+22.php
+23039842597b4c0eac0e62d3f7912cee20759393.file.os_window.tpl.php
+230.php
+231.php
+232.php
+233.php
+234.php
+235.php
+236.php
+237.php
+238.php
+239.php
+23.php
+240.php
+241.php
+242.php
+243.php
+244.php
+245.php
+246.php
+247.php
+248.php
+249.php
+24.php
+250.php
+251.php
+252.php
+253.php
+254.php
+255.php
+25.php
+26.php
+270fd856530e6f9b4d7f32aee895607a1ac312de.file.unnecessary_window.tpl.php
+27.php
+283123e17c4f87660539a9c276bbcdeb5b928980.file.country.tpl.php
+28-juli-sundsore
+28.php
+29af9cdc
+29.php
+2d
+2f20846ddb9e48422a19ff49b66b4109505963bd.file.edit.tpl.php
+2.php
+3010850A0000F0FD0F00323137443744324536313634333833380044454C4C58540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000007014C61757261000000000000000000000000000000000000000000000000000000000000000000000000
+30.php
+31.php
+32cdad27bdec4a68d8efc9bb835008e6.swf
+32.php
+33.php
+34b72affe39cccfef1ecc090bec0eef4cf02692a.file.formgrabber.tpl.php
+34.php
+35.php
+36.php
+37.php
+38.php
+3961.html
+39c6d6ddf4065f9babedd8c2920f579f348b54f4.file.sniffer.tpl.php
+39ff9ff8c3b603d8eed017df64dd2799.eot
+39.php
+3c3f0e159aa152ed9c6e24a667d4a1e0441155df.file.authorization.tpl.php
+3d
+3.php
+404error.asp
+404.php
+40.php
+41.php
+4213D5182A41F58F3D01D8208B0BE9633A985A4C35C70A97FF61249661F38426DA71D12B40F9A512B6C945CD85462CD565962B6C5CACB1B09F86B1651EB971F3013D14695028FE0BEBD838B9D3C5DE002EA95371E51B0E8CFB7567F6BF
+4213D5182A41F58F3D01D8208B0BE9633A985A4C35C70A97FF61249661F38426DA71D12B40F9A512B6C945CD85462CD565962B6C5CACB1B09F86B1651EB971F3013D14695028FE0BEBD838B9D3C5DE002EA95371E51B0E8CFB7567F6BF 
+4213D5182A41F58F3D01D8208B0BE9633A985A4C35CE0496B63C66D43EDEC263C42FF3524188D067B0C443C0
+42.php
+43.php
+442c47b1a97b6ef63cccb7efd72d2b8b659540b5.file.access_denied.tpl.php
+44.php
+45.php
+46.php
+47.php
+48.php
+492406078b55dd12ca968ba855cc51086aa03a05.file.injects.tpl.php
+49.php
+4d23ccceb2cf9e6c1c91df06170259d3
+4.php
+506702049dcb935eb57de850c79009ce8bbd7524.file.savelog_window.tpl.php
+50.php
+51.php
+52.php
+53.php
+54489babdac75a8b600ecce6185578cc
+54.php
+5501000000
+55.php
+5699145-24B8EBEDAA47374020E664A2406FB684
+56.php
+57.php
+58.php
+59.php
+5a3d0c7a3173b22fbe0fe97e78394f7b88754dd6.file.empty.tpl.php
+5f922338e39dbdc2bb87123d6882ebd59dfbc668.file.jobs.tpl.php
+5.php
+60.php
+61.php
+62.php
+63.php
+64.php
+65.php
+66.php
+678
+67.php
+68.php
+69.php
+6f7b99714cffad82719aea3b015eb61251f360f2.file.search_window.tpl.php
+6K8gL8.html
+6.php
+7
+70.php
+7_12
+71.php
+72.php
+73690290fb4e57b22fe3aedbc0957af0b1e637ff.file.jobs_add_window.tpl.php
+73.php
+74.php
+75.php
+76.php
+77.php
+78dc91f1D56B9COC18B818A7A2B272F43O3A621CAEOC17O479E4E9A69B82
+78.php
+79.php
+7c7ce9cbe3d97d5bd48a6117b863fd4c609486a7.file.stat.tpl.php
+?7d456d68729292e9843cb9dde2d2f7b4=34
+7fc107b56efd7920
+7.php
+7z.exe
+80.php
+81.php
+8223.asp
+82.php
+83.php
+84.php
+855feed4acbb99c63ad7f25fef289284
+85cgrqiP8jKGjpqgb
+85.php
+86.php
+87.php
+88.php
+89.php
+8d241ee32b630592b650f219f7110d5c18b92093.file.info.tpl.php
+8da03a92d68e0e53c275bedd439256612c468d64.file.index.tpl.php
+8J1cnplmQmxjby1ib213ZWxZcmVpbmM=
+8mIOm9jOKyjnxKjQJA
+8.php
+90093ad09988b466f409a1871733c5589014713e.file.index.tpl.php
+90.php
+91.php
+92.php
+93.php
+94.php
+95.php
+96879a396d162c7fa43fd09558f51075345cff4e.file.search.tpl.php
+96.php
+97.php
+98.php
+99.php
+9.php
+a3d00170f86f14e7a6d17ddf9be395481dfa9fb7.file.screens.tpl.php
+ab2db27ca7f6cd28abfa207faf55485711f95330.file.create.tpl.php
+about.php
+access
+access_denied.tpl
+accounts
+adapter
+adapter.php
+add_command.php
+add_filter.php
+add_filter_window.php
+add_filter_window.tpl
+add_sub.php
+add_sub_window.php
+add_sub_window.tpl
+adduser.php
+adm
+admin
+adminka
+AdminPanel
+admin.php
+admin.sql
+adobe
+adserv
+ae1.php
+AES210001 129016878.jsp?UrFwUIO3h7ofgwQInYPRbkQaHVM9Bih7kZ9rO+pKUrbklllsgfOk=
+AFC392A9570E45C188F468429F6349E82ABF530D32184946F872BB899FAECD808398A1630AEB78FE6EE44AB334A67A0A45B4ED8A690330E832085902F014621616CEB4AF702F4E5B37A9F53B21242F
+ajax_modal
+ajax.php
+ajax_server.php
+ajax.tpl
+alert.php
+alldirs
+AM8AAADwzauQeFY0Eg==
+AM8AAADxzauQeFY0Eg==
+ampie
+ampie.swf
+Andromeda Builder.exe
+Andromeda v2.06
+antivir.php
+antivir_window.php
+antivir_window.tpl
+antivir.xml
+Anti vmware
+a.php
+a.php?id=c2ViYWxpQGxpYmVyby5pdA==
+apzsr.php?id=021793111D309GE67E
+AquaTheme.class.php
+archivos
+ArmaFP.exe
+asdasd.php
+asp?
+asp?XAAAAM4w5jmIa_kMZlr67o8jettxsYA8dZgeNAHes-Nn5p-6AFUD6yncpz5AL6wAAA==p=1
+asp?XAAAAM4w5jmOS_kMZlr67o8jettxsYA8dZgeNAHes-Nn5p-6AFUD6yncpz5AL6wAAA==p=1
+authorization.php
+authorization.tpl
+auth.php
+autocmd.php
+aut.php
+awesomeuploader
+AWS26329.jsp?UrFvwIJIOKTRyfxR9KNRqhg8lcPr
+AWS96.jsp?baQMyZrdI5Rojs9Khs9fhnjwj
+b
+b10e94d6d1335dc023ee387cfaf46fc1
+B126
+b5edd3f44273ce20a1d82d1551c170ed719f93e5.file.edit.tpl.php
+b81d1c770fd8f323b57cc73ed7b2546e
+backconnect
+backconnectbot.obj
+Backup
+bankofamerica.txt
+banner4.php?jpg=..
+~bars
+Base
+base.class.php
+baseconfig.inc.php
+basic-dialog
+bbs
+bcserver
+bcserver.map
+bg.swf
+bin
+Binary
+bin.exe
+black
+blg7_8newtpl
+block.conf
+block.php.php
+block.textformat.php
+blog_b2afd7fe01019tkf.htm
+blog.php
+BmYBcnhwJxwk
+boatnet.sql
+boi854tr4w.php
+borlndmm.dat
+borlndmm.dll
+_bot
+Bot
+Bot (C#)
+bot_cab.tpl
+botnet_bots.lng.en.php
+botnet_bots.lng.ru.php
+botnet_bots.php
+botnet_scripts.lng.en.php
+botnet_scripts.lng.ru.php
+botnet_scripts.php
+botonline2.php
+bot_online.tpl
+bot.php
+bots
+bots_all.php
+bots_all_window.php
+bots_all_window.tpl
+bots_all.xml
+bots_live.php
+bots_live_window.php
+bots_live_window.tpl
+bots_live.xml
+bots.php
+bot.tpl
+bot_window.php
+bot_window.tpl
+box
+brvc.cgi?DELLXT88901be8-05_01
+bt.exe
+btn.php
+BUGS
+buildbot.obj
+buildconfig.inc.php
+buildconfig.obj
+builder
+Builder
+builder.exe
+Builder.exe
+Builder.fMain.resources
+builder.map
+[Builder] Novicus
+builder.obj
+Builder.pdb
+Builder.Properties.Resources.resources
+Builder.vshost.exe
+Builder.vshost.exe.manifest
+buildtools
+busted.php
+button
+C270suqdh
+?c480cfaa684e1dc0db1b2e1f891d814a=a15&8524421677ca0f8c20fd1cd2c1c6e0a7=sansit.in
+c5f19bf82010a95e24d7aefc19c308451a13c9b6.file.config.tpl.php
+cabs
+cache
+category
+cb_4.exe
+cc32100mt.dll
+certstorehook.obj
+cfg
+cfg.php
+cfg_upload.php
+cgi
+cgi-bin
+CGjUwP8yJUs7RjH7OinJ
+cgl-bin
+charts.swf
+check_download.php
+check_download.txt
+checksums.md5
+check_ver.php?version=1.09
+&ck =PHPSESSI D%3 Dn3fj1rfatdpgvpp7lucn0g44 c5%3B%20_utma%
+Class
+class.base.de.datos.php
+classes
+class.jabber2.php
+clear_all.php
+clear_bots.php
+clear_process.php
+clear_search.php
+clear-trigger.psd
+client
+client32.bin
+client.map
+clients.php
+cmd
+cmd.php
+CMS_SubitAll.cgi
+%CnC%
+code2name.php
+command.php
+commands.php
+common
+common.obj
+comp
+com.php
+config
+ConfigBuilder
+ConfigBuilder.exe
+ConfigBuilder.ini
+config.cfg
+config.include.php
+config.inc.php
+config.ini
+config.php
+configs
+Configs
+configsample.inc.php
+Configs.php
+Configs.txt
+config.tpl
+config.txt
+config.txt?&t=4593
+conh11.jpg
+connection.inc.php
+connect.php
+content.funcs.php
+Controladores
+contry.php
+convert_maxmind_country.php
+copybutton.swf
+COPYING
+corecontrol.obj
+corehook.obj
+coreinject.obj
+coreinstall.obj
+core.obj
+core.php
+count
+counter.img?theme=2&digits=10&siteId=31235706
+count.php?m=c&n=[HOSTNAME]_
+count.php?page=952000&style=LED_g&nbdigits=9
+countries.php
+country
+country_code.php
+country[maxmind].txt
+country.php
+country.tpl
+Cpanel
+cp.php
+[Cracked] Zemra Bot - Patcher (aktuellste Version)
+create.php
+create.tpl
+cron-10m.php
+cron-12H.php
+cron-1m.php
+cron-24H.cmd
+cron-24H.php
+cron-30m.php
+cron-5m.php
+cron-60m.php
+cron_job
+cron.php
+crons
+crt
+cryptedstrings.obj
+cryptedstrings.txt
+css
+cuimanifest.xml
+cxiqocvbqd
+CythBuilder.exe
+Cythosia
+d
+d379a30321315ff8bc4a8d947898ae08f0d1cdbe.file.settings.tpl.php
+d56sc1d56scd56sc1.php?ini=v22Mmjy0SYXyWTI0tQ0QQOdqOb68J9I6ModWQnN1eE1VXw
+data
+data.asp?mydata=AA==&uid=aaa.bbb.ccc.ddd&state=3067203
+Database
+database.class.php
+data.exe
+datalist.php
+data.php
+datetime.php
+date-trigger.psd
+daylinews
+db.sql
+DB.sql
+dd
+dd315f3fd355a36cebf7e63d8e24fa3249029d9d.file.profile.tpl.php
+DDoS
+debug
+Debug
+debug.tpl
+decaff5b6ee641742f53d8ef8c6f9a16.jar
+defau1t.aspx?ln=en-us
+default
+Default.asp
+Default.aspx?ID=IMNQRSSRXK
+Default.aspx?INDEX=<10_random_characters>
+default-php-version.php?mdm=30:1g:2v:1f:1o&xguc=3b:3i:39:35&nze=1l:1f:30:1l:2v:30:1m:2v:1n:30&bhn=lixvdd
+defines.php
+DejaVuSans-BoldOblique.ttf
+DejaVuSans-Bold.ttf
+DejaVuSans-Oblique.ttf
+DejaVuSans.ttf
+delete_command.php
+delete_country.php
+delete.php
+derp.php
+DesignTimeResolveAssemblyReferencesInput.cache
+design.tpl
+device_<decoded ID string>asp?device_t=<random 10 digits>&key=<random 8 lowercaseletters>&device_id=<decoded ID string>&cv=<random 17 lowercase letters>
+diagonal.swf
+diam
+disable.js?type=live&ua=MSIE&u=BgCRABQAMFX_DQEGCJgQAAAAAAAAJA0CFAsAAAD0krxq4hGde6y4c4Imb5lvKDQlUc-Vd0TCuBSswSxzsiKLdPIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgAAAB4AAAA0VgAA
+dlex.php
+dns
+dnslookup?la=en&host=picture.ucparlnet.com&type=A&submit=Resolve
+down
+down.asp?action=install&u=cpmcpm&p=2366A64BAA384EA6AB9CEF73E8E2BE12&t=7393
+download731106?h1=FIFEFDAHAPGDENCMFOFFFCAGAE
+download.php
+download.php?id=536
+Dq0x2MZoiodO-kOKn-ndGIxGVyPZ7xv7O3P6Mvd7RqORkIKLThMucpqOosG2wgcDeb5ujt1H89lEZyOsLhsNgzg46lLHanKOmyYZO5kxpJzTMbfBmtg8gwpHk2TV9Dn1RFEXtEeH7P-ZTWcu6HGeTYajj23wzGlVRtMht6tAajabg7mSoQz9R9MfXL7zcNBrRqVCgQTrX4Q6hjcU6re6zyIobzPzjUHuPZC-Y42DMeesoG2WV44aZagus6pisxMdbfWBDfFyNhhj5OGD5zsAzGusD3rwzGeUgdDlbYc7a7Se4-wNrMo4zhU5NPzy2p4AAbdj2LRJhjzSzMaTOdbjTpg2Z2mefix56t6pIysBATo4oeRdfNvzd
+duck
+dwnld
+dwsync.xml
+DxODlv?LefXWtQIRXkgARPGI=uTUkyVoqbqCvLHFM&ocwPqoQoSasSTJgMh=VutdsgvYkpKpKh
+dynamicconfig.obj
+e455055ccec1281ad4f7ead410a7e8230ca06875.file.index.tpl.php
+edit_filter.php
+edit_filter_window.php
+edit_filter_window.tpl
+editor
+edit.php
+edit_sub.php
+edit_sub_window.php
+edit_sub_window.tpl
+edit.tpl
+EditUser.php
+email
+empty.tpl
+engine
+enqnews
+EnterData.bas
+error_log
+essais.swf?info=789c333230d13331d53337d633b3b432313106001afa0338&infosize=00FC0000
+EstadisticasInsert.php
+Estadisticas.php
+Estatus.php
+evil.bmp
+ewpindex.htm
+example
+example.umbplg
+ExeInsert.php
+Exe.php
+exit.php
+ExplorerInsert2.php
+ExplorerInsert.php
+Explorer.php
+export
+expressinstall.swf
+ext
+Ext.ux.form.CheckboxCombo
+?f|-1813912965Admin
+f44
+f603de78cd9490b88e81caa482aa457e7109eb93.file.grabber.tpl.php
+f96b989dd720bd90ae9de58d9f0eea6ad87bba39.file.index.tpl.php
+facebook.png
+FASM.EXE
+FC001
+fded177fe12651bb038f3f11b01c4168
+feed.cgi
+FF_FONT0-Bold.gdf
+FF_FONT0.gdf
+FF_FONT1-Bold.gdf
+FF_FONT1.gdf
+FF_FONT2-Bold.gdf
+FF_FONT2.gdf
+fg
+fg_logs
+fg.php
+fgr
+fgr_fields.tpl
+fgr.php
+file1.exe
+FILE_ID.DIZ
+file.php  
+filesearch.obj
+fileuploadfield
+Filezilla.php
+filter
+filters
+firefox.html
+firewall.happytohell.com:80
+first.php
+fish.jpg?&t=4426
+flag
+flags
+flaws
+fly
+fMain.resx
+fonts
+footer.php
+form
+Form1.frm
+Form1.frx
+formgrabber.php
+formgrabber.tpl
+f.pack
+frm_botlist.php
+frm_dashboard.php
+frm_login.php
+frm_logout.php
+frm_main.php
+frm_management.php
+frm_socks5.php
+frm_stat_global.php
+frm_statistic.php
+frm_stat_network.php
+frm_stat-qview.php
+frm_stat_system.php
+frm_tasks.php
+fsarc.php
+ftp.php
+ftpr.php
+ftps.php
+fud scan.txt
+full
+fullajax
+full_builder_1.2.5.exe
+full_builder_1.2.6.exe
+func
+funcs.php
+function.counter.php
+function.cycle.php
+function.fetch.php
+function.mailto.php
+function.math.php
+function.php
+functions.checks.php
+functions.class.php
+functions.create_filter.php
+functions.encapsules.php
+functions.first.php
+functions.get_config.php
+functions.get_files.php
+functions.get_formgrabber.php
+functions.get_grabber.php
+functions.get_host.php
+functions.inc.php
+functions.language.php
+functions.load_filters.php
+functions.mysql_urldecode.php
+functions.php
+functions.prefix.php
+functions.rc.php
+functions.real_escape_string.php
+functions.ru2lat.php
+functions.size_format.php
+functions.smarty_assign_add.php
+functions.sql_inject.php
+functions.ts2str.php
+Functions.txt
+gallery
+gate.php
+gateway.php
+gat.php
+gBarChart.php
+G-Bot
+G-Bot 1.6.2
+G-Bot 1.7
+gbot_2.2
+G-bot 2.2
+gbot_pannel.zip
+g-bot.sql
+gbuilder.exe
+gChart.php
+GChartPhp
+gConcentricPieChart.php
+gd_image.inc.php
+geobase
+geobase.txt
+geoip
+geo_ip.dat
+geoip.dat
+GeoIP.dat
+geoip.inc
+geo_ip.php
+geoip.php
+get
+GET
+get2.php?c=DMRACJEP&d=26606B67393C36322E64636F317E3E3D2120222124243078747D456E7579232910121A14141047015D404E166D1D1B1676740101060203760C787F0C05787D0801007573067C7F770A7E7B0F6A2F27212634206E656D657130303E666A6A6F6A55565A024204020A55584C041F1B0B1D4D442D42522A02141344574A4B4C4E4AB4B5B7B1BDA3F6F5E7EAB7CEF4FDE2E0E2F4E0BDD1CDD3B1F4FDABC4F9A0AFB9C3CDCCD7FBC09B978EDE9C9F919D88C98D8094C1898490D4D6DDD6869AD4DADEB4A4FFF2F6FCF0F1FCF8FCFBFCEB8B8082
+get.asp?mac=7641FAC9F7B2AAF71B6DE505B4D468A2&os=winxp%20Professional&avs=unknow&ps=NO.&ver=0005&pnum=16
+getcmd.php
+get_xml?file_id=25227372
+gFormula.php
+gGroupedBarChart.php
+ggu.php
+gLineChart.php
+global.php
+gMapChart.php
+gMeterChart.php
+google.png
+go.php?html=do
+gOverlappedBarChart.php
+g.php
+gPie3DChart.php
+gPieChart.php
+gQRCode.php
+gra
+grab2.php
+grabber.php
+grabber.tpl
+grab.php
+graphics
+gra.php
+gray
+GreenTheme.class.php
+grid
+gridfilters
+gScatterChart.php
+gStackedBarChart.php
+ gttfi.php?id=019451425260376469&ext=ixioJXXJFCRrrDatKHhK
+ gttfi.php?id=019451425260376469&ext=YmFkc3R1ZmYuZGxs
+guimanifest.xml
+gVennDiagram.php
+h
+handle. php?addr=http%3A
+HaxMuteX.bas
+HBuilder.exe
+header.php
+heap
+heards
+help.php
+HerpesNet v1.6.1
+HexaEnds.bas
+hFtlogs.bas
+h. gif ?pid =1 13&v=130586214568
+h.gif ?pid =1 13&v=130586214568
+hits.php
+hits.txt
+home
+horizontal.swf
+<HOSTNAME>
+Host.php
+HostsInsert.php
+How-To.txt
+HowTo.txt
+html
+html_footer.php
+html_grund.php
+html_menu.php
+http:
+ http:(C&C):443
+httpgrabber.obj
+httpinjects
+hunter.php
+ice9bc.exe
+Ice9 cracked
+Ice.IX.v1.2.5.Keygen-RED
+iclok.php
+icons
+id=1888546865&u=4WWbvjA+sJYdYzrNmxr7vmGjfIZ4mztoS3uBwEbXacviRtjYIg2xcKQMAWYaZM4RqxalcusDRHEOWDjvdOj3ww==
+iDonwExec.bas
+idssvc
+idssvc.jsp?comment=wget+http:
+IElog
+iEmails.bas
+iesvc
+iesvc.jsp?comment=wget+http:
+ifg.php
+if install fails, use this.txt
+IGKKT
+iistart.html
+ij83d
+im
+image
+imagen
+image.php
+images
+imageSmoothArc.php
+img
+imgs
+import
+import_file.php
+import.php
+import.pid
+imports
+inbox.php?ltype=ld&ccr=1&id=E81B90884C4C45445458&stat=0&ver=2000803&loc=0x0409&os=Windows%20XP
+inc
+inc.config.php
+include
+includes
+includes.php
+index000000001.asp
+indexbak.asp?rands=IXLCGIXELZ&acc=&str=select%20id%20from%20tab_online%20where%20regc
+index.htm
+index.html
+index.htm?n763t4OPmrs6fXq7fXp7uj16e-r&Length=0
+index.php
+index.php?uid=587609&ver=8g%20XP
+indexs.zip
+index.tpl
+info.asp
+info.obj
+info.php
+information.php
+info.tpl
+info.txt
+Info.txt
+Inicio.php
+inj
+injects.php
+injects.tpl
+injects.txt
+in.php?q=WPOChVXlw9QiOTwtCbg+uSk36elyOCiUwI99U0PYxA==
+install
+installdata.inc.php
+install_en.txt
+installer
+install.php
+install.sql
+install.sql.tpl
+install.txt
+Install.txt
+iPasedSn.bas
+ip_files
+ip.php
+iStarPcOns.bas
+iUnamex.bas
+ixjxqn-jtixjx-qnjt_tfdhgj-opjx-gxytfqbqgsusltnojtyhsn_syvrzh-htof-clgowkblrzrqfrgsuqgdit_ruky_.php
+jabber
+jabber_bot_cmd.php
+jabber_bot.php
+jabber_bot_start.php
+jabberclass.php
+jabber_off
+javadd.tar.gz
+jobs
+jobs_add.php
+jobs_add_window.php
+jobs_add_window.tpl
+jobs_bot_edit.php
+jobs_designer.php
+jobs_edit.php
+jobs_edit_window.php
+jobs_edit_window.tpl
+jobs.php
+jobs.tpl
+jpg-config.inc.php
+jpgraph
+jpgraph_errhandler.inc.php
+jpgraph_gradient.php
+jpgraph_legend.inc.php
+jpgraph_line.php
+jpgraph.php
+jpgraph_plotmark.inc.php
+jpgraph_rgb.inc.php
+jpgraph_text.inc.php
+jpgraph_theme.inc.php
+jpgraph_ttf.inc.php
+jquery
+js
+JSON.php
+jueoaritjuir.php
+jw!Dyz0_2mTExQ0xbBnlp.RZcXoHmU-
+kamp.php
+kbs.exe
+keygen.exe
+keylogs
+kisses.tar.gz
+kmqkcicalxrntrngwdxjyxztxcqkoyjnbdoafqirgnwwvpcjqglucovna.phtm 
+knok.php?id=SYSTEM!VICTIM!9B88F779&ver=21&up=162&os=XP%20Service%20Pack%202
+kod.txt?k=123&t=7215
+kys_allowget.asp?namegetkys.kys
+lang
+language.en.php
+language.ru.php
+languages.obj
+layout
+ld
+lde32.lib
+lde64.lib
+left-corners.psd
+leftnav_prog_bg.jpg
+left-right.psd
+LeVeL-23.Biz.url
+lib
+LICENSE
+LICENSE.TXT
+lighttpd_rewrite.conf
+link.php
+links.php
+links.tpl
+linux.php
+list_bots.php
+list_commands.php
+list_countries_command.php
+list_countries.php
+list_countries_pie.php
+listen.obj
+list_installs.php
+list.php
+list_plugins.php
+lng.en.php
+lng.ru.php
+loader
+localconfig.obj
+localsettings.obj
+log
+login
+login.php
+login.php?cd2hpdGU&uU11TVEV&s&pMTkyLjE2OC4wljYS&hi2wsdf35l
+logo.jpg  
+logo.psd
+logos.gif?114bbc=9068000
+logos.gif?1f5428=8212640
+logo_text.psd
+logout.php
+logs
+logs.php
+logs_static.php
+logs_static.tpl
+logs.tpl
+logs_window.php
+lost.html
+M
+magicstick.dyndns-remote.com
+main
+main.obj
+mainpage.php
+make
+make.cmd
+make_debug.cmd
+make_default.cmd
+make_full.cmd
+make.php
+m_d.php
+menu
+menu.php
+Messenger.php
+MetroControls.dll
+minecraft-goldmods.ru
+miniav.plug
+miniav.psd
+Misc
+modal
+mod_bots-qview.php
+mod_commands.php
+modifier.capitalize.php
+modifiercompiler.cat.php
+modifiercompiler.count_characters.php
+modifiercompiler.count_paragraphs.php
+modifiercompiler.count_sentences.php
+modifiercompiler.count_words.php
+modifiercompiler.default.php
+modifiercompiler.indent.php
+modifiercompiler.lower.php
+modifiercompiler.noprint.php
+modifiercompiler.string_format.php
+modifiercompiler.strip.php
+modifiercompiler.strip_tags.php
+modifiercompiler.upper.php
+modifiercompiler.wordwrap.php
+modifier.date_format.php
+modifier.debug_print_var.php
+modifier.escape.php
+modifier.regex_replace.php
+modifier.replace.php
+modifier.spacify.php
+modifier.truncate.php
+module_dirs.php
+module.php
+modules
+Modules
+monica.jpg
+Mono.Cecil.dll
+monthly.php
+msn.sunvideos.name
+myse.php
+mysqli.class.lite.php
+mysqli.class.php
+n0ise
+N0ise
+n0ise.class.php
+n0ise.sql
+N0PE Bot
+N0PE Bot Compiled
+N4fZgKQ7TZgGvF6cVk0xy5StACcfFnOpmninigV7vx8oDk7B1zRDycPrfKVTcazdO7153cOcd-UjfNI0fBFg3GI2GWcB8EVKIPlGwrkknFPSsHigx-LIIiZKrqD0pqgt
+navigator
+nettraveler.asp?action=getcmd&hostid=E81B9088&hostname=DellXT
+nettraveler.asp?hostid=E81B9088&hostname=DellXT&hostip=172.16.253.130&filename=FileList-1006-233757.ini&filestart=0&filetext=begin::OgA1AC2QzebTgdToZTkXQaCicYTaZR6RDKbDYWCpKKBhM88YjIajKXLfKOEmQ0nIxm86m46D0YVg::end
+nettraveler.asp?hostid=E81B9088&hostname=DellXT&hostip=172.16.253.130&filename=travlerbackinfo-2013-1-14-0-29.dll&filestart=0&filetext=begin::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
+new
+newimage.asp?imageid=qryykg-400846712&type=0&resid=1080265
+news
+NEWS
+news.jpg
+news.php
+Nfile.asp
+NfLog
+nm
+_notes
+Notfall SQL
+nspr4hook.obj
+nt
+nt2011
+ntdll.lib
+?oAIlhelGQg8AAAAAAAAAAAAAAAAoAAAAsLi
+obj
+OceanTheme.class.php
+odw3ux
+oi2c
+?oJCT6bZIQg8BAAAAAAAAAAAAAAD0AQAAsLi
+ol
+old
+OneNote Inhaltsverzeichnis.onetoc2
+online.asp?hostname=[COMPUTERNAME]&httptype=[1][not%20httptunnel]
+online.php
+opt
+options.php
+orange
+OrangeTheme.class.php
+order.htm
+orders2010.php
+os
+osenv.obj
+os.php
+os_window.php
+os_window.tpl
+os.xml
+other
+output
+outputfilter.trimwhitespace.php
+Owpq4.cgi
+page_12082223.html
+page_32262 308. html
+pagenavigation.class.php
+pages
+pandora
+pandora.exe
+panel
+Panel
+panel.php
+Panel.rar
+Pass.txt
+passw.plug
+passw.psd
+PastelTheme.class.php
+patterns
+paypal.txt
+pdf .php?id=2
+PEAR
+php
+PHP
+php5ts.dll
+php.exe
+php_gmp.dll
+php.ini
+php_mbstring.dll
+PHPPaging.lib.php
+PHP Sauce.rar
+php_sockets.dll
+PHqgHumeay5705.mp3
+PickPocket Bot 1.1.4.7
+pids
+plugins
+Plugins
+ponyb
+popup
+poster.php
+postinfo.html
+postnuke
+prefix
+procces.php
+procces_window.php
+procces_window.tpl
+process.xml
+profile.php
+profile.tpl
+progress
+Properties
+protocol.php?p=3894120584&d=4fQm27CpL9m6oC7QvLZomrXyeYvptmyetaVE2deiLdi4
+prototype
+proxy.php
+proxy.php?ip=172.16.253.129&port=41080&os=XP&iso=USA&smtp=0
+PSD
+?ptrxcz_VYadfikmqsuxz2469BEGILNPSUXZbe
+push.php
+pwned.exe
+qfa.cgi?20120311_06:44:06.bin.FFFFFFFFFS
+q.php
+q.php?kf=1f:1o:1m:2w:1o&he=1i:31:32:1g:1n:1h:1l:1l:1n:31&a=1f&zg=c&tn=g&jopa=1658622
+QtGui4.dll
+qtip
+queenfun
+r3.php
+~rbtk
+rdpa.php
+RDP.exe
+rdp.php
+rdpr.php
+README
+README.1ST
+readme_en.txt
+readme.txt
+Read Me!.txt
+ReadMe!!!.txt
+ReadMe.txt
+README.txt
+record.asp?device_t=<random 10 digits> &key=<random 8 lowercase letters>&device_id=<decoded ID string>&cv=<random 17 lowercase letters>&result=<URLencoded result data>
+redir?di=130b51e7dc7&prd=bEFU&pver=131&j=1&ck=0
+redirect
+redir.php
+RED.nfo
+ [reducted]:00-00-00-00-00-00
+.[reducted] :00-00-00-00-00-00lCrrrwhite
+Release
+releases
+Remote%20PC-769f
+remotescript.obj
+remove.php
+remove_window.php
+remove_window.tpl
+report.obj
+reports_db.lng.en.php
+reports_db.lng.ru.php
+reports_db.php
+reports_files.lng.en.php
+reports_files.lng.ru.php
+reports_files.php
+reports_jn.lng.en.php
+reports_jn.lng.ru.php
+reports_jn.php
+ResGen.read.1.tlog
+ResGen.write.1.tlog
+resources
+resources.aps
+resources.htm
+resources.rc
+Resources.resx
+resuIt?hl=en&meta=mdlyorvkildpiicqqownoatgvow 
+result.php
+result_window.php
+result_window.tpl
+rfb.obj
+right-corners.psd
+rights_list.php
+rights.php
+rights.tpl
+robots.txt
+RoseTheme.class.php
+r.pack
+rscreens
+rss
+rssnews.php
+run.php
+run.pid
+s
+safe
+safe.php
+Salir.php
+save_comment.php
+savelog_download.php
+savelog.php
+save_logs
+savelog_window.php
+savelog_window.tpl
+SaveSn.bas
+save_sort
+screens
+screenshot.obj
+screens.php
+screens.tpl
+screens_window.php
+screens_window.tpl
+script
+script.php
+scripts
+scr.php
+search25548?h1=FIFEFDAHAPGDENCMFNFFFNAGAH
+search2?fr=altavista&itag=ody&q=b88d6ce7e9fe419788716298cc747adc%2C93a5d8146fea0bbb&kgs=1&kls=0
+search2.php
+search%3Fhl%3cWABQAFMAUAAzACOAUgA5ADMALQBPAEYAQwAyADAA%26q%3DMQA3ADIALgAyADkALgAwAC4AM
+search59861?h1=51&h2=1&h3=BHI06233&h4=FIFEFDAHAPGDENCMFOFFFCAGAE
+search613522?h1=FIFEFDAHAPGDENCMFOFFFCAGAE
+search.php
+search.php?page=73a07bcb51f4be71
+search?qu=
+search?query=EZTFDHWP&sort=relevance
+search_run.php
+search_start.php
+search_subrun.php
+search.tpl
+search-trigger.psd
+search_window.php
+search_window.tpl
+seek.cgi?lin=100&db=dfs
+SeeQ Builder.exe
+SeeQ Package
+SelectPais.php
+sem
+server
+Server
+server.bin
+server.exe
+server.pdb
+server[php]
+server.vshost.exe
+server.vshost.exe.manifest
+session.class.php
+sessioncontrol.inc.php
+session.php
+set
+setting.doc
+settings
+settings.inc.php
+settings.obj
+settings.php
+Settings.settings
+settings.tpl
+settings.txt
+shared
+shared.escape_special_chars.php
+shared.make_timestamp.php
+shared.mb_str_replace.php
+showall.php
+showflag.php
+show.php
+showthread.php?t=d7ad916d1c0396ff
+show_window.php
+show_window.tpl
+Silly Bot 1.6.exe
+sizer
+Sjwpc
+sk
+slider
+sll
+smarty
+Smarty.class.php
+smarty_internal_cacheresource_file.php
+smarty_internal_compile_append.php
+smarty_internal_compile_assign.php
+smarty_internal_compilebase.php
+smarty_internal_compile_block.php
+smarty_internal_compile_break.php
+smarty_internal_compile_call.php
+smarty_internal_compile_capture.php
+smarty_internal_compile_config_load.php
+smarty_internal_compile_continue.php
+smarty_internal_compile_debug.php
+smarty_internal_compile_eval.php
+smarty_internal_compile_extends.php
+smarty_internal_compile_foreach.php
+smarty_internal_compile_for.php
+smarty_internal_compile_function.php
+smarty_internal_compile_if.php
+smarty_internal_compile_include.php
+smarty_internal_compile_include_php.php
+smarty_internal_compile_insert.php
+smarty_internal_compile_ldelim.php
+smarty_internal_compile_nocache.php
+smarty_internal_compile_private_block_plugin.php
+smarty_internal_compile_private_function_plugin.php
+smarty_internal_compile_private_modifier.php
+smarty_internal_compile_private_object_block_function.php
+smarty_internal_compile_private_object_function.php
+smarty_internal_compile_private_print_expression.php
+smarty_internal_compile_private_registered_block.php
+smarty_internal_compile_private_registered_function.php
+smarty_internal_compile_private_special_variable.php
+smarty_internal_compile_rdelim.php
+smarty_internal_compile_section.php
+smarty_internal_compile_while.php
+smarty_internal_config_file_compiler.php
+smarty_internal_configfilelexer.php
+smarty_internal_configfileparser.php
+smarty_internal_config.php
+smarty_internal_data.php
+smarty_internal_debug.php
+smarty_internal_filter_handler.php
+smarty_internal_filter.php
+smarty_internal_function_call_handler.php
+smarty_internal_get_include_path.php
+smarty_internal_nocache_insert.php
+smarty_internal_parsetree.php
+smarty_internal_register.php
+smarty_internal_resource_eval.php
+smarty_internal_resource_extends.php
+smarty_internal_resource_file.php
+smarty_internal_resource_php.php
+smarty_internal_resource_registered.php
+smarty_internal_resource_stream.php
+smarty_internal_resource_string.php
+smarty_internal_smartytemplatecompiler.php
+smarty_internal_templatecompilerbase.php
+smarty_internal_templatelexer.php
+smarty_internal_templateparser.php
+smarty_internal_template.php
+smarty_internal_utility.php
+smarty_internal_wrapper.php
+smarty_internal_write_file.php
+smarty_security.php
+sni
+sniffer.php
+sniffer.tpl
+sni.php
+snwd.php?tp=1&tg=[ID]&tv=Error[]&ts=[PLATFORM]&mt=[account]&tr=[NoFiles]&Y1Y5F2 
+sockethook.obj
+socks
+socks4
+socks5.php
+socks5server.obj
+socksa.php
+sockslist.php
+socksrall.php
+socksr.php
+softwaregrabber.obj
+SoftyTheme.class.php
+source
+s.pack
+sptr.cgi?DELLXT88901be8-05_01
+SQL
+SQL_gbot.zip
+sqls
+sql.sql
+srch2.php
+srch.php
+ssi.ucparlnet.com:80
+%s:%s%s
+start_me_on_vm_before.exe
+stat2.php?w=65&i=58d7f947d2d1f947e5de1a07e596ae05&a=25
+statisics.php
+statistics.html
+stat.php
+stats_main.lng.en.php
+stats_main.lng.ru.php
+stats_main.php
+stats_os.lng.en.php
+stats_os.lng.ru.php
+stats_os.php
+stats.php
+stat.tpl
+statusbar
+stealer
+step0.php
+step1.php
+step2.php
+step3.php
+step4.php
+step5.php
+Stike
+stopav.plug
+stopav.psd
+Strike.exe
+structure
+stub
+Stub
+Stub & DDL's.rar
+stub.exe
+Stub.exe
+Stub.pdb
+Stub.Properties.Resources.resources
+Stub_uncrypted.exe
+subrun.pid
+swfupload_browse_button_trans_56x22.PNG
+swfupload.swf
+sys
+SysDriver
+SysDriver.exe
+SysDriver.pdb
+SysDriver.Properties.Resources.resources
+SysDriver.vshost.exe
+SysDriver.vshost.exe.manifest
+sys_info.lng.en.php
+sys_info.lng.ru.php
+sys_info.php
+sys_options.lng.en.php
+sys_options.lng.ru.php
+sys_options.php
+sys.php
+sysplugins
+system
+System
+sys_user.lng.en.php
+sys_user.lng.ru.php
+sys_user.php
+sys_users.lng.en.php
+sys_users.lng.ru.php
+sys_users.php
+T19R17Q16
+T3BWOyTujBlrHIQqMgMqV750QegiBMF4XAHPzbYqRtufQpaX
+tabs
+taskbar
+task.php
+tasks.php
+tasksutils.inc.php
+tcpserver.obj
+temp
+templates
+TempPE
+Testcfg.txt
+test.mp4
+TestURL.asp
+thaingo.org
+THANKS
+thanks.txt
+theme
+theme-access
+theme-gray
+themes
+Thumbs.db
+titles.php
+tmp
+today.php
+TODO
+tongji.html
+toolbar
+tools.inc.php
+tools.obj
+top-bottom.psd
+top.php
+tra
+tracking.php
+trandocs
+tree
+treegrid
+trigger.psd
+trigger-square.psd
+Trojan2.jpg
+trvO7ukg==
+uBot Sauce
+UD1aND43a0xiWQ161
+Umbra Loader 1.2.0
+UniversalTheme.class.php
+unnecessary_download.php
+unnecessary.php
+unnecessary_window.php
+unnecessary_window.tpl
+update?id=000f6b50
+update?id= 000f72b8
+update?id=3109c2a2
+update.php
+update?product=windows
+upd.php
+UpgradeLog.XML
+_UpgradeReport_Files
+UpgradeReport.xslt
+upload
+Upload
+upload8806?h1=FIFEFDAHAPGDENCMFOFMFGAEAE
+upload_delete.php
+upload_informations.php
+uploading
+upload.php
+uploads
+uppit.php
+upx
+UPX
+upx.1
+upx308w
+upx.doc
+upx.exe
+url?u=http:
+usaa.txt
+UsbFloods.bas
+usbspreader.umbplg
+user
+userhook.obj
+users.php
+utility.php
+ux
+v2
+v6
+VB6 Sauce.rar
+vb6 Source Server
+version_check.php
+version.txt
+vertexnet.sql
+VertexNetv1.2.1
+vertical.swf
+vic.aspx?ver=4.0.1158.0&rnd=595937
+vista
+Vistas
+visual
+VividTheme.class.php
+vl 
+VNBuilder.exe
+vnc
+vnckeyboard.obj
+vncmouse.obj
+vncpaint.obj
+vncserver.obj
+VNC.txt
+VTlaMWlnYEw12511
+w880
+wallpapers
+web
+WebAdmin
+webinjects.txt
+webpanel
+web_panel
+Webpanel
+Web Panel
+Webpanel.rar
+Webpanel.zip
+webstats.dyndns.info
+week.php
+win32
+Win32.bas
+winapitables.obj
+windosdate
+window
+windowstation.obj
+windowsupdatev7
+wininethook.obj
+wlc3
+~wong
+wp-content
+write.php
+X11
+x32
+x64
+x86
+XEuPCLrf?e
+xhrupload.php
+xx
+yahoo
+yourtheme
+yui
+yx
+ZBOT
+zecmd
+zecmd.jsp?comment=perl+lindb.pl
+Zemra Bot - Patcher.exe
+Zemra_RAW.exe
+zemra.sql
+Zeus
+ZeuS 2.0.8.9
+zip.exe
+zips
+zsbcs.exe
+zsb.exe
+zy
+Админка.rar
+Билдер.exe
+ПРОЧТИ!!!.txt