I wrote a piece of Hit Bot code in 1999 as a proof of concept. I saw people releasing them, and all they did was directly get a URL and sent no headers etc. Very easy to detect.
The one i made sent full HTTP headers, with referrer and useragent, and also grabbed images that were on the page etc, to make the server logs look real
It was very basic and shitty, and just really designed to make people think more and be more inventive with stuff they coded like that.
A friend of mine put it on his webpage for download, and it ended up on big security portal/tool sites. A guy in Oz found it and sent me a mail asking if i'd like to work on some porn projects with him.
It's still online at its original home aswell
http://www.ccitt5.net/archives/gma-click.c.gz
Quote:
/*
** gma-click.c -- Standard 'click' version -- By GMA -- c5.hakker.com
**
** This program doesn't really do anything special. I just saw certain
** 'pr0n clickers' out there and thought they could be improved in a
** couple of ways, so put this together.
**
** 1) Delay for a random period.
** 2) Connect to web server through wingate.
** 3) Provide the web server with various headers from the alleged
** client including random "User-Agent" values and "Referer" values.
** 4) Download relevant images aswell as html to make the connection
** look legit.
**
** Before you run this you have to add lines like the one on line 104 for
** each piece of html/gif/jpeg you want to download. Read the code and
** figure it all out, then change what you want changing.
**
** (NB: Use only hostnames in the wingate file.)
*/
|
I didn't use it for any sneaky purposes!