NetBus (original) (raw)
NetBus ist ein Fernwartungstool für Microsoft Windows, das meist illegal eingesetzt wird. In seiner Funktionalität entspricht es Back Orifice, verfügt allerdings über mehr Möglichkeiten. Es wurde von dem Schweden Carl-Fredrik Neikter in Delphi geschrieben, der die erste Version Mitte März 1998 veröffentlichte. Derzeit liegt das Programm in den Versionen 1.60, 1.70 und als NetBus 2.01 Pro vor.
| Property | Value |
|---|---|
| dbo:abstract | NetBus ist ein Fernwartungstool für Microsoft Windows, das meist illegal eingesetzt wird. In seiner Funktionalität entspricht es Back Orifice, verfügt allerdings über mehr Möglichkeiten. Es wurde von dem Schweden Carl-Fredrik Neikter in Delphi geschrieben, der die erste Version Mitte März 1998 veröffentlichte. Derzeit liegt das Programm in den Versionen 1.60, 1.70 und als NetBus 2.01 Pro vor. (de) NetBus es un programa utilizado para el control de una forma remota de sistemas informáticos Microsoft Windows a través de una red. Fue creado en 1998 y ha sido muy controvertido por su potencial de ser utilizado como una puerta trasera. (es) NetBus or Netbus is a software program for remotely controlling a Microsoft Windows computer system over a network. It was created in 1998 and has been very controversial for its potential of being used as a trojan horse. NetBus was written in Delphi by , a Swedish programmer in March 1998. It was in wide circulation before Back Orifice was released, in August 1998. The author claimed that the program was meant to be used for pranks, not for illegally breaking into computer systems. Translated from Swedish, the name means "NetPrank". However, use of NetBus has had serious consequences. In 1999, NetBus was used to plant child pornography on the work computer of a law scholar at Lund University. The 3,500 images were discovered by system administrators, and the law scholar was assumed to have downloaded them knowingly. He lost his research position at the faculty, and following the publication of his name fled the country and had to seek professional medical care to cope with the stress. He was acquitted from criminal charges in late 2004, as a court found that NetBus had been used to control his computer. There are two components to the client–server architecture. The server must be installed and run on the computer that should be remotely controlled. It was an .exe file with a file size of almost 500 KB. The name and icon varied a lot from version to version. Common names were "Patch.exe" and "SysEdit.exe". When started for the first time, the server would install itself on the host computer, including modifying the Windows registry so that it starts automatically on each system startup. The server is a faceless process listening for connections on port 12345 (in some versions, the port number can be adjusted). Port 12346 is used for some tasks, as well as port 20034. The client was a separate program presenting a graphical user interface that allowed the user to perform a number of activities on the remote computer. Examples of its capabilities: * Keystroke logging * Keystroke injection * Screen captures * Program launching * File browsing * Shutting down the system * Opening / closing CD-tray * Tunneling protocol (NetBus connections through a number of systems.) The NetBus client was designed to support the following operating system versions: * Windows 95 * Windows 98 * Windows ME * Windows NT 4.0 Netbus client (v1.70) works fine in Windows 2000 and in Windows XP as well. Major parts of the protocol, used between the client and server interaction (in version 1.70) are textual. Thus the server can be controlled by typing human understandable commands over a raw TCP connection. It is more difficult than using the client application yet allows one to administrate computers with NetBus from operating environments other than Windows, or when original client is not available. Features (such as screen capture) require an application with ability of accepting binary data, such as netcat. Most of more common protocols (like the Internet Relay Chat protocol, POP3 SMTP, HTTP) can also be used over a raw connections in a similar way. NetBus 2.0 Pro was released in February 1999. It was marketed commercially as a powerful remote administration tool. It was less stealthy, but special hacked versions exist that make it possible to use it for illegal purposes. All versions of the program were widely used by "script kiddies" and was popularized by the release of Back Orifice. Because of its smaller size, Back Orifice can be used to gain some access to a machine. The attacker can then use Back Orifice to install the NetBus server on the target computer. Most anti-virus programs detect and remove NetBus. (en) NetBus o Netbus è un software shareware per il controllo remoto di un computer con sistema operativo di Microsoft Windows attraverso una rete. (it) NetBus – aplikacja typu koń trojański, pozwalająca na przejmowanie kontroli nad komputerami. Aplikacja została napisana w marcu 1998 przez szwedzkiego programistę w Delphi. (pl) NetBus är en programvara som lanserades 1998 för att kunna kontrollera datorer över ett nätverk. Programmet är skrivet i Delphi av den svenske programmeraren och är det första kända dolda som man vet har fått spridning. Neikter, som var 20 år när programmet skrevs, hävdade han gjort NetBus för att kunna busa, inte för att olagligt bryta sig in i andra datorsystem. Användaren vars dator övertas med hjälp av NetBus förvarnas aldrig om att någon annan är inne i datorn. Spionen kan göra exakt samma sak som datorns rättmätiga ägare: allt från att skriva in webbadresser till att öppna cd-rom-enheten. Programmet är ett gratisprogram som Neikter skapade på några veckor och det fick stor spridning på internet. Ett uppmärksammat fall var när 3 500 bilder med barnpornografi planterades på en forskares dator i Lund 1999. Det hela ledde till en rättsprocess och först år 2004 fann rätten att bilderna inte laddats ned av forskaren utan genom ett intrång via Netbus. Programmet ledde till att Carl-Fredrik Neikter kontaktades av NASA:s säkerhetsansvarige och även amerikanska flygvapnet var intresserade och fick programmets källkod för att kunna stoppa intrång i sina system. De flesta antivirusprogram kom snart att upptäcka och blockera NetBus. NetBus 2.0 pro släpptes i februari 1999 och marknadsfördes som en kommersiell programvara för att styra datorer över ett nätverk. I denna version agerade inte servern lika dolt som den gjort i tidigare versioner, men hackade varianter av denna version gjorde det möjligt att använda programmet för olagliga syften. (sv) NetBus é um trojan. Ferramenta de administração remota com uma interface muito simples e muito fácil de utilizar que utiliza a porta 12345.Tem funções como abrir e fechar drive de cd, iniciar algum programa, controlar mouse entre outras. o Indivíduo que controla a máquina infectada remotamente, pode fazer download, abrir programas, deletar arquivos e formatar partições. Um perigo se cair em mãos mal-intencionadas, porém sendo muito útil em assistência remota. O primeiro Netbus foi desenvolvido por um programador sueco chamado Carl-Fredrik Neikter com a intenção de fazer manutenção de computadores a longa distância, mas caiu nas mãos erradas devido à sua facilidade de uso. Foi disponibilizado na Internet em Março de 1998.Esse programa é composto por duas partes: um cliente (netbus.exe) e o servidor (patch.exe) sendo essa que deverá ser instalada no computador que se queira gerir remotamente. Utilizando algumas portas TCP, o "gestor da rede" tem a capacidade de gerir ficheiros, gravar sons e fazer praticamente o mesmo que poderia fazer com esse computador à sua frente, só que confortavelmente sentado em sua casa. O Net Bus serviu de base para programas futuros como ProRat, SubSeven, Turkojan dentre outros de mesma natureza mas obviamente aprimorados, distânciando seu parentesco com sua raiz desenvolvendo novas funções e um novo estilo de conexão chamada conexão reversa onde o programa hacker é o servidor que aguarda a conexão de suas vitimas que tomam o lugar dos clientes, este é um ponto onde muitos "Lammers" se perdem, muitos que apenas entram no "mundo do hacking" e se acham os maiorais de hoje em dia, chama o programa de cliente e seu virus de servidor, o que não estaria errado se estivéssemos falando de programas já considerados primitivos neste meio. As funções do Net Bus incluem: * Sustentar mais de 1 hacker no computador da vitima com o mesmo malware; * Controle de Microfone,Área da tela,Mouse,Processos,Janelas ativas,Arquivos,Informações do computador,Links,Mensagens falsas e até seu driver de CD; * Editar e re-criar o vírus Patch.exe (seu servidor); * Funcionamento em qualquer versão do Windows; * Bind connection (conexão direta); * Um visual terrivelmente estranho. (pt) NetBus или Netbus — программа дистанционного управления компьютерной системой Microsoft Windows по сети. Она была создана в марте 1998 года на Delphi . Автор утверждал, что его программа создавалась, как «шутка», а не как программа, позволяющая незаконно проникать в компьютерные системы.NetBus имеет клиент-серверную архитектуру. (ru) NetBus是1990年代晚期流行的一個，當時常被駭客或腳本小子作為使用，所以被視為惡意程式。NetBus主要使用12345埠通信，只能運行於Windows系統，至多支援到Windows XP，所以現今已十分罕見。 (zh) |
| dbo:developer | dbr:Carl-Fredrik_Neikter |
| dbo:genre | dbr:Remote_administration |
| dbo:latestReleaseVersion | 2.01 Pro |
| dbo:license | dbr:Shareware |
| dbo:wikiPageExternalLink | http://www.f-secure.com/v-descs/netbus.shtml https://packetstormsecurity.com/files/10680/linux-netbus-client-v0.4.tgz.html https://packetstormsecurity.com/files/14625/nil-0.1b.tar.gz.html |
| dbo:wikiPageID | 728984 (xsd:integer) |
| dbo:wikiPageLength | 6382 (xsd:nonNegativeInteger) |
| dbo:wikiPageRevisionID | 1071719020 (xsd:integer) |
| dbo:wikiPageWikiLink | dbr:Practical_joke dbr:Delphi_(programming_language) dbc:Windows_remote_administration_software dbr:Remote_administration dbr:SMTP dbr:Child_pornography dbr:Anti-virus dbr:Lund_University dbr:Client_(computing) dbr:Computer_program dbr:Client–server dbr:Keystroke_logging dbr:Windows_2000 dbr:Windows_95 dbr:Windows_98 dbr:Windows_ME dbr:Windows_NT_4.0 dbr:Windows_XP dbc:Remote_administration_software dbr:EXE dbr:POP3 dbr:Graphical_user_interface dbr:Kilobyte dbr:HTTP dbr:Internet_Relay_Chat dbr:Back_Orifice dbc:Common_trojan_horse_payloads dbc:Pascal_(programming_language)_software dbr:Swedish_language dbr:Trojan_horse_(computing) dbr:Tunneling_protocol dbr:Windows_registry dbr:Faceless_process dbr:Microsoft_Windows dbr:Netcat dbr:Operating_system dbr:Server_(computing) dbr:Shareware dbr:Screencast dbr:UNIX dbr:Script_kiddies dbr:TCP_and_UDP_port dbr:Carl-Fredrik_Neikter |
| dbp:caption | Screenshot of NetBus 1.5.3 client (en) |
| dbp:developer | dbr:Carl-Fredrik_Neikter |
| dbp:genre | dbr:Remote_administration |
| dbp:latestReleaseVersion | 2.010000 (xsd:double) |
| dbp:license | dbr:Shareware |
| dbp:name | NetBus (en) |
| dbp:operatingSystem | dbr:Microsoft_Windows UNIX-systems (en) |
| dbp:wikiPageUsesTemplate | dbt:Infobox_Software dbt:Morefootnotes dbt:Reflist dbt:Remote_administration_software |
| dbp:wordnet_type | http://www.w3.org/2006/03/wn/wn20/instances/synset-software-noun-1 |
| dct:subject | dbc:Windows_remote_administration_software dbc:Remote_administration_software dbc:Common_trojan_horse_payloads dbc:Pascal_(programming_language)_software |
| gold:hypernym | dbr:Program |
| rdf:type | owl:Thing dbo:Software schema:CreativeWork dbo:Work wikidata:Q386724 wikidata:Q7397 yago:WikicatCommonTrojanHorsePayloads yago:Abstraction100002137 yago:Chemical114806838 yago:Code106355894 yago:CodingSystem106353757 yago:Communication100033020 yago:Explosive103304730 yago:Material114580897 yago:Matter100020827 yago:Part113809207 yago:PhysicalEntity100001930 yago:Relation100031921 yago:Writing106359877 yago:WrittenCommunication106349220 yago:Software106566077 yago:Substance100019613 yago:Warhead104551375 umbel-rc:SoftwareObject |
| rdfs:comment | NetBus ist ein Fernwartungstool für Microsoft Windows, das meist illegal eingesetzt wird. In seiner Funktionalität entspricht es Back Orifice, verfügt allerdings über mehr Möglichkeiten. Es wurde von dem Schweden Carl-Fredrik Neikter in Delphi geschrieben, der die erste Version Mitte März 1998 veröffentlichte. Derzeit liegt das Programm in den Versionen 1.60, 1.70 und als NetBus 2.01 Pro vor. (de) NetBus es un programa utilizado para el control de una forma remota de sistemas informáticos Microsoft Windows a través de una red. Fue creado en 1998 y ha sido muy controvertido por su potencial de ser utilizado como una puerta trasera. (es) NetBus o Netbus è un software shareware per il controllo remoto di un computer con sistema operativo di Microsoft Windows attraverso una rete. (it) NetBus – aplikacja typu koń trojański, pozwalająca na przejmowanie kontroli nad komputerami. Aplikacja została napisana w marcu 1998 przez szwedzkiego programistę w Delphi. (pl) NetBus или Netbus — программа дистанционного управления компьютерной системой Microsoft Windows по сети. Она была создана в марте 1998 года на Delphi . Автор утверждал, что его программа создавалась, как «шутка», а не как программа, позволяющая незаконно проникать в компьютерные системы.NetBus имеет клиент-серверную архитектуру. (ru) NetBus是1990年代晚期流行的一個，當時常被駭客或腳本小子作為使用，所以被視為惡意程式。NetBus主要使用12345埠通信，只能運行於Windows系統，至多支援到Windows XP，所以現今已十分罕見。 (zh) NetBus or Netbus is a software program for remotely controlling a Microsoft Windows computer system over a network. It was created in 1998 and has been very controversial for its potential of being used as a trojan horse. NetBus was written in Delphi by , a Swedish programmer in March 1998. It was in wide circulation before Back Orifice was released, in August 1998. The author claimed that the program was meant to be used for pranks, not for illegally breaking into computer systems. Translated from Swedish, the name means "NetPrank". * Windows 95 * Windows 98 * Windows ME * Windows NT 4.0 (en) NetBus é um trojan. Ferramenta de administração remota com uma interface muito simples e muito fácil de utilizar que utiliza a porta 12345.Tem funções como abrir e fechar drive de cd, iniciar algum programa, controlar mouse entre outras. o Indivíduo que controla a máquina infectada remotamente, pode fazer download, abrir programas, deletar arquivos e formatar partições. Um perigo se cair em mãos mal-intencionadas, porém sendo muito útil em assistência remota. As funções do Net Bus incluem: (pt) NetBus är en programvara som lanserades 1998 för att kunna kontrollera datorer över ett nätverk. Programmet är skrivet i Delphi av den svenske programmeraren och är det första kända dolda som man vet har fått spridning. Neikter, som var 20 år när programmet skrevs, hävdade han gjort NetBus för att kunna busa, inte för att olagligt bryta sig in i andra datorsystem. Programmet ledde till att Carl-Fredrik Neikter kontaktades av NASA:s säkerhetsansvarige och även amerikanska flygvapnet var intresserade och fick programmets källkod för att kunna stoppa intrång i sina system. (sv) |
| rdfs:label | NetBus (de) NetBus (es) NetBus (it) NetBus (en) NetBus (pl) NetBus (ru) NetBus (pt) NetBus (sv) NetBus (zh) |
| owl:sameAs | freebase:NetBus http://sw.cyc.com/concept/Mx4rv52biJwpEbGdrcN5Y29ycA yago-res:NetBus wikidata:NetBus dbpedia-de:NetBus dbpedia-es:NetBus dbpedia-fa:NetBus dbpedia-he:NetBus dbpedia-it:NetBus dbpedia-pl:NetBus dbpedia-pt:NetBus dbpedia-ru:NetBus dbpedia-sl:NetBus dbpedia-sv:NetBus dbpedia-zh:NetBus https://global.dbpedia.org/id/4mdFh |
| prov:wasDerivedFrom | wikipedia-en:NetBus?oldid=1071719020&ns=0 |
| foaf:isPrimaryTopicOf | wikipedia-en:NetBus |
| foaf:name | NetBus (en) |
| is dbo:wikiPageRedirects of | dbr:Netbus dbr:NetBus_(trojan_horse) |
| is dbo:wikiPageWikiLink of | dbr:List_of_TCP_and_UDP_port_numbers dbr:Sub7 dbr:Netbus dbr:NetBus_(trojan_horse) |
| is foaf:primaryTopic of | wikipedia-en:NetBus |