ykankaya / throwbacklp

Listening Post for Throwback Implant

0. Prepare the environment
1. apt-get install apache2 mysql-server php5 phpmyadmin curl libcurl3 php5-curl build-essential php-pear
2. Configure Apache to allow SSL connections.
3. wget http://librarian.launchpad.net/7477840/apache2-ssl.tar.gz
4. tar -zxvf apache2-ssl.tar.gz
5. mv ssleay.cnf /usr/share/apache2/ssleay.cnf
6. mkdir /etc/apache2/ssl
7. ./apache2-ssl-certificate -days 3650
8. a2enmod ssl
9. a2ensite default-ssl
10. Configure Throwback LP
11. Open PHPMyAdmin by going to http://NAME-OF-SITE/phpmyadmin 1. Log into the database 2. Click on the SQL icon in the upper left corner 3. Paste the contents of throwbackcp.sql. This will create an empty database instance.
12. Upload TB LP files to server
13. Modify cp/includes/conf.php if any default installation instructions have been modified.
14. Move index.php, res.php, and the cp folder to all the domains configured in /opt/web/
15. You can now access the Throwback LP server at https://NAME-OF-SITE/cp/index.php
16. The default username is root and the default password is Throwback!@#
17. Configure Metasploit for use with Throwback
18. Download and install Metasploit Framework
19. See ./cp/includes/msfrpcd.php for detailed instructions
20. Allow remote access to MySQL if necessary (if more than one LP)
21. vim /etc/mysql/my.cnf and change bind-address to 0.0.0.0
22. GRANT ALL ON throwbackcp.* TO tblp@'<ip_address>' IDENTIFIED BY 'ThrowbackPwnage!@#';
23. FLUSH PRIVILEGES;