Creating a CGI List

By DreadKnight

Okay so you have a trojan and your deciding on a notification system. There are many ways such as ICQ notify, PHP, email, but I'm going to explain one of my favorites and a popular one. CGI Notify.

Okay I'll do this in steps.

1. Go to h**p://www.netfirms.com/ and create and account.

2. If you can't find the FREE subdomain signup link then go here h**p://www.netfirms.com/hostingbasic/NF/46edb3257c4dac8cd7df29e29847a140
Click on the YELLOW Signup Now button. Then look for the link called " I prefer a free Netfirms Subdomain" and Click on it.

3. Type the domain name that you desire. Example h**p://mysite.netfirms.com/ . You'll have to activate your account. MAKE SURE YOU WRITE DOWN YOUR Member name, Password, and FTP Address.

4. Okay so know you have your ftp account. Okay, now you need an FTP Client so you can access your cgi-bin in your ftp server. If you have one then great skip this part. Otherwise go to h**p://www.download.com and either download ws_ftp LE or CuteFTP.

5. Once you have downloaded it, Install it and Open it.

6. I'm going to explain WS_FTP LE (CuteFTP should be the basically the same). When you open it a window should pop up asking for information. (Window is called Session Properties in WS_FTP LE). Click New

7. For Profile name you can name it whatever you want.

8. Okay now remember when I told you to WRITE DOWN that information that you got from your email? This is where you need it. Where is says Host Name/Address: Type your ftp address. Example mysite.netfirms.com/

9. Your User ID is your Netfirms Member name which you got in your email type that in. 

10. Password is your password for your netfirms website. Also came in your email.

11. You dont have to put anything in Account and Comment.

12. If everything is correct than you should connect without any problems. If you got any then make sure you typed your infomation correctly.

13. Okay on your right you should see some folders. Cgi-Bin and WWW. Now you have done MOSTLY the ftp part. 

14. Okay now go back to your trojan. Sooooo if you downloaded CIA 1.2 for example then there should be a folder called Loggers. If your trojan does not have files for a cgi logger then get it off this forum. (Member maybe). Open the folder Loggers and then open the folder cgi-logger.

15. There should be 4 files. list.cgi, log.cgi, log.txt, ReadMe.txt. The only important ones are the first 3. Now we have to do some editing.

16 Open list.cgi in notepad and look for something that looks like this.

$bestand='log.txt';
$correctpass = "password";
$scriptlocation = "";
$password = $in{'password'};
$function = $in{'function'};

17. Okay leave the first line alone. Where it says $correctpass you need to change the word in between the "" to a password that you will remember. This password will appear when you try to access your cgi list so no leecher can steal your vics. So for example $correctpass = "mypassword";

18. Okay not $scriptlocation is importent. MAKE SURE YOU TYPE THIS %100 corr
ectly. The script location is your netfirms website BUT it points to the file which your are going to upload in a minute. This may sound confusing so listen to my example. Example $scriptlocation = "http://mywebsite.netfirms.com/cgi-bin/list.cgi"; EVERYTHING SHOULD BE THE SAME AS THE ABOVE STATEMENT except the mywebsite. That should be your website.

19. Leave the rest alone. Okay now close notepad and save what you just have edited. Open your FTP program.

20. You should have the prior information saved so you just have to connect. But you might have to type your information again if u messed up. Connect now.

21. On the right double click on cgi-bin. OKAY NOW YOU NEED TO UPLOAD YOUR CGI FILES.

22. Upload log.cgi, list.cgi, and log.txt. OKAY now we are almost finished.

23. You have to make your trojan notification part in your edit server. So open you edit server and go to the cgi-notify area.

24. Make sure you have Enabled Cgi Notify CHECKED. Then where it says Script URL you want to lead to your log.cgi file. EXAMPLE h**p://mysite.netfirms.com/cgi-bin/log.cgi . If your edit server has a test cgi-notify option on it then i suggest you click that. Once you filled that in and all the other options then created server.

25. if you clicked test cgi notify then go to your cgi server website it should be. h**p://mysite.netfirms.com/cgi-bin/list.cgi , Type your password and if you see a hit called test. THEN IT WORKS! Otherwise you might have make a mistake in your server.

26. NOW INFECT as much people as you can and if you get vics then CONGRATS! Otherwise if you still have problems then review this tutorial and make sure you didnt mess anything up.

Frequent Mistakes

- When you are in you edit server make sure your link points to log.cgi not list.cgi

- Make sure when you are connecting to your ftp that all your information is correct. When you create an account they give you a password which is like cs89gj or something.

- Make sure when you edit the list.cgi file that you point to the list.cgi in the scriptlocation. Example h**p://mysite.netfirms.com/cgi-bin/list.cgi