Cookie speedran this in 33** seconds, I did it in 36 seconds (mine was an improvised version), who else is SPEED?
Enjoy level.
also, I have decided to open a political conversation about Sub7, check out the quote below for more details, I wrote all of this btw:
Main menu
WikipediaThe Free Encyclopedia
Search Wikipedia
Search
Create account
Log in
Personal tools
Contents hide
(Top)
History
Architecture and features
Uses and incidents
See also
References
External links
Sub7
Article
Talk
Read
Edit
View history
Tools
From Wikipedia, the free encyclopedia
Sorry to interrupt, but our fundraiser won't last long
This Tuesday, we ask you to join the 2% of readers who give. If everyone reading this right now gave just $2.75, we'd hit our goal in a couple of hours. $2.75 is all we ask.
GIVE $2.75 MAYBE LATER
December 19: Wikipedia still can't be sold.
We're sorry we've asked you a few times recently, but it's Tuesday, December 19, and it will soon be too late to help the nonprofit behind Wikipedia in this end-of-year fundraiser in the United States. Wikipedia is free and doesn't rely on ads. Just 2% of readers donate, so if Wikipedia has given you $2.75 worth of knowledge, please give. Any contribution helps, whether it's $2.75 or $25.
Give $2.75
Give a different amount
Wikimedia Foundation Logo
MAYBE LATER I ALREADY DONATED
CLOSE
For the band, see Subseven.
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed.
Find sources: "Sub7" – news · newspapers · books · scholar · JSTOR (April 2014) (Learn how and when to remove this template message)
Sub7
Original author(s) mobman
Preview release
0.9 / 2014
Written in Delphi
Operating system Microsoft Windows
Type Trojan horse (computing)
License freeware
Website sub7crew.org
Sub7, or SubSeven or Sub7Server, is a Trojan horse program originally released in 1999.[1][2] Its name was derived by spelling NetBus backwards ("suBteN") and swapping "ten" with "seven". As of June 2021, the development of Sub7 is being continued.[3]
Because its typical use is to allow undetected and unauthorized access, Sub7 is usually described as a trojan horse by security experts.[4][2][5][6][7][8] Starting with version 2.1 (1999) it could be controlled via IRC. As one security book phrased it: "This set the stage for all malicious botnets to come."[6] Additionally Sub7 has some features deemed of little use in legitimate remote administration like keystroke logging.[6]
Sub7 worked on the Windows 9x and on the Windows NT family of operating systems, up to and including Windows 8.1.[7]
History
[icon]
This section needs expansion with: early history. You can help by adding to it. (January 2014)
Sub7 has been claimed to be the creation of a hacker with the handle "mobman".[9] Until today, "mobman" claims to be the creator, but the original ownership of the software is not yet clearly attributed to a specific individual.
No development had occurred in several years until a new version was scheduled for release on February 28, 2010.
In 2006 (sub7legends.net) re-opened with hundreds of thousands of users, and has kept Sub7 alive with clean downloads and support and new software releases.
SubSeven 2.3, released on March 9, 2010, was revamped to work on all 32-bit and 64-bit versions of Windows and includes TCP Tunnel and Password Recovery for browsers, instant messengers and email clients. It was very buggy and was not written in Delphi which the original author used. The website that claimed to do this is no longer active.
In June 2021, a completely new alpha version was released with a similar look and feel to the original release, but it is not developed by the original author.[10]
Architecture and features
Like other remote admin programs, Sub7 is distributed with a server and a client. The server is the program that the host must run in order to have their machines controlled remotely, and the client is the program with a GUI that the user runs on their own machine to control the server/host PC. Computer security expert Steve Gibson once said that with these features, Sub7 allows a hacker to take "virtually complete control" over a computer. Sub7 is so invasive, he said, that anyone with it on their computer "might as well have the hacker standing right next to them" while using their computer.[11]
Sub7 has more features than Netbus (webcam capture, multiple port redirect, user-friendly registry editor, chat and more).
According to a security analysis,[12] Sub7's server-side (target computer) features include:
recording:
sound files from a microphone attached to the machine
images from an attached video camera
screen shots of the computer
retrieving a listing of recorded and cached passwords
taking over an ICQ account used on the target machine (back then the most popular messaging service); added in version 2.1. This included the ability to disable the local use of the account and read the chat history
features which were presumably intended to be used for prank or irritating purposes including:
changing desktop colors
opening and closing the optical drive
swapping the mouse buttons
turning the monitor off/on
"text2speech" voice synthesizer which allowed the remote controller to have the computer "talk" to its user
penetration testing features, including a port scanner and a port redirector
On the client-side the software had an "address book" that allowed the controller to know when the target computers are online. Additionally the server program could be customized before being delivered by a so-called server editor (an idea borrowed from Back Orifice 2000). Customizations possible with the Sub7 server editor included changing the port addresses, displaying a customized message upon installation that could be used for example "to deceive the victim and mask the true intent of the program".[12] The Sub7 server could also be configured to notify the controller of IP address changes of the host machine by email, ICQ or IRC.[13]
Connections to Sub7 servers can be password protected with a chosen password.[13] A deeper reverse engineering analysis revealed however that "SubSeven's author has secretly included a hardcoded master password for all of his Trojans! The Trojan itself has been Trojaned".[8] For Version 1.9 the master password is predatox and 14438136782715101980 for versions 2.1 through 2.2b. The Master Password for SubSeven DEFCON8 2.1 Backdoor is acidphreak.[14]
Uses and incidents
SubSeven has been used to gain unauthorized access to computers. While it can be used for making mischief (such as making sound files play out of nowhere, change screen colors, etc.), it can also read keystrokes that occurred since the last boot—a capability that can be used to steal passwords and credit card numbers.[15]
In 2003, a hacker began distributing a Spanish-language email purporting to be from security firm Symantec that was used to trick recipients into downloading Sub7.[16]
Although Sub7 is not itself a worm (has no built-in self-propagation features) it has been leveraged by some worms such as W32/Leaves (2001).[5][17]
Some versions of Sub7 include code from Hard Drive Killer Pro to format the hard drive, this code will only run if it matched the ICQ number of "7889118" (mobman's rival trojan author.)[18]
See also
Back Orifice
Back Orifice 2000
Trojan horse (computing)
Malware
Backdoor (computing)
Rootkit
MiniPanzer and MegaPanzer
File binder
References
"Sub7 Legacy". www.sub7crew.org. Retrieved 2021-06-19.
John R. Vacca (2013). Network and System Security (2nd ed.). Elsevier. p. 63. ISBN 978-0-12-416695-0.
"Sub7 Legacy". www.sub7crew.org. Retrieved 2021-06-19.
Christopher A. Crayton (2003). Security+ Exam Guide. Cengage Learning. p. 340. ISBN 1-58450-251-7.
Mohssen Mohammed; Al-Sakib Khan Pathan (July 2013). Automatic Defense Against Zero-day Polymorphic Worms in Communication Networks. CRC Press. p. 105. ISBN 978-1-4822-1905-0.
Craig Schiller; James R. Binkley (2011). Botnets: The Killer Web Applications. Syngress. p. 8. ISBN 978-0-08-050023-2.
Diane Barrett; Todd King (2005). Computer Networking Illuminated. Jones & Bartlett Learning. pp. 521–. ISBN 978-0-7637-2676-8.
Cyrus Peikari; Anton Chuvakin (2004). Security Warrior. O'Reilly Media. p. 31. ISBN 978-0-596-55239-8.
"mobman – Darknet Diaries". darknetdiaries.com. Retrieved 2021-12-09.
"Sub7 Legacy". www.sub7crew.org. Retrieved 2021-06-19.
Gibson, Steve. The strange tale of the denial of service attacks on grc.com. 2002-03-05.
Crapanzano, Jamie (2003), "Deconstructing SubSeven, the Trojan Horse of Choice., SANS Institute Information Security Reading
Eric Cole (2002). Hackers Beware. Sams Publishing. p. 569. ISBN 978-0-7357-1009-2.
SANS, A Risk to Your Internet Security Chapter Name: "The Inner Workings of Sub7" on page 14 notes several master passwords used.
Sub7 analysis from Sophos
"Symantec report on Sub7". Symantec.com. Retrieved 2012-08-28.
"The CERT Division | Software Engineering Institute".
admin (2018-12-14). "Who is the real mobman?". illmob. Retrieved 2020-07-15.
External links
Website
http://www.giac.org/paper/gcih/36/subse ... nus/100239
Darknet Diaries Podcast Ep 20:mobman
Screenshot of subseven V2.2 readme
https://come.to/subseven/
vte
Remote administration software
General
Remote desktop softwareComparison of remote desktop software
Implementations
Absolute ManageAetherPalAnyDeskApple Remote DesktopChrome Remote DesktopCitrix Virtual AppsConnectWise ControlCrossloopIBM BigFixLogMeInMicrosoft System Center Configuration ManagerNetSupport ManagerpcAnywhereRealVNCRemote Desktop ServicesRemote UtilitiesRescueAssistscrcpySecure ShellSplashtopStrongDMTeamViewerThinLincTightVNCTimbuktuUltraVNCVirtual Network ComputingNX technology
Controversial Implementations
Back OrificeBack Orifice 2000NetBusSub7
Categories: Windows remote administration softwareWindows trojansPascal (programming language) software
This page was last edited on 6 November 2023, at 23:58 (UTC).
Text is available under the Creative Commons Attribution-ShareAlike License 4.0; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization.
Privacy policyAbout WikipediaDisclaimersContact WikipediaCode of ConductDevelopersStatisticsCookie statementMobile viewWikimedia FoundationPowered by MediaWiki
Toggle limited content width
I need to go back and play more of your adventures (I have a really big backlog of adventures I need to play lol), and I'll also be looking forward to your next adventure, not the least because of what was hinted in this one... 
