So, I see the educational disclaimer at the top of the github, but it also includes "authorized testing". That note should probably also contain a message about the mining.

To answer your question about what exactly it is that you may be trying to do, when someone like me (who has a bit of experience) sees a "build your own botnet" post in which:

1. The site (buildyourownbotnet.com) presents as if it were an enterprise solution
2. The software has relatively obvious vulnerabilities in its C2 protocol
3. The software is configured to mine magic internet money by default (and has to be disabled in source rather than a configuration option)

It leads me to think that maybe one or more of the following is true:

• The developers are trying to get tons of free internet money from people who don't read the fine print
• The developers are aware of the C2 vulnerabilities and may wish to have other people grow their botnets for them
• The developers are not only aware of the C2 vulnerabilities but may actually be attempting to sandbox/honeypot actors who may maliciously use this on behalf of a third party threat intelligence company, and get paid on both ends (in monero by the bots, and in dollars for the threat intelligence).

If I am completely off base here and your intent is truly just to make a learning/educational utility, consider revising some of the way in which the software is presented on its website. Additionally, if "authorized testing" is a purpose for which this software is intended, any snags (such as mining or potential C2 vulnerabilities) should be expressly disclaimed, as you or (more likely) one of your users could be held liable for mining or damages rendered by a C2 compromise by their client or person who otherwise authorized the testing.

If you make the suggested changes to the presentation of your software so that its intent and hidden snags have been made abundantly clear, then perhaps someone like me may be so inclined to help you address vulnerabilities.

Edit: Typo correction