Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: [update proposal] irc-info.nse, default botnets chan names report
From: Ron <ron () skullsecurity net>
Date: Thu, 16 Jun 2011 17:43:19 -0500

it might be neat to find other potentially unwanted channels - like #warez or various credit-card hacker channels - 
#ccpower was the most common, but so was #carding, #cashout, #cashouts, and #ccpowerz. They would frequently install 
covert irc servers or co-opt that room on legit servers. 

Ron

On Sat, 4 Jun 2011 09:14:55 +0200 Ange Gutek <ange.gutek () gmail com> wrote:
Here attached is an update for irc-info.nse.
It adds a LIST command in order to report some default botnets chan
names. If any, the output has a new line :
-- @output
-- 6665/tcp open     irc
-- |  irc-info: Server: target.example.org
-- |  Version: hyperion-1.0.2b(381). target.example.org
-- |  Lservers/Lusers: 0/4204
-- |  Uptime: 106 days, 2:46:30
-- |  Source host: source.example.org
-- |  Source ident: OK n=nmap
-- |_ Possible BotNets: #loic, #RxBot


Regards,

A.G.
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]