egghelp/eggheads community

Botnet not sharing userinfo

2010-09-16T19:29:59-04:00

I'm an idiot. I must have disabled the share module when I first set this up, thinking I wasn't going to use a botnet. Uncommented that line and it's working.

Thanks for pointing me in the right direction.

Statistics: Posted by hjbotha — Thu Sep 16, 2010 7:29 pm

Botnet not sharing userinfo

2010-09-16T18:52:02-04:00

It doesn't show either a + or -, which I'm guessing is a bad sign?

Code:

.vbottreecameron (1.6.19.1)  `--roger (1.6.19.1)Average hops: 1.0, total bots: 2.bottreecameron  `--rogerAverage hops: 1.0, total bots: 2

I changed shirley's name.

Statistics: Posted by hjbotha — Thu Sep 16, 2010 6:52 pm

Botnet not sharing userinfo

2010-09-16T18:46:40-04:00

Oh, sorry, didn't notice that. That confirms that your eggdrops are properly linked.
Could you issue the .bottree or .vbottree; that should show a tree-like representation of the currently linked botnet (from the POV of the current eggdrop). In front of each linked bot, there should be either a dash (-) or a plus-sign (+). Plus indicates that userfile sharing is enabled and working.

Statistics: Posted by nml375 — Thu Sep 16, 2010 6:46 pm

Botnet not sharing userinfo

2010-09-16T18:19:05-04:00

They say (linked) in whois and .dccstat shows the connection. What else should I look for to make sure they're communicating?

I'm using bmotion and that script is able to communicate with the other bot running the same script.

Edit: Also adjusted port to be 10 apart. No difference yet.

Statistics: Posted by hjbotha — Thu Sep 16, 2010 6:19 pm

Botnet not sharing userinfo

2010-09-16T17:54:05-04:00

Do they link properly?

Worth thinking of, try and keep the ports spaced apart when running on the same host. If a telnet-port is currently not available, eggdrop will try the suceeding 10 ports until it finds a free one, and the same when connecting.

Statistics: Posted by nml375 — Thu Sep 16, 2010 5:54 pm

Botnet not sharing userinfo

2010-09-16T17:32:08-04:00

Hi guys,

I've set up a botnet consisting of 2 bots but I can't seem to get them to share userinfo.

They're on the same server but with different telnet ports, in case that's relevant.

They have different hostmasks (the IDENT portion) so they can be told apart.

shirley is the hub, roger a leaf.

On shirley:

Code:

.whois rogerHANDLE    PASS NOTES FLAGS           LASTroger     yes      0 b               22:16 (linked)   #rawr              s               never   #coffeeshop        s               22:11  BOT FLAGS: p  HOSTS: *!roger@reversed.hostname  ADDRESS: (my hostname)     users: 3444, bots: 3444

and roger:

Code:

.whois shirley[22:25] #eremos# whois shirleyHANDLE    PASS NOTES FLAGS           LASTshirley   yes      0 b               22:16 (linked)   #rawr              s               never   #coffeeshop        s               never  BOT FLAGS: hs  HOSTS: *!eggdrop@reversed.hostname  ADDRESS: hostname     users: 3443, bots: 3443

The only odd things I can see is the "never" as if they have never seen the bot in either of those channels, but I don't know if that's relevant or what might cause it.

.channel on roger doesn't show any evidence of information transferred from shirley.

I'm also not 100% clear on which one should be +s and which one +p, but I've tried both ways with no luck.

Thanks

Statistics: Posted by hjbotha — Thu Sep 16, 2010 5:32 pm