egghelp/eggheads community

Only specified users may use .+user command

2001-11-08T00:24:00-04:00

Statistics: Posted by Wcc — Thu Nov 08, 2001 12:24 am

Only specified users may use .+user command

2001-11-07T20:21:00-04:00

huh, It works! Tnx ... I owe you a beer!;)

Statistics: Posted by Guest — Wed Nov 07, 2001 8:21 pm

Only specified users may use .+user command

2001-11-07T19:42:00-04:00

You can use the same proc for all of these, but chattr and adduser needed to be wild-card-ified

bind filt - ".-u* * *" +user:check
bind filt - ".addu* +user:check
bind filt - ".chatt* *" +user:check
bind filt - ".die" +user:check

Statistics: Posted by Wcc — Wed Nov 07, 2001 7:42 pm

Only specified users may use .+user command

2001-11-07T15:36:00-04:00

Now I would like to add these commands into the forbidden list:

.-user
.adduser
.chattr
.die

Is this tho solution to my problem if I add these lines to this .+user script?:

bind filt - ".-u* * *" -user:check
bind filt - ".adduser* * *" adduser:check
bind filt - ".chattr* *" chattr:check
bind filt - ".die" die:check

and then what do I have to add to proc lines?

Please help me adding these commands to be restricted like +user.

Thanx

Statistics: Posted by Guest — Wed Nov 07, 2001 3:36 pm

Only specified users may use .+user command

2001-11-07T10:31:00-04:00

Huh, indeed;)
tnx again!

Statistics: Posted by Guest — Wed Nov 07, 2001 10:31 am

Only specified users may use .+user command

2001-11-07T03:34:00-04:00

You also want to disable the .adduser command i'm sure.

Statistics: Posted by Wcc — Wed Nov 07, 2001 3:34 am

Only specified users may use .+user command

2001-11-06T19:09:00-04:00

hm, ok... i will add this too...

Thank you for your help!

Statistics: Posted by Guest — Tue Nov 06, 2001 7:09 pm

Only specified users may use .+user command

2001-11-06T19:08:00-04:00

ok I managed the problem.. the problem was .+u* * * -> that has not solved the problem when I wrote .+user name .. and then later .+host

... I handeled that one;)

Statistics: Posted by Guest — Tue Nov 06, 2001 7:08 pm

Only specified users may use .+user command

2001-11-06T19:07:00-04:00

After the line

putdcc $idx "What? You need '.help'"

Add the line

return ""

Statistics: Posted by ppslim — Tue Nov 06, 2001 7:07 pm

Only specified users may use .+user command

2001-11-06T18:40:00-04:00

This is burjok.tcl script. I added it and then rehashed and restarted my bot. But still all (m&n) users may add people into the botnet. I have 2 bots on my botnet.

Have I made a mistake?

set allowed "SIPko burek12 kmeto"

bind filt - ".+u* * *" +user:check

proc +user:check {idx args} {

global allowed

set usernick [idx2hand $idx]

if {[lindex $args 1] == ""} {

set icmd [lindex $args 0]

set args "$icmd "

}

if {[lsearch -exact [string tolower $allowed] [string tolower $usernick]] == -1} {

putdcc $idx "What? You need '.help'"

} else {

return $args

}

}

putlog "burjok adduser skripta loaded:P"

[ This Message was edited by: sipko on 2001-11-06 15:43 ]

[ This Message was edited by: sipko on 2001-11-06 15:45 ]

Statistics: Posted by Guest — Tue Nov 06, 2001 6:40 pm

Only specified users may use .+user command

2001-11-06T17:34:00-04:00

Oh, tnx!!

Statistics: Posted by Guest — Tue Nov 06, 2001 5:34 pm

Only specified users may use .+user command

2001-11-06T16:11:00-04:00

.su is password protected.

If memory serves me correct, only permanent owners (defined in the config file) can SU without using a password, all other users requir a password.

Statistics: Posted by ppslim — Tue Nov 06, 2001 4:11 pm

Only specified users may use .+user command

2001-11-06T15:51:00-04:00

Huh, guys tnx!

I will test this right away.

But i found out that there is another problem. All users can .su to antoher user and then add user.

how can I enable .su with password protection?

Statistics: Posted by Guest — Tue Nov 06, 2001 3:51 pm

Only specified users may use .+user command

2001-11-06T14:59:00-04:00

Code:

bind filt - ".+user" +user:check

Should be

Code:

bind filt - ".+u* * *" +user:check

, otherwise you could bypass it with .+u

Statistics: Posted by Wcc — Tue Nov 06, 2001 2:59 pm

Only specified users may use .+user command

2001-11-06T14:38:00-04:00

I guess you could use the filt command for this.

the code would be something like this:

Code:

# users that can use the +user commandset allowed "user1 user2"bind filt - ".+user" +user:checkproc +user:check {idx args} {global allowed set usernick [idx2hand $idx] if {[lindex $args 1] == ""} {  set icmd [lindex $args 0]  set args "$icmd " } if {[lsearch -exact [string tolower $allowed] [string tolower $usernick]] == -1} {   putdcc $idx "What? You need '.help'" } else {  return $args }}

this would only allow 'user1' and 'user2' to use the +user command

Statistics: Posted by greenbear — Tue Nov 06, 2001 2:38 pm