egghelp/eggheads community

botnet hacked..

2004-03-04T21:16:25-04:00

yeah..I know..if we'd live in a perfect world..
ok..thnx for all posts..
enjoy..

Statistics: Posted by Tex — Thu Mar 04, 2004 9:16 pm

Re: botnet hacked..

2004-03-04T13:44:50-04:00

well..looks like he owned my shell.
How was he able to get access to your shell? He cracked your password?

i think this is your main problem... if he has got access to your shell, then you can forget all your security concepts...

Statistics: Posted by arcane — Thu Mar 04, 2004 1:44 pm

botnet hacked..

2004-03-04T04:54:33-04:00

CNT..where can I find that?emm..if I add some tcl on leaf bot..he can edit the .conf file and remove that tcl..it would be good to have a tcl on hub..like it would't let the bot link if the bot reject the userlist dowload..because he can also change and remove the +p flag from the hub..than the bot links..it doesn't share..bot the user still has acces to .netpart ...

Statistics: Posted by Tex — Thu Mar 04, 2004 4:54 am

botnet hacked..

2004-03-04T04:39:42-04:00

emm..my hub ignores any flag changes..but he cleared one owners pass and added new host..so the hub didn't ignore anything..
hub is offline..hmm..all bots have acces thru telnet and dcc..but i don't see solution in that..
CNT script?will look at it..
thnx..

Statistics: Posted by Tex — Thu Mar 04, 2004 4:39 am

botnet hacked..

2004-03-03T23:11:05-04:00

don`t let the hub bot accept changes from leaf bots.
meaning, the hub bot can ignore any global flags that have been added to the leafs. you need global owner to netpart

remove dcc/ctcp chat from leafs, remove user port, and have the hub offline.

don't stick bots on unsecure shells.

could try to use the CNT script, it uses encryption on all files and it is simple to set up

Statistics: Posted by j0n — Wed Mar 03, 2004 11:11 pm

Re: botnet hacked..

2004-03-03T22:05:07-04:00

well..looks like he owned my shell.

How was he able to get access to your shell? He cracked your password?

Statistics: Posted by egghead — Wed Mar 03, 2004 10:05 pm

botnet hacked..

2004-03-03T19:16:14-04:00

well..looks like he owned my shell..bot stopped logging..i guess because of chmode 500 eggdrop.log..added himself to the userlist..used the .netpart command..and f..... up my channels..
however..can I do anything to stop that in future?
and yeah..sorry for my bad english..

Statistics: Posted by Tex — Wed Mar 03, 2004 7:16 pm