Security Incidents mailing list archives

Re: IRC-bots: what are they for ?


From: jens () SE LINUX ORG (Jens Hjalmarsson)
Date: Wed, 12 Jan 2000 21:57:55 +0100


Bots are mostly used in "takeovers" and wars on IRC. Almost all
mIRC-Warriors have them, and uses them to flood other people, and protect
themselves against takeovers by the other takeover-groups out there.

Does it give any backdoors to the system (file access,
interactive access, monitoring, etc) ?
You can use .tcl exec command inside the bot to execute a comand on the
remote system. You can also read files and such, but only as the user
running the bot.

Is such a bot possibly part of a larger communication
infrastructure, maybe like the tfn/trinoo/stacheldraht
thingie  ?
It CAN be by running a TCL-script on it, but mostly they only have scripts
for IRC-based DoS attacks.

/Jens


Current thread: