Re: [update proposal] irc-info.nse, default botnets chan names report

[Ron <ron () skullsecurity net>]

it might be neat to find other potentially unwanted channels - like #warez or various credit-card hacker channels - 
#ccpower was the most common, but so was #carding, #cashout, #cashouts, and #ccpowerz. They would frequently install 
covert irc servers or co-opt that room on legit servers. 

Ron

On Sat, 4 Jun 2011 09:14:55 +0200 Ange Gutek <ange.gutek () gmail com> wrote:
> Here attached is an update for irc-info.nse.
> It adds a LIST command in order to report some default botnets chan
> names. If any, the output has a new line :
> -- @output
> -- 6665/tcp open     irc
> -- |  irc-info: Server: target.example.org
> -- |  Version: hyperion-1.0.2b(381). target.example.org
> -- |  Lservers/Lusers: 0/4204
> -- |  Uptime: 106 days, 2:46:30
> -- |  Source host: source.example.org
> -- |  Source ident: OK n=nmap
> -- |_ Possible BotNets: #loic, #RxBot
>
>
> Regards,
>
> A.G.
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/