Changes between Version 7 and Version 8 of RubotSoftware


Ignore:
Timestamp:
Jul 8, 2010 6:20:00 PM (14 years ago)
Author:
arod
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • RubotSoftware

    v7 v8  
    1515When you start SEER select the 'Worm' agent from the attack menu.  The 'IRC Host' variable specifies which node will run the IRC server  Make sure each node has a path to the IRC server so they can talk. This worm is started at one node and pointed towards other nodes within the network.  The node which starts the worm is specified by the 'Worm Start' variable.  This node needs to be different from the IRC server.  The worm does not penetrate any defenses, but will successfully defeat a node if the node has a vulnerable server running on it (vulnserv.rb).  Select the nodes you want to become vulnerable in the 'Vulnerable Servers' variable.  The worm will branch out from the 'Worm Start' node and will attack the IP addresses you specify in the 'Target IPs' variable. 
    1616
     17[[Image(Screenshot-SEER.png)]]
     18
    1719Once the vulnerable node has been 'attacked' by the worm it will run a series of commands embedded in vulnserv.rb.  These commands are running the payload, initiating communication with an IRC server, and attacking the next level of IP addresses.  The current payload is a get call to a website.  The communication between the bots and the IRC server is limited.  The bots will accept commands from the nick 'botmaster.'  The only commands they respond to are 'hi' and 'quit.'  For 'hi' each bot will respond with 'hi' and for 'quit' each bot will leave the IRC server and stop running vulnserv.rb.  More commands can be programed by altering vulnserv.rb.
    1820