Changes between Version 8 and Version 9 of RubotSoftware
- Timestamp:
- Jul 8, 2010 6:30:13 PM (14 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
RubotSoftware
v8 v9 19 19 Once the vulnerable node has been 'attacked' by the worm it will run a series of commands embedded in vulnserv.rb. These commands are running the payload, initiating communication with an IRC server, and attacking the next level of IP addresses. The current payload is a get call to a website. The communication between the bots and the IRC server is limited. The bots will accept commands from the nick 'botmaster.' The only commands they respond to are 'hi' and 'quit.' For 'hi' each bot will respond with 'hi' and for 'quit' each bot will leave the IRC server and stop running vulnserv.rb. More commands can be programed by altering vulnserv.rb. 20 20 21 [[Image(~-1.png)]] 22 21 23 Once the variables have been set, STARTIRC will start the IRC server and STARTBOT will begin the propagation of the worm. You can monitor the status of the bots logging onto the IRC server by joining the IRC server on channel #test.