Scan 28
Submission by Leon Ward (nard)

Next Slide


Diagram of attack: 2

List of commands used to set up the IRC Bouncer

PASS fargetta
:Welcome!psyBNC@lam3rz.de NOTICE * :psyBNC2.2.1
NICK Dj`bobz`
USER ahaa "bobz" "192.168.100.28" :-:OwNz:-
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Welcome Dj`bobz` !
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :You are the first to connect to this new proxy server.
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :You are the proxy-admin. Use ADDSERVER to add a server so the bouncer may connect.
:irc.psychoid.net NOTICE Dj`bobz` :psyBNC 2.2.1 Help (* = BounceAdmin only)
:irc.psychoid.net NOTICE Dj`bobz` :--------------------------------------
:irc.psychoid.net NOTICE Dj`bobz` :BHELP BWHO - Lists all Users on the Bouncer
:irc.psychoid.net NOTICE Dj`bobz` :BHELP PASSWORD - Sets your or another Users Password(Admin)
:irc.psychoid.net NOTICE Dj`bobz` :BHELP VHOST - Sets your vhost to connect thru
:irc.psychoid.net NOTICE Dj`bobz` :BHELP PROXY - Sets your proxy to connect thru
:irc.psychoid.net NOTICE Dj`bobz` :BHELP SETUSERNAME - Sets your User Name
:irc.psychoid.net NOTICE Dj`bobz` :BHELP SETAWAY - Sets your away-Text when you leave
:irc.psychoid.net NOTICE Dj`bobz` :BHELP SETLEAVEMSG - Sets your Leave-MSG when you leave
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LEAVEQUIT - If set to 1, parts all channels on quit
:irc.psychoid.net NOTICE Dj`bobz` :BHELP SETAWAYNICK - Sets your nick when you are offline
:irc.psychoid.net NOTICE Dj`bobz` :BHELP JUMP - Jumps to the next IRC-Server
:irc.psychoid.net NOTICE Dj`bobz` :BHELP BQUIT - Quits your current Server Connection
:irc.psychoid.net NOTICE Dj`bobz` :BHELP BCONNECT - Reconnects a bquitted Connection
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ACOLLIDE - Enables/Disables Anticollide
:irc.psychoid.net NOTICE Dj`bobz` :BHELP AIDLE - Enables/Disables Antiidle
:irc.psychoid.net NOTICE Dj`bobz` :BHELP AUTOREJOIN - Enables/Disables Auto-Rejoin
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ADDSERVER - Adds an IRC-Server to your Serverlist
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELSERVER - Deletes an IRC-Server by number
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTSERVERS - Lists all IRC-Servers added
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ADDNETWORK - Adds a seperate Network to your client
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELNETWORK - Deletes a Network from your client
:irc.psychoid.net NOTICE Dj`bobz` :BHELP SWITCHNET - Switches to a given Network
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ADDOP - Adds a User who may get Op from you
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELOP - Deletes an added User who got Op
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTOPS - Lists all added Ops
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ADDAUTOOP - Adds a User who gets Auto-Op from you
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELAUTOOP - Deletes an added User who got Op
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTAUTOOPS - Lists all added Auto-Ops
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ADDBAN - Adds a ban (global or to a channel)
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELBAN - Deletes a ban by Number
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTBANS - Lists all bans
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ADDASK - Adds a host/bot to ask Op from
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELASK - Deletes a host/bot to ask Op by Number
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTASK - Lists the hosts/bots to ask Op from
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ADDDCC - Adds a DCC-Connection to a bot
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTDCC - Lists all added DCC-Connectionc
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELDCC - Deletes a DCC-Connection by number
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DCCCHAT - Offers a DCC Chat to a given IRC User
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DCCANSWER - Answers to a DCC Chat-Request
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DCCENABLE - Enables/Disables DCC thru psybnc
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DCCSEND - Sends a file to a given IRC User
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DCCGET - Gets a DCC Send File from an IRC User
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DCCSENDME - Sends the bouncer User a File
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DCCCANCEL - Cancels a dccchat or a transfer
:irc.psychoid.net NOTICE Dj`bobz` :BHELP PLAYPRIVATELOG - Plays your Message Log
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ERASEPRIVATELOG - Erases your Message Log
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ADDLOG - Adds a Log source / filter
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELLOG - Deletes a Log source by number
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTLOGS - Lists all added Log sources/filters
:irc.psychoid.net NOTICE Dj`bobz` :BHELP PLAYTRAFFICLOG - Plays the Traffic Log
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ERASETRAFFICLOG - Erases the Traffic Log
:irc.psychoid.net NOTICE Dj`bobz` :BHELP SETUSERKEY - Sets the Key for an encrypted User-Connection
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * SETLINKKEY - Sets the Key for an encrypted Link-Connection
:irc.psychoid.net NOTICE Dj`bobz` :BHELP ENCRYPT - Encrypts talk to a given channel/user
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELENCRYPT - Deletes an encryption entry by number
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTENCRYPT - Shows a List of encrypted talks
:irc.psychoid.net NOTICE Dj`bobz` :BHELP TRANSLATE - Adds a translator to/from channels/users
:irc.psychoid.net NOTICE Dj`bobz` :BHELP DELTRANSLATE - Deletes a translator by number
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTTRANSLATE - Shows a List of translated talks
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * BREHASH - Rehashes the proxy and resets all Connections
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * MADMIN - Gives a User an Admin flag
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * UNADMIN - Removes the Admin flag from a User
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * BKILL - Kills a User from the proxy
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * SOCKSTAT - Shows/Logs the current Connections
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * ADDUSER - Adds a new User to the Bouncer
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * DELUSER - Deletes a User from the Bouncer
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * NAMEBOUNCER - Names your bouncer (needed for linking)
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * LINKTO - Adds a bouncer Link to the Host/Port
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * LINKFROM - Adds a bouncer Link from your Bouncer
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * RELAYLINK - Allows or disables a relayable Link
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * DELLINK - Deletes a Link to a bouncer
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTLINKS - Lists all Links to/from the Bouncer
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * RELINK - Resets a link to a bouncer by number
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * PLAYMAINLOG - Plays the Connection Log
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * ERASEMAINLOG - Erases the Connection Log
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * ADDALLOW - Adds a host allow to connect
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * DELALLOW - Deletes a host allow
:irc.psychoid.net NOTICE Dj`bobz` :BHELP * LISTALLOW - Lists the host allows on your proxy
:irc.psychoid.net NOTICE Dj`bobz` :BHELP SRELOAD - Reloads the Script for the User
:irc.psychoid.net NOTICE Dj`bobz` :BHELP LISTTASKS - Lists the current running tasks
:irc.psychoid.net NOTICE Dj`bobz` :BHELP BHELP - Lists this help or help on a topic
:irc.psychoid.net NOTICE Dj`bobz` :BHELP Use /QUOTE bhelp <command> for details.
:irc.psychoid.net NOTICE Dj`bobz` :BHELP - End of help
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:06:36 :New User:ahaa (-:OwNz:-) added by ahaa
ADDSERVER irc.stealth.net:6667
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Server irc.stealth.net port 6667 (password: None) added.
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:06:46 :User ahaa () trying irc.stealth.net port 6667 ().
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:06:49 :User ahaa () connected to irc.stealth.net:6667 ()
SETAWAYNICK Dj`bobz`
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :AWAY-Nick changed to 'Dj`bobz`'.
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:07:36 :User ahaa () got disconnected (from irc.stealth.net) Reason: Closing Link: Dj`bobz`[unknown@192.168.100.28] (Too many host connections (global))
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:07:42 :User ahaa () trying irc.stealth.net port 6667 ().
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:07:42 :User ahaa () connected to irc.stealth.net:6667 ()
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:08:27 :User ahaa () got disconnected (from irc.stealth.net) Reason: Closing Link: Dj`bobz`[unknown@192.168.100.28] (Too many host connections (global))
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:08:36 :User ahaa () trying irc.stealth.net port 6667 ().
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:08:36 :User ahaa () connected to irc.stealth.net:6667 ()
SETUSERNAME ownz
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Username changed to 'ownz'. You need to use JUMP to activate it.
JUMP
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Hop requested, changing servers.
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:09:21 :Hop requested by ahaa. Quitting.
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:09:21 :User ahaa () got disconnected (from irc.stealth.net) Reason: Closing Link: Dj`bobz`[unknown@192.168.100.28] (Too many host connections (global))
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:09:30 :User ahaa () trying irc.stealth.net port 6667 ().
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:09:30 :User ahaa () connected to irc.stealth.net:6667 ()
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:10:15 :User ahaa () got disconnected (from irc.stealth.net) Reason: Closing Link: Dj`bobz`[unknown@192.168.100.28] (Too many host connections (global))
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:10:24 :User ahaa () trying irc.stealth.net port 6667 ().
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:10:28 :User ahaa () connected to irc.stealth.net:6667 ()
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:11:11 :User ahaa () got disconnected (from irc.stealth.net) Reason: Closing Link: Dj`bobz`[unknown@192.168.100.28] (Too many host connections (global))
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:11:20 :User ahaa () trying irc.stealth.net port 6667 ().
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:11:20 :User ahaa () connected to irc.stealth.net:6667 ()
DELSERVER 1
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Server 1 deleted.
ADDSERVER irc.stealth.net:5555
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Server irc.stealth.net port 5555 (password: None) added.
AIDLE 1
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :AIDLE enabled.
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:12:03 :User ahaa () got disconnected (from irc.stealth.net) Reason: Closing Link: Dj`bobz`[unknown@192.168.100.28] (Too many host connections (global))
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:12:15 :User ahaa () trying irc.stealth.net port 5555 ().
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:12:16 :User ahaa () connected to irc.stealth.net:5555 ()
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:12:38 :User ahaa () got disconnected (from irc.stealth.net) Reason: Closing Link: Dj`bobz`[unknown@192.168.100.28] (Too many host connections (global))
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:12:53 :User ahaa () trying irc.stealth.net port 5555 ().
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:12:53 :User ahaa () connected to irc.stealth.net:5555 ()
SETUSERNAME nZ
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Username changed to 'nZ'. You need to use JUMP to activate it.
JUMPè
JUMP
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Hop requested, changing servers.
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:13:12 :Hop requested by ahaa. Quitting.
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:13:15 :User ahaa () got disconnected (from irc.stealth.net) Reason: Closing Link: Dj`bobz`[unknown@192.168.100.28] (Too many host connections (global))
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:13:30 :User ahaa () trying irc.stealth.net port 5555 ().
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:13:30 :User ahaa () connected to irc.stealth.net:5555 ()
:irc-1.stealth.net 001 Dj`bobz` :Welcome to the Internet Relay Network Dj`bobz`!-ahaa@host44-14.pool80117.interbusiness.it
:irc-1.stealth.net 002 Dj`bobz` :Your host is irc-1.stealth.net, running version 2.10.3p3/S02.3
:irc-1.stealth.net 003 Dj`bobz` :This server was created Fri Dec 28 2001 at 06:24:19 EST
:irc-1.stealth.net 004 Dj`bobz` irc-1.stealth.net 2.10.3p3/S02.3 acoOirw abeiIklmnoOpqrstv
:irc-1.stealth.net 251 Dj`bobz` :There are 118088 users and 6 services on 45 servers
:irc-1.stealth.net 252 Dj`bobz` 173 :operators online
:irc-1.stealth.net 253 Dj`bobz` 85 :unknown connections
:irc-1.stealth.net 254 Dj`bobz` 55070 :channels formed
:irc-1.stealth.net 255 Dj`bobz` :I have 4175 users, 0 services and 1 servers
:irc-1.stealth.net 484 Dj`bobz` :Your connection is restricted!
:Dj`bobz` MODE Dj`bobz` :+r
:Dj`bobz` MODE Dj`bobz` :+i
JOIN #agropoli2 berlin
:Dj`bobz`!-ahaa@zoberius.example.net.mx JOIN :#agropoli2
MODE #agropoli2
:irc-1.stealth.net 332 Dj`bobz` #agropoli2 :CHI OPPA LO UCCIDO
:irc-1.stealth.net 333 Dj`bobz` #agropoli2 Legione`!fid3l@dialup-69.dncsi.net 1038563659
:irc-1.stealth.net 353 Dj`bobz` @ #agropoli2 :Dj`bobz` Maxpowe`R @P|aty +JObSpaInt @bobz-OwNz @bobz-v6- @bobzT0rNa @Legione` @{Bra`ZzZ} 
:irc-1.stealth.net 366 Dj`bobz` #agropoli2 :End of NAMES list.
who #agropoli2
:irc-1.stealth.net 352 Dj`bobz` #agropoli2 -ahaa zoberius.example.net.mx irc-1.stealth.net Dj`bobz` H :0 nZ
:irc-1.stealth.net 352 Dj`bobz` #agropoli2 ~MaxpoweR host66-170.pool80181.interbusiness.it *.tin.it Maxpowe`R H :5 MaxpoweR &..::: ` La FriendZ ` :::..
:irc-1.stealth.net 352 Dj`bobz` #agropoli2 PoKiSsImA 62.211.227.102 *.tin.it P|aty H@ :5 ..:: BeOnS GrOuP .:. FriéndZ ::..
:irc-1.stealth.net 352 Dj`bobz` #agropoli2 JObS host133-205.pool80116.interbusiness.it *.tin.it JObSpaInt H+ :5 º=>~`Lå FrÎEnDz`~<=º :::: BeOnS MeMbEr:::::
:irc-1.stealth.net 352 Dj`bobz` #agropoli2 ~ahaa OwNz.Shellx.la *.edisontel.it bobz-OwNz G@ :6 7Pija'o'KaZz'nGUL
:irc-1.stealth.net 352 Dj`bobz` #agropoli2 ~ahaa 2001:6b8:0:400:0:0:0:2f82 *.edisontel.it bobz-v6- G@ :6 7Pija'o'KaZz'nGUL
:irc-1.stealth.net 352 Dj`bobz` #agropoli2 ~ahaa 207-214-69-154.snrmca.pbi.net irc-1.stealth.net bobzT0rNa H@ :0 nz
:irc-1.stealth.net 352 Dj`bobz` #agropoli2 fid3l dialup-69.dncsi.net irc-2.stealth.net Legione` G@ :2 Andrea Legione
:irc-1.stealth.net 352 Dj`bobz` #agropoli2 amore 63-239-59-58.dsl.real-fucker.com irc-1.stealth.net {Bra`ZzZ} G@ :0 TheBrando
:irc-1.stealth.net 315 Dj`bobz` #agropoli2 :End of WHO list.
:irc-1.stealth.net 324 Dj`bobz` #agropoli2 +stnlk 38 berlin
:bobzT0rNa!~ahaa@207-214-69-154.snrmca.pbi.net PRIVMSG #agropoli2 :ahuahuahuauhauhuhauhauh
:bobzT0rNa!~ahaa@207-214-69-154.snrmca.pbi.net MODE #agropoli2 +o Dj`bobz` 
:P|aty!PoKiSsImA@62.211.227.102 PRIVMSG #agropoli2 :ahuahuahha
:Maxpowe`R!~MaxpoweR@host66-170.pool80181.interbusiness.it PRIVMSG #agropoli2 :ehehehehehe
SETLEAVEMSG 4MiXer
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :LEAVE Messages changed to '4MiXer'. Message will be posted to channels when leaving.
SETAWAY 4MiXer
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :AWAY changed to '4MiXer'.
AIDLE 1
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :AIDLE enabled.
QUIT :-:OwNz:-
:-psyBNC!psyBNC@lam3rz.de NOTICE Dj`bobz` :Fri Nov 29 10:15:07 :User ahaa quitted (from host44-14.pool80117.interbusiness.it)

Next Slide