[R A B B]

Is it possible to Hijack a IRC Botnet. I see a lot of these twitter kids posting there servers.. And i am wondering if it is possible to hijack there IRC servers from them to were its benefits me but not them.
I believe i read up on this awhile ago but maybe you guys will have more knowledge and be able to assist with how i can go about doing so.

[I.M.P]

getting the url/ip and brute forcing the login could do some damage if you get in! 🤝

[R A B B]

getting the url/ip and brute forcing the login could do some damage if you get in! 🤝

Thats what I wanna hear! Thanks man I knew it was possible just not sure how. But now brute force there login haha
This password list gonna get put to use.

[I.M.P]

Thats what I wanna hear! Thanks man I knew it was possible just not sure how. But now brute force there login haha
This password list gonna get put to use.

I was hoping what I said would help 🤫
just remember to change the login when you get in 🤫

[__Digital__]

Well considering there are exploits for unrealircd and inspirircd i would suggest looking into that and yes you can try and bruteforce the logins however if they are configured after 5 incorrect logins you will be banned from the ircd server. keep in mind the login attempts can be changed in their config.

[R A B B]

Well considering there are exploits for unrealircd and inspirircd i would suggest looking into that and yes you can try and bruteforce the logins however if they are configured after 5 incorrect logins you will be banned from the ircd server. keep in mind the login attempts can be changed in their config.

Exploiting using Metasploit correct? What I am finding online

[SnuggleKittens]

isn't the problem that the bots only listen to hostmask? I mean without knowing that and or having opper privs the bots wouldn't reply anyways.

but then any good sysadmin is going to stamp out any irc related connections and firewall / remove the infection so I feel that IRC bots are doomed anyways.

p.s. does it make more sense to scan for 6667 and try and exploit Unrealircd (most of these people are getting packs from youtube / pastebin (I think)

[R A B B]

isn't the problem that the bots only listen to hostmask? I mean without knowing that and or having opper privs the bots wouldn't reply anyways.

but then any good sysadmin is going to stamp out any irc related connections and firewall / remove the infection so I feel that IRC bots are doomed anyways.

p.s. does it make more sense to scan for 6667 and try and exploit Unrealircd (most of these people are getting packs from youtube / pastebin (I think)

I wouldn't know to much about the hostmask information I only ever had spots in slots never had my own and never really asked questions on setup haha

You are correct tho with scanning 6667 and try to exploit it but some of them use other ports also
I'm not sure not accurate this website is but it gives information on IRC Bots IP & Port connection.

https://www.honerix.com/botnet/
If anybody has information on the accuracy of URL above would awesome.

[Nyx]

There used to be metasploit exploits for unrealircd back in the day but those are out of date.

[R A B B]

There used to be metasploit exploits for unrealircd back in the day but those are out of date.

I seen on youtube after_Digital_ mentioned that and there are still people using them so i was thinking of hijacking some twitter kids server
I posted a link that showed IRC Channels that run Botnets but not sure how accurate the sites information is.

[El Lobo]

How about instead of doing that shit you simply get your hands on the bin, reverse it and extract the username and password from it.

[wolfhackertr]

getting the url/ip and brute forcing the login could do some damage if you get in

[UDPz0r]

How about instead of doing that shit you simply get your hands on the bin, reverse it and extract the username and password from it.

get the bot exe use hexeditor or ida pro, get the bot pass and update command