Botnet简介_百度文库
两大类热门资源免费畅读
续费一年阅读会员，立省24元！
文档贡献者贡献于
评价文档：
31页免费18页免费10页免费7页¥2.005页¥2.00 4页¥2.004页¥2.004页¥3.005页免费7页免费
喜欢此文档的还喜欢10页免费7页免费34页免费46页1下载券106页1下载券
Botnet简介|B​o​t​n​e​t​简​介​ ​
​
​诸​葛​建​伟​
​
​狩​猎​女​神​项​目​/​T​h​e​ ​A​r​t​e​m​i​s​ ​P​r​o​j​e​c​t​
​
05​年月日
把文档贴到Blog、BBS或个人站等：
普通尺寸(450*500pix)
较大尺寸(630*500pix)
大小：2.00MB
登录百度文库，专享文档复制特权，财富值每天免费拿！
你可能喜欢出自e-Sim 非官方中文 Wiki 站
IRC有許多的伺服器，e-sim主要是在irc.rizon.net上
軟體有 mIRC, xChat ,ChatZilla 等等
較便利的網頁端則有, 等等
有 Nick 字樣的那格填入想要的暱稱 ID（例如你的 eSimID）
有 Channel 字樣的那格填入想去的頻道，EX:#secura.tw
這兩項簡單的資料就能夠先登入
在下方的輸入欄打訊息或是指令
加入頻道：/join 頻道
更改暱稱 XXXX：/nick XXXX
#secura.tw 頻道連結：
每次都輸入資料太麻煩?沒關係，來註冊一個帳號吧
因為資料都是自由輸入，那ID也就只是短暫擁有，但是透過認證可以讓你長期擁有ID
在輸入欄輸入認證指令：/msg NickServ REGISTER 密碼 收認證信的電子郵件
在輸入欄輸入確認指令：/msg NickServ CONFIRM 在信箱收到的認證碼
以後用同樣的暱稱進入，就用指令IDENTIFY：/msg NickServ IDENTIFY 密碼
註冊一個mibbit帳號
請選擇Account
並移動至Account標籤
Server輸入irc.rizon.net
Nick輸入你的id
pass輸入你的密碼 (其餘不用更動)
完成後按Save
重新登入mibbit後就完成了!
請先按右上角Channels
並移動至Channels標籤
Server輸入irc.rizon.net
Channels輸入頻道名稱
想新增多組頻道 只需使用逗號隔開
(例如 :#tw,#secura.tw,#PTT_formosa,#esimtw-wiki,#SeTrade)
Auto connect 記得打勾
完成後按Save，然後重新登入試試
這是可以快速地得知ESIM內一些資訊的BOT
以下以格式呈現
指令: 指令描述
如何使用: 指令[參數][參數目標值]
--完整參數
(縮寫參數)
.companies: 顯示玩家的公司連結〔link to the citizen company page〕
Usage: .companies [-i] [-n] [argument]
用ID碼找玩家〔look up by id instead of name〕
在Secura伺服器上〔uses Secura's API〕
.donate: 顯示玩家的捐贈連結〔link to the donation page of a citizen〕
Usage: .donate [-i] [-n] [argument]
用ID碼找玩家〔look up by id instead of name〕
在Secura伺服器上〔uses Secura's API〕
.fightcalc(.fc): 顯示玩家用不同品質武器的輸出預測〔calculates influence done with different weapon qualities〕
Usage: .fightcalc(.fc) [-i] [-n] [-s strength] [-r rank] [-b] [-d defense_system] [-m mu_bonus] [-u] [-f fights] [-o objective] [argument]
用ID碼找玩家〔look up by id instead of name〕
在Secura伺服器上〔uses Secura's API〕
--strength
uses a custom strength
uses a custom military rank (use rank ID, not name)
--region_bonus
adds region bonus influence (20%)
--defense_system
adds defense system bonus influence
--mu_bonus
adds military unit bonus influence
--surrounded
applies the surrounded debuff
specifies number of fights
--objective
calculates how many fights are required to make a given amount of influence
.highlight(.hl): highlights all the nicks in the channel (limited to channel ops, admins and founders)
Usage: .highlight(.hl) [optional_message]
.info: Displays version and author information
Usage: .info
.link: 顯示玩家的個人連結〔return a link to the target citizen's profile〕
Usage: .link [-i] [-n] [argument]
用ID碼找玩家〔look up by id instead of name〕
在Secura伺服器上〔uses Secura's API〕
.lookup(.lp): 顯示玩家的實用資訊〔shows useful data about the citizen〕
Usage: .lookup(.lp) [-i] [-n] [argument]
用ID碼找玩家〔look up by id instead of name〕
在Secura伺服器上〔uses Secura's API〕
.message(.igm): 顯示玩家的傳訊連結〔link to send a message to a citizen〕
Usage: .message(.igm) [-i] [-n] [argument]
用ID碼找玩家〔look up by id instead of name〕
在Secura伺服器上〔uses Secura's API〕
.region: information about a region
Usage: .region [-i] argument
look up by id instead of name
.register_citizen(.regnick, .regcit): links an e-Sim citizen to an IRC nickname
Usage: .register_citizen(.regnick, .regcit) [-i] citizen_name
用ID碼找玩家〔look up by id instead of name〕For Business
PRODUCTS & SERVICES
POPULAR PRODUCTS
HOW TO BUY
Protect against Zero Day Threats
Go beyond antivirus to protect against targeted attacks and advanced persistent threats with Symantec Endpoint Protection.
PRODUCT SUPPORT
PRODUCT SUPPORT FOR ACQUIRED COMPANIES
BUSINESS SUPPORT RESOURCES
SOCIAL MEDIA
Information Unleashed
The Official Voice of Symantec
STAY SECURE
BE INFORMED
24/7 Reporting
Security Technology and Response
CONTACT US ABOUT
2014 Internet Security Threat Report, Vol 19
Symantec data and analysis on the 2013 threat landscape.
BUY ONLINE
Website Security Solutions
SHOP NORTON
Most Popular
New Products
My Norton Product
Buy more time.Save more money.
Get up to 33% off MSRPwhen you buy 3-yearsubscriptions.
Add Bookmark or Share
Backdoor.IRC.Bot
Risk Level 1: Very Low
Discovered:
May 2, 2003
May 21, :35 AM
Infection Length:
Systems Affected:
Windows 98, Windows 95, Windows XP, Windows 7, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
Backdoor.IRC.Bot is a generic detection for Trojan horses that open a back door on the compromised computer and connect to Internet Relay Chat (IRC) channels to launch distributed denial
of service (DDoS) attacks.
A Backdoor.IRC.Bot is a type of Trojan that it also often referred to as a 'bot' that opens a back door that allows a remote attacker to take control of the compromised computer.The actions a remote attack can perform on the compromised computer are numerous. It can also use the compromised computer, usually in a network of other compromised computers, called a botnet, to attack other targets.The malicious author may build a botnet for various reasons but the underlying motivation is to accomplish a task or tasks that are done easier and/or faster with many computers rather than just one.They may also perform actions that mislead the user into thinking that
nothing untoward is happening on the computer when in fact the Trojan
may have already opened a back door and be under the control of the remote attacker.If a Symantec antivirus product displays a detection alert for this
threat, it means the computer is already protected against this threat
and the Symantec product will effectively remove this threat from the
Antivirus Protection Dates
Initial Rapid Release version May 2, 2003
Latest Rapid Release version December 24, 2014 revision 034
Initial Daily Certified version May 2, 2003
Latest Daily Certified version December 24, 2014 revision 018
Initial Weekly Certified release date May 7, 2003
for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy
Damage Level: Medium
Payload: Opens a back door on the compromised computer.
Distribution
Distribution Level: Low
Writeup By: Jarrad Shearer
Summary| |irc 11.0.1
IRC (Internet Relay Chat) protocol client library for Python
Internet Relay Chat (IRC) protocol client library
The home of irclib is:
API documentation is available at:
Travis-CI.
This library provides a low-level implementation of the IRC protocol for
It provides an event-driven IRC client framework.
a fairly thorough support for the basic IRC protocol, CTCP, and DCC
connections.
In order to understand how to make an IRC client, it's best to read up first
on the IRC specifications, available here:
Installation
IRC requires Python versions specified in the
and definitely supports Python 3.
You have several options to install the IRC project.
Use easy_install irc or pip install irc to grab the latest
version from the cheeseshop (recommended).
Run python setup.py install (from the source distribution).
Client Features
The main features of the IRC client framework are:
Abstraction of the IRC protocol.
Handles multiple simultaneous IRC server connections.
Handles server PONGing transparently.
Messages to the IRC server are done by calling methods on an IRC
connection object.
Messages from an IRC server triggers events, which can be caught
by event handlers.
Reading from and writing to IRC server sockets is normally done
by an internal select() loop, but the select() may be done
by an external main loop.
Functions can be registered to execute at specified times by the
event-loop.
Decodes CTCP tagging correctly (hopefully); I haven't seen any
other IRC client implementation that handles the CTCP
specification subtilties.
A kind of simple, single-server, object-oriented IRC client class
that dispatches events to instance methods is included.
DCC connection support.
Current limitations:
The IRC protocol shines through the abstraction a bit too much.
Data is not written asynchronously to the server (and DCC peers),
i.e. the write() may block if the TCP buffers are stuffed.
Like most projects, documentation is lacking ...
Unfortunately, this library isn't as well-documented as I would like
I think the best way to get started is to read and
understand the example program irccat, which is included in the
distribution.
The following files might be of interest:
irc/client.py
The library itself.
Read the code along with comments and
docstrings to get a grip of what it does.
Use it at your own risk
and read the source, Luke!
irc/bot.py
An IRC bot implementation.
irc/server.py
A basic IRC server implementation. Suitable for testing, but not
production quality.
Example scripts in the scripts directory:
A simple example of how to use the IRC client.
irccat reads
text from stdin and writes it to a specified user or channel on
an IRC server.
The same as above, but using the SimpleIRCClient class.
Another simple example.
servermap connects to an IRC server,
finds out what other IRC servers there are in the net and prints
a tree-like map of their interconnections.
An example bot that uses the SingleServerIRCBot class from
The bot enters a channel and listens for commands in
private messages or channel traffic.
It also accepts DCC
invitations and echos back sent DCC chat messages.
dccreceive
Receives a file over DCC.
Sends a file over DCC.
NOTE: If you're running one of the examples on a unix command line, you need
to escape the # symbol in the channel. For example, use \\#test or
&#test& instead of #test.
Decoding Input
By default, the IRC library attempts to decode all incoming streams as
UTF-8, even though the IRC spec stipulates that no specific encoding can be
expected. Since assuming UTF-8 is not reasonable in the general case, the IRC
library provides options to customize decoding of input by customizing the
ServerConnection class. The buffer_class attribute on the
ServerConnection determines which class is used for buffering lines from the
input stream. By default it is buffer.DecodingLineBuffer, but may be
re-assigned with another class, following the interface of buffer.LineBuffer.
The buffer_class attribute may be assigned for all instances of
ServerConnection by overriding the class attribute.
For example:
irc.client.ServerConnection.buffer_class = irc.buffer.LenientDecodingLineBuffer
The LenientDecodingLineBuffer attempts UTF-8 but falls back to latin-1, which
will avoid UnicodeDecodeError in all cases (but may produce unexpected
behavior if an IRC user is using another encoding).
The buffer may be overridden on a per-instance basis (as long as it's
overridden before the connection is established):
server = irc.client.IRC().server()
server.buffer_class = irc.buffer.LenientDecodingLineBuffer
server.connect()
Alternatively, some clients may still want to decode the input using a
different encoding. To decode all input as latin-1 (which decodes any input),
use the following:
irc.client.ServerConnection.buffer_class.encoding = 'latin-1'
Or decode to UTF-8, but use a replacement character for unrecognized byte
sequences:
irc.client.ServerConnection.buffer_class.errors = 'replace'
On Python 2, it was possible to use the buffer.LineBuffer itself, which will
pass the raw bytes. On Python 3, the library requires text for message
processing, so a decoding buffer must be used. Therefore, use of the
LineBuffer is considered deprecated and not supported on Python 3. Clients
should use one of the above techniques for decoding input to text.
Renamed irc.client.Manifold to irc.client.Reactor. Reactor better
reflects the implementation as a .
This name makes it's function much more clear and inline with standard
terminology.
Removed deprecated manifold and irclibobj properties from Connection.
Use reactor instead.
Removed deprecated ircobj from SimpleIRCClient. Use reactor
Added ServerConnection.as_nick, a context manager to set a nick for the
duration of the context.
Dropped support for Python 2.6.
Dropped irc.client.LineBuffer and irc.client.DecodingBuffer
(available in irc.client.buffer).
Renamed irc.client.IRC to irc.client.Manifold to provide a clearer
name for that object. Clients supporting 8.6 and later can use the
Manifold name. Latest clients must use the Manifold name.
Renamed irc.client.Connection.irclibobj property to manifold. The
property is still exposed as irclibobj for compatibility but will be
removed in a future version.
Removed unused irc.client.mask_matches function.
Removed unused irc.client.nick_characters.
Added extra numerics for 'whoisaccount' and 'cannotknock'.
Issue #46: The whois command now accepts a single string or iterable for
the target.
NickMask now returns None when user, host, or userhost are not present.
Previously, an IndexError was raised.
for details.
Documentation is now published at .
Issue #35: Removed the mutex during process_once.
Issue #37: Deprecated buffer.LineBuffer for Python 3.
Issue #34: Introduced buffer.LenientDecodingLineBuffer for handling
input in a more lenient way, preferring UTF-8 but falling back to latin-1
if the content cannot be decoded as UTF-8. To enable it by default for
your application, set it as the default decoder:
irc.client.ServerConnection.buffer_class = irc.buffer.LenientDecodingLineBuffer
Introduced 'Manifold' as an alias for irc.client.IRC. This better name will
replace the IRC name in a future version.
Introduced the 'manifold' property of SimpleIRCClient as an alias for
Added 'manifold_class' property to the client.SimpleIRCClient to allow
consumers to provide a customized Manifold.
Issue #32: Add logging around large DCC messages to facilitate
troubleshooting.
Issue #31: Fix error in connection wrapper for SSL example.
Issue #28: Fix TypeError in version calculation in irc.bot CTCP version.
Updated DCC send and receive scripts (Issue #27).
Fix timestamp support in schedule.DelayedCommand construction.
irc.client.NickMask is now a Unicode object on Python 2. Fixes issue
reported in pull request #19.
Issue #24: Added DCCConnection.send_bytes for transmitting binary data.
privmsg remains to support transmitting text.
Code base now runs natively on Python 2 and Python 3, but requires
to be installed.
Issue #25: Rate-limiting has been updated to be finer grained (preventing
bursts exceeding the limit following idle periods).
Issue #22: Catch error in bot.py on NAMREPLY when nick is not in any visible
Fixed encoding errors in server on Python 3.
Added a set_keepalive method to the ServerConnection. Sends a periodic
PING message every indicated interval.
Added support for throttling send_raw messages via the ServerConnection
object. For example, on any connection object:
connection.set_rate_limit(30)
That would set the rate limit to 30 Hz (30 per second). Thanks to Jason
Kendall for the suggestion and bug fixes.
Fix typo in client.NickMask.
Fix typo in bot.py.
Issue #15: Added client support for ISUPPORT directives on server
connections. Now, each ServerConnection has a features attribute which
reflects the features supported by the server. See the docs for
irc.features for details about the implementation.
Issue #14: Fix errors when handlers of the same priority are added under
Python 3. This also fixes the unintended behavior of allowing handlers of
the same priority to compare as unequal.
This release brings several backward-incompatible changes to the scheduled
Refactored implementation of schedule classes. No longer do they override
the datetime constructor, but now only provide suitable classmethods for
construction in various forms.
Removed backward-compatible references from irc.client.
Remove 'arguments' parameter from scheduled commands.
Clients that reference the schedule classes from irc.client or that construct
them from the basic constructor will need to update to use the new class
- DelayedCommand -& DelayedCommand.after
- PeriodicCommand -& PeriodicCommand.after
Arguments may no longer be passed to the 'function' callback, but one is
encouraged instead to use functools.partial to attach parameters to the
callback. For example:
DelayedCommand.after(3, func, ('a', 10))
func = functools.partial(func, 'a', 10)
DelayedCommand.after(3, func)
This mode puts less constraints on the both the handler and the caller. For
example, a caller can now pass keyword arguments instead:
func = functools.partial(func, name='a', quantity=10)
DelayedCommand.after(3, func)
Readability, maintainability, and usability go up.
Issue #13: TypeError on Python 3 when constructing PeriodicCommand (and thus
execute_every).
Fixed regression created in 7.0 where PeriodicCommandFixedDelay would only
cause the first command to be scheduled, but not subsequent ones.
Moved scheduled command classes to irc.schedule module. Kept references for
backwards-compatibility.
PeriodicCommand now raises a ValueError if it's created with a negative or
zero delay (meaning all subsequent commands are immediately due). This fixes
Renamed the parameters to the IRC object. If you use a custom event loop
and your code constructs the IRC object with keyword parameters, you will
need to update your code to use the new names, so:
IRC(fn_to_add_socket=adder, fn_to_remove_socket=remover, fn_to_add_timeout=timeout)
IRC(on_connect=adder, on_disconnect=remover, on_schedule=timeout)
If you don't use a custom event loop or you pass the parameters
positionally, no change is necessary.
Fixed some unhandled exceptions in server client connections when the client
would disconnect in response to messages sent after select was called.
Moved LineBuffer and DecodingLineBuffer from client to buffer module.
Backward-compatible references have been kept for now.
Removed daemon mode and log-to-file options for server.
Miscellaneous bugfixes in server.
Fix error in 2to3 conversion on irc/server.py (issue #11).
The IRC library is now licensed under the MIT license.
Added irc/server.py, based on hircd by Ferry Boender.
Added support for CAP command (pull request #10), thanks to Danneh Oaks.
Another backward-incompatible change. In irc 5.0, many of the unnecessary
getter functions have been removed and replaced with simple attributes. This
change addresses issue #2. In particular:
Connection._get_socket() -& Connection.socket (including subclasses)
Event.eventtype() -& Event.type
Event.source() -& Event.source
Event.target() -& Event.target
Event.arguments() -& Event.arguments
The nm_to_* functions were removed. Instead, use the NickMask class
attributes.
These deprecated function aliases were removed from irc.client:
- parse_nick_modes -& modes.parse_nick_modes
- parse_channel_modes -& modes.parse_channel_modes
- generated_events -& events.generated
- protocol_events -& events.protocol
- numeric_events -& events.numeric
- all_events -& events.all
- irc_lower -& strings.lower
Also, the parameter name when constructing an event was renamed from
eventtype to simply type.
Removed deprecated arguments to ServerConnection.connect. See notes on the
3.3 release on how to use the connect_factory parameter if your application
requires ssl, ipv6, or other connection customization.
Filter out disconnected sockets when processing input.
Created two new exceptions in irc.client: MessageTooLong and
InvalidCharacters.
Use explicit exceptions instead of ValueError when sending data.
SingleServerIRCBot now accepts keyword arguments which are passed through
to the ServerConnection.connect method. One can use this to use SSL for
connections:
factory = irc.connection.Factory(wrapper=ssl.wrap_socket)
bot = irc.bot.SingleServerIRCBot(..., connect_factory = factory)
Issue #6: Fix AttributeError when legacy parameters are passed to
ServerConnection.connect.
Issue #7: Fix TypeError on iter(LineBuffer).
3.4 never worked - the decoding customization feature was improperly
implemented and never tested.
The ServerConnection now allows custom classes to be supplied to customize
the decoding of incoming lines. For example, to disable the decoding of
incoming lines,
replace the buffer_class on the ServerConnection with a version that
passes through the lines directly:
irc.client.ServerConnection.buffer_class = irc.client.LineBuffer
This fixes #5.
Broken Release
Added connection module with a Factory for creating socket connections.
Added connect_factory parameter to the ServerConnection.
It's now possible to create connections with custom SSL parameters or other
socket wrappers. For example, to create a connection with a custom SSL cert:
import ssl
import irc.client
import irc.connection
import functools
irc = irc.client.IRC()
server = irc.server()
wrapper = functools.partial(ssl.wrap_socket, ssl_cert=my_cert())
server.connect(connect_factory = irc.connection.Factory(wrapper=wrapper))
With this release, many of the parameters to ServerConnection.connect are
now deprecated:
localaddress
Instead, one should pass the appropriate values to a connection.Factory
instance and pass that factory to the .connect method. Backwards-compatibility
will be maintained for these parameters until the release of irc 4.0.
Restore Python 2.6 compatibility.
Protect from UnicodeDecodeError when decoding data on the wire when data is
not properly encoded in ASCII or UTF-8.
Additional branch protected by mutex.
Implemented thread safety via a reentrant lock guarding shared state in IRC
Fix some issues with bytes/unicode on Python 3
Distribute using setuptools rather than paver.
Minor tweaks for Python 3 support. Now installs on Python 3.
Added error checking when sending a message - for both message length and
embedded carriage returns. Fixes #4.
Updated README.
Improved Unicode support. Fixes failing tests and errors lowering Unicode
channel names.
Issue #3541414 - The ServerConnection and DCCConnection now encode any
strings as UTF-8 before transmitting.
Issue #3527371 - Updated strings.FoldedCase to support comparison against
objects of other types.
Shutdown the sockets before closing.
Applications that are currently encoding unicode as UTF-8 before passing the
strings to ServerConnection.send_raw need to be updated to send Unicode
This release officially deprecates 2.0.1-2.0.3 in favor of 3.0.
Re-release of irc 2.0 (without the changes from 2.0.1-2.0.3) for
correct compatibility indication.
DelayedCommands now use the local time for calculating 'at' and 'due'
times. This will be more friendly for simple servers. Servers that expect
UTC times should either run in UTC or override DelayedCommand.now to
return an appropriate time object for 'now'. For example:
def startup_bot():
irc.client.DelayedCommand.now = irc.client.DelayedCommand.utcnow
Added irc.client.PeriodicCommandFixedDelay. Schedule this command
to have a function executed at a specific time and then at periodic
intervals thereafter.
Removed irclib and ircbot legacy modules.
Fix file saving using dccreceive.py on Windows. Fixes #2863199.
Created NickMask class from nm_to_* functions. Now if a source is
a NickMask, one can access the .nick, .host, and .user attributes.
Use correct attribute for saved connect args. Fixes #3523057.
Added ServerConnection.reconnect method. Fixes #3515580.
Added missing events. Fixes #3515578.
Moved functionality from irclib module to irc.client module.
Moved functionality from ircbot module to irc.bot module.
Retained irclib and ircbot modules for backward-compatibility. These
will be removed in 1.0.
Renamed project to simply 'irc'.
To support the new module structure, simply replace references to the irclib
module with irc.client and ircbot module with irc.bot. This project will
support that interface through all versions of irc 1.x, so if you've made
these changes, you can safely depend on irc &= 0.7, &2.0dev.
Fixed failing test where DelayedCommands weren't being sorted properly.
DelayedCommand a now subclass of the DateTime object, where the command's
due time is the datetime. Fixed issue #3518508.
Fixed incorrect usage of Connection.execute_delayed (again).
Minimum Python requirement is now Python 2.6. Python 2.3 and earlier should use 0.5.0
or earlier.
Removed incorrect usage of Connection.execute_delayed. Added Connection.execute_every.
Fixed issue 3516241.
Use new-style classes.
Py Version
Uploaded on
Downloads (All Versions):
75 downloads in the last day
1167 downloads in the last week
7265 downloads in the last month
Jason R. Coombs
Documentation:
Home Page:
Categories
Package Index Owner:
Copyright (C) ,}