This is the new home of the egghelp.org community forum.
All data has been migrated (including user logins/passwords) to a new phpBB version.


For more information, see this announcement post. Click the X in the top right-corner of this box to dismiss this message.

botnet hacked

Old posts that have not been replied to for several years.
Locked
G
Gangrel

botnet hacked

Post by Gangrel »

after refusing to op someone in a channel so they could do a take over i was threatened my botnet would be hacked i laughed the idea of thinking nothing of it after a few days one of my botnet got hacked somehow they managed to find out a port of one of my bots and created a bot with with same nick on same port as mine then they ddossed mine at first the hub kept refusing to update the host of the bot when they dossed my bot off it linked and they owned some channels my net was in so i had to kill it and its still down i asked a few people for suggestions they said i use some secure botpacks or tcls and encrypt my user files but i dont know where i can find botpacks or how to encrypt files any help would be appreciated i need to get my botnet up and runing again asap :evil:
User avatar
user
 
Posts: 1452
Joined: Tue Mar 18, 2003 9:58 pm
Location: Norway

Re: botnet hacked

Post by user »

Gangrel wrote:they managed to find out a port of one of my bots and created a bot with with same nick on same port as mine
There is a config setting to disallow connections from unknown host. Did they connect from the same host as the replaced bot? (I suspect not)

Go through a fresh copy of eggdrop.conf and pay extra close attention to the settings dealing with telnet.

Another thing that can improve protection against script kiddies is changing the salts in the blowfish module. Many script kiddies use tools that have fixed salts equal to the standard eggdrop ones, so do a couple of changes in mod/blowfish.mod/blowfish.c line 263 and 264 (check the comments) before you compile your new eggdrops. (Sharing bots must have the same salts)
E
EEggy
Op
Posts: 122
Joined: Thu Sep 26, 2002 11:46 pm

Post by EEggy »

hi, i found these two lines
#define SALT1 0xdeadd061
#define SALT2 0x23f6b095
so what need to chnage??

thanks
EEggy
Locked