This is the new home of the egghelp.org community forum.
All data has been migrated (including user logins/passwords) to a new phpBB version.


For more information, see this announcement post. Click the X in the top right-corner of this box to dismiss this message.

Script idea, who can HELP me plz??????

Old posts that have not been replied to for several years.
Locked
M
Mentolboy

Post by Mentolboy »

Hi there!

I have an idea for a script:
only permanent owners who know a certain password can let the bots part a protected channel (.-chan and .netpart)
so there have to be a chanset added (something like +protect)
if you type this: .netchanset #channel +protect , you will need a password specified in the tcl to remove the channel!
if somebody wants to force the bot to leave a channel and doesn't know the pass, the script removes the global owner flag of the user!
can the password be saved encrypted?

can somebody help me plz?
tnx!
p
ppslim
Revered One
Posts: 3914
Joined: Sun Sep 23, 2001 8:00 pm
Location: Liverpool, England

Post by ppslim »

This would require some work.

It is possible to store encrypted passwords.

It would also require that .chanset be protected, as some1 could just do ".chanset #channel -protect" and remove the channel.

Alternativly, don't give flags to people that will remove your channels, they don't deserve them.

Eggdrops flag system is perfectly capable of protecting these commands, without the requirement of a password.
M
Mentolboy

Post by Mentolboy »

yeah i know ppslim!
but i heard something about hacking eggs/shells, this tcl would increase the security! so even if you hack the botnet or shell, you won't be able to let the bots leave!
can you help me?
P
Petersen
Owner
Posts: 685
Joined: Thu Sep 27, 2001 8:00 pm
Location: Blackpool, UK

Post by Petersen »

the worth of encrypted eggdrops is greatly overstated. if i had access to an account running an egg that i wanted to hack ops from, i wouldn't even bother looking at the eggdrop process itself. I'd just hijack the tcp stream to the server and take the chan before you know what hit ya. luckily for most people, i'm not a lamer takeover kiddie so i don't to that kinda [censored]
p
ppslim
Revered One
Posts: 3914
Joined: Sun Sep 23, 2001 8:00 pm
Location: Liverpool, England

Post by ppslim »

If a person has access to your shell, there aint nothing on this earth to stop him removing your bots from your channel.

It's is allmost childs play to kill a bot, remove it's user and channel file (even edit it, unless you are encrypting them, in which case, a simple delete will do the job). This would render a bot unstartable (without user intervension). As no userfile requires that the -m option is used, before the bot will even consider connecting to a server. WHen it gets to the server, it needs some user-records setting up, and the the channels.

If some1 wants to remove your bot through hacking, it isn't the hardest of tasks once access is gained.
Locked