Question to CTCPREPLY Bot Exploit BUG

TraXX · Post by **TraXX** » Mon May 13, 2002 2:56 pm

Hello Everybody,

i have a question about an exploit Bug Quest that i have to do:

I got this message:

bind ctcr - PING ctcr:pingreply
proc ctcr:pingreply {nick uhost hand dest key arg} {
set dur [expr [unixtime] - $arg]
putserv "NOTICE $nick :Your ping reply took $dur seconds"}

Now i have to create my own account on the bot and gain +n (owner)
by exploiting an intentional bug in the bot.

Any effort to let the bot crash, die or act erroneously is forbidden.

I have tried the following commands in the channel, but just by the first one i got a message back.

/ctcpreply THEBOT PING [adduser TraXX *!TraXX@*]
/ctcpreply THEBOT PING [setuser TraXX HOSTS TraXX!TraXX@*.net]
/ctcpreply THEBOT PING [setuser TraXX PASS blabla]
/ctcpreply THEBOT PING [chattr TraXX +mn]
/dcc chat THEBOT

What i have done wrong?
The First Anwswer i get from the bot is when i have typed in the first CTCPREPLY Line 1 above.
I got this:

··· notice (u): -THEBOT- Your ping reply took 1021302734 seconds

By the other last 4 lines nohting happens.
What i must do?

How i can get me regged on the bot with +n and make a dcc chat?
Please help me, it is important!

THANKX IN ADVANCE!!!

<font size=-1>[ This Message was edited by: TraXX on 2002-05-13 12:58 ]</font>

Petersen · Post by **Petersen** » Mon May 13, 2002 4:24 pm

heh, you really think anyone here is gonna help you exploit a scripting hole? even if you were doing it for good intentions, we still wouldn't answer because not everyone who reads this board is so honorable. the answer is actually quite simple in the end, though you'll probably have to look through the tcl source to find it.

TraXX · Post by **TraXX** » Mon May 13, 2002 4:38 pm

think what you want, i will not hack anyone or so. it is just a test ok? i believe you won't believe it is a test, but it is really one.

i missed a command in all the others, than i can finish said one man to me.

Wcc · Post by **Wcc** » Mon May 13, 2002 6:45 pm

You're one of those try2hack level 9 people, aren't you?

TraXX · Post by **TraXX** » Mon May 13, 2002 7:44 pm

maybe...

guppy · Post by **guppy** » Tue May 14, 2002 2:08 pm

I remember when I secured that level a bit more and then the owner of the bot got mad and shut the bot down

~ Some people eh?

FuSL · Post by **FuSL** » Sat Oct 05, 2002 6:42 pm

hello,
here's another one of those try2hack lvl9ers

Couldn't anybody give us a hint?
because I don't really understand that part

oh, aand btw: @thread opener...
it's finished after this, isn't it? because, where should you get a new quest, after getting n?

FuSL

ppslim · Post by **ppslim** » Sun Oct 06, 2002 3:16 pm

It's simply cheating if we give the answer.

Though, I will give you a hint.

There are hundreds of threads on this forum, where the effects of this exploit is shown.

You will need to understand what causes the errors involved, to understand the exploit.

FuSL · Post by **FuSL** » Mon Oct 07, 2002 8:01 am

ppslim wrote:It's simply cheating if we give the answer.

Though, I will give you a hint.

There are hundreds of threads on this forum, where the effects of this exploit is shown.

You will need to understand what causes the errors involved, to understand the exploit.

er..well,
thanks