File irc-botnet-channels

脚本使用类型: portrule
脚本所属分类: discovery, vuln, safe
脚本下载地址: http://nmap.org/svn/scripts/irc-botnet-channels.nse

User Summary

Checks an IRC server for channels that are commonly used by malicious botnets.

Control the list of channel names with the irc-botnet-channels.channels script argument. The default list of channels is

• loic
• Agobot
• Slackbot
• Mytob
• Rbot
• SdBot
• poebot
• IRCBot
• VanBot
• MPack
• Storm
• GTbot
• Spybot
• Phatbot
• Wargbot
• RxBot

Script Arguments

irc-botnet-channels.channels

a list of channel names to check for.

Example Usage

执行格式

• nmap -p 6667 --script=irc-botnet-channels <target>

• nmap -p 6667 --script=irc-botnet-channels --script-args 'irc-botnet-channels.channels={chan1,chan2,chan3}' <target>
  

Script Output

| irc-botnet-channels:
|   #loic
|_  #RxBot

Requires

• comm
• math
• shortport
• stdnse
• string
• table

Author: David Fifield, Ange Gutek

License: VER007 整理 http://www.ver007.com