hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

x1`
i have a few ftps which are in my flashfxp favourites but what if there ip changes how would i get that ftp back , is there some kind of tool that will email me the new ip address when the computer starts
tweakz20
are you administering the ftp account or have any control on it..? as far as i know, there's no way to find the new IP of the ftp unless it's running a server to tell you (unless you feel like scanning a range for a certain file or something)
dr0zaxx
there are many trojans or backdoor that will do that kind of stuff. check the optixpro trojan as www.evileyesoftware.com. for all i know it works. it got cgi notify, icq notify, irc notify and blah blah. wink.gif
iLLuSioN
I tried optix pro for ip notification for icq and never worked good lluck.
da_cash
if u mean getting your STRO (must own the box) ip address when it changes then just install the IRC-U addon for serv-u then add proper lines to the ini..when servu starts it will connect to certain irc host on specified channel. Then go to that channel login with your password ( !login pass ) and then (!ip) ... this will tet you know what is BOT IP..


also if computer with dynamic ip is yours then you may install duc.exe available from www.no-ip.com


or some other http://www.snapfiles.com/shareware/network/swip.html


currentli i didn't saw any other tools for dynamic ip working in cmdline/background/hidden mode except some backdoors...


but better secure your irc-u ini file by crypting it..
cougar
QUOTE (da_cash @ Apr 8 2004, 10:14 AM)
if u mean getting your STRO (must own the box) ip address when it changes then just install the IRC-U addon for serv-u then add proper lines to the ini..when servu starts it will connect to certain irc host on specified channel. Then go to that channel login with your password ( !login pass ) and then (!ip) ... this will tet you know what is BOT IP..


also if computer with dynamic ip is yours then you may install duc.exe available from www.no-ip.com


or some other http://www.snapfiles.com/shareware/network/swip.html


currentli i didn't saw any other tools for dynamic ip working in cmdline/background/hidden mode except some backdoors...

Nice thinking, never thought of that smile.gif.

/gonna try this.
AgentOrange
Ip notification other wise known as SIN is extremely insecure for the hacker. There is a thread running around on GSO about it. I suggest using a IRC back-door, icq, aim and msn would work find too.

Moses is a good IRC back-door. There is also a butt-plug for BO2K, I think it is connected to Moses, but I haven't really messed with it. I just made my own.

Using a DynDns isn't a bad idea.
migo
can this help u ?
www.dyndns.org

or i missed something ?

Best Regards
migo
Silent Bob
Dynamic DNSSM and Static DNS that may work
mathofaka
i dont think ure gona get the ip back it will require alot of search biggrin.gif huh.gif
mathofaka
smile.gif smile.gif idk im gona try to fing out for u
ok i gat my ways to find out things like this
my friend says that there is a way but he didnt
have time to tell me about it so ill tell u tomoro
laugh.gif
Qlimax
u can try 2 install sub0t on the box and when the box rboot he connect to the mirc
in the mirc u can see the new IP.
try it, it work 2 me
Stephen79
If you forgot to do any of the above, but used an obscure port number, then you can scan the range on that port (and pray) laugh.gif
Skydriver
i agree with Silent Bob i think the best way is dynamic dns wink.gif just add to this a perl program and u can play ball lol
rouge
add an irc bot or something or a ip though mail. Or rescan the range for that ftp port.
Macsou
You can try Subot ( Subot.ini and Subot.dll ) .

ADD this to Your ServUAdmin.ini : EventHookDLL1=SUB0T.dll
ClientCheckDLL1=SUB0T.dll

reboot your FTP SERVER ....

next the b0t Will be connected At IRC CHANNEL , you must do That : /dns NameOftheBoT
It will send to you his Ip Adress .


Sub0T.ini :

CODE

[SERVER]
HookLoginMsg=1
LoginMsgFile=default.txt

[BOT]
BotActive=1
Log=1
IrcServer=irc.xxx.org
Channel=#xxx
ChannelKey=xxx
IrcPort=6667
IrcPassword=botsu
Nick=Name
AltNick=Name
UserName=Name
CmdPre=!Name
ServerComment=fast
OnJoinMsg=Y0_it_is_me
[SFV]
sfvactive =1
sitename =Max One
status_bar=file
createmissing=1
createprogress=1
progress_bar=[incomplete]-[%s Done]
del_progress_bar=[incomplete]-[
complete_bar=[%s]-[Complete %s File(s) (%s Mb) @ %s Kbps by %s]


have fun .... and sorry for My bad english biggrin.gif

I Want to upp For you Sub0t.dll but I dont know how biggrin.gif

HeLP admin biggrin.gif
Toxi
I once used No-IP thing for good boxes that changes their ip adds but it is not very easy to install on remote box.
o0oKARo0o
Use irc-u, itīs works fine but it looks like itīs spywared...
net_runner
irc is a good solution..but.. is very dangerous...
imagine what could happen if an admin catch your .ini and join your channel?


QUOTE
but better secure your irc-u ini file by crypting it..

if you give some tips i will be very happy... smile.gif
Erra
Just go to dyndns.org and get hold of one of the many command line utilities there that run as a service, set up an account and install..... its really simple... just make sure you use a proxy (or two) everytime you go to dyndns.org
bdark
I think that the best solution would be on www.no-ip.com

I already tried that software and it works fine. It's also very use to set up and work with, so you shouldn't have any problems. anyway, mirc should always be a good solution but more dangerous :[
o0oKARo0o
QUOTE (net_runner @ May 10 2004, 02:38 AM)
irc is a good solution..but.. is very dangerous...
imagine what could happen if an admin catch your .ini and join your channel?


QUOTE
but better secure your irc-u ini file by crypting it..

if you give some tips i will be very happy... smile.gif

ircc-u comes with a nice encryption method wink.gif
tonikgin
QUOTE (bdark @ May 10 2004, 04:22 PM)
I think that the best solution would be on www.no-ip.com

I already tried that software and it works fine. It's also very use to set up and work with, so you shouldn't have any problems. anyway, mirc should always be a good solution but more dangerous :[

dont use an account there, they log traffic connections.
F34R
You could simply install an xdcc rootkit... and have it join a specified channel... then just use an IP grabber script to snag the IP as it changes.
The possibilities are endless biggrin.gif
Player
what is a bot that doesnt use servu integration? just plain bot with only join functionality if anything
TRi
Well another option to get the new ip would be to look closer at the subranges and dns addresses. Try to dns the ip, either locally via 'ipconfig /all' or/and using dns services. As soon as the ip changed just make a dns resolve on the dns-address you got and voila you have the new address.
The subrange way would be to scan the whole subnet on the port which your server is running, but i consider this to be quite insecure and unwise biggrin.gif

This doesnt work very well with dynamic (dsl) ranges tho tongue.gif
neocortex111
i died looking for SUBOT.dll...if someone would tell me where to find it that would be perfect..i tried google..nothing sad.gif
PL3X59
subot is detected by most antivirus wink.gif

try this one : irc-u v3.

;-)

plex
oxydrine
the new Brainbot is the best way wink.gif

when bot arrives on irc chan just ask it ip wink.gif

!ip

o0oKARo0o
Who knows where to get the brainbot?
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.