[Full-Disclosure] nmapbot: using instant messaging as a remote administration tool

From: Abe Usher (abe.usher_at_sharp-ideas.net)
Date: 10/05/04

  • Next message: GuidoZ: "Re: [Full-Disclosure] Spyware installs with no interaction in IE on fully patched XP SP2 box" 
    To: full-disclosure@lists.netsys.com
Date: Tue, 05 Oct 2004 00:46:46 -0400

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    I've created a small proof of concept named "nmapbot" that shows it is
    possible to use instant messaging as a platform for remote command and
    control of computer systems.

    Purpose:
    - --------
    To create a semi-intelligent security bot that uses instant messaging as
    a platform for receiving commands and returning results.

    Method:
    - -------
    Using Python, the AOL TOC protocol, Bayesian language processing, and
    nmap 3.70, I hacked together a little bot that can run nmap and ping.
    Future editions will include additional commands =)

    The nmapbot rests squarely on the shoulders of python and projects such
    as Py-AIML, AIMLBayes, GrokItBot, and Reverend. Many thanks to fyodor
    et al. for the excellent tool suite in nmap 3.70.

    If you are interested, you can find source code and documentation for
    nmap bot at:
    http://www.sharp-ideas.net

    Cheers,
    Abe Usher, CISSP

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.4 (MingW32)
    Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

    iD8DBQFBYic2T3X9miqOcSQRAtLuAJ9V6yH+aHzs4tRPvVIQhu9jGuDXkQCdEUCZ
    g33XB8OYyWljCuCNPr1fpe8=
    =Gg0O
    -----END PGP SIGNATURE-----

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: GuidoZ: "Re: [Full-Disclosure] Spyware installs with no interaction in IE on fully patched XP SP2 box"

    Relevant Pages