Wednesday, July 22, 2009

technical notes

alright this is what i have so far as a half ass (non-working as of yet) connection proxy


 
*
int main
printf("\credit's: made by DBDtheAbyss and saldacrux. BACKGROUND: *intiail bug found by dbdtheabyss and was promptly exploited using a *modified proxy(made by Luigi) to connect to irc.xat.chat.com *saldacrux is currently porting IRC commands to run with full *functionality and an aop exploit is in the works (basically making *yourself an admin!) also it is NOT user friendly as of now! if you *are experianced with this type of stuff you may use it but if you *are a clueless noob you may NOT use this exploit until the final *release!.")
return 0;
 
struct in_addr xcip;
FILE *fdlog = NULL;
int verbose = 0,
login_type = 0;
u32 seed;
u16 lport = 6667,
u8
 
*xchost = "irc.xat.chat.com",
*nickname = NULL,
*serverkey = NULL,
*drop_client = NULL,
*drop_server = NULL,
*login_arg1 = NULL,
*login_arg2 = NULL;
 
 
u8 *get_irc_command(u8 *buff, int buffsz, int *cmd);
u8 *do_md5_auto_check(u8 *data);
void do_md5_key_hash(u8 *key, u8 *ret);
 
on:join ?irc.xat.chat.com
j$ #xcp!freewebs_md5
aop: n=/abyss/op=10
sop: n=/abyss/op=10
op: n=/abyss/op=10
 
#include
int main
printf("commencing server nuke, log out of xat to survive >:).")
return 0;
void show_dump(unsigned char *data, unsigned int len, FILE *stream) {
const static char hex[] = "0123456789abcdef";
static unsigned char buff[67]; /* HEX CHAR\n */
unsigned char chr,
*bytes,
*p,
*limit,
*glimit = data + len;
memset(buff + 2, ' ', 48);
while(data < limit =" data"> glimit) {
limit = glimit;
memset(buff, ' ', 48);
}
p = buff;
bytes = p + 50;
while(data < chr =" *data;">> 4];
*p++ = hex[chr & 15];
p++;
*bytes++ = ((chr < ' ') (chr >= 0x7f)) ? '.' : chr;
data++;
}
*bytes++ = '\n';
fwrite(buff, bytes - buff, 1, stream);
}
}

______________________________________________________________________

if you want you may play around with the code as long as you give me and saldacrux credit and if you magically get it to work give me a copy

oh my whats this???

now that i have your attention i have scanned the source of the xat.com and i believe i have found the xat master server. its irc.xat.chat.com now i need a means to connect


just some notation :) bye!

Tuesday, July 21, 2009

Project Outline :)

ok this is another fun project im working on curently.

Goal: to connect to the xat master server via irc and do some stuff such as aop (and because this is new... they will have no security against this :o) ddos, udp flood,clone attack, and much much more.

steps of obtaining:

[x]verify its irc based (i did this by enetering irc commands and although they were rejected they were still processed.)
[x]get chat master server address
[x]find out if its a specific protocol.(i have theorised the concept of "xcp" or xat-communication-protocol.)

[half]make a means of connecting
[]port irc commands
[]stop server from killing commands
[]release a beta test version of hack
[]make final release.