News for hackers. Stuff that matters.
Re:Another ShellShock exploit in the wild by motoboi on Thursday September 25, 2014 @12:59PM (#8368183)
This is a Perl script that connects to a IRC channel and waits for commands.

Commands can be:

portscan (scans a host for open ports)

tcpflood (try to keep 1000 TCP connections open to a host for a specified period of time);

udpflood (send UDP packets to all ports on a host with an payload of a specified number of 'A' characters for a specified period of time);

httpflood( send HTTP requests to a host for specified period of time [with HTTP Keep-Alive header]);

shell (execute arbitrary commands on the host);

google (use google to find other hosts to infect [targets modules.php]);

version (returns bot version)

All commands send status back via IRC.

There are several brazilian portuguese strings and comments, although is not clear if the author is brazilian.

Interesting stuff.

There are no comments on this comment yet.