Patrick’s Rants

I have decided to start documenting the script kiddie attacks either on this server or against other machines attempting to exploit cross site scripting.

IRC Bots:
• (source: http://br.geocities.com/xmpzzz/bot.txt )
  IRC Flood Bot
• Perl bot. This one looks like it will ping flood different types of servers: (source: http://nxlf.cn/borek.txt)
• Another IRC Bot (source: http://br.geocities.com/xmpzz/gorgonn.txt )
• This one works with gorgonn.txt - at least on the server that I saw
• gall.txt Works with x1.txt

r57shell variants

• Another spammer script (source: http://www.gonfiabiligamespark.it/flash/r57.txt? )
• error.txt
• r57shell-123

These will send spam through your mail web server if you have a cross-site scripting vulnerability:

Spam bots
• In English (source: http://star-gifts.com/blog.txt?)
• And in Spanish (source: http://mathe1.mokwon.ac.kr/blogs.txt?)

Unclassified scripts:
• Not sure what this one is supposed to do: (source: http://www.thiaguinho.net/id.txt??)
• whatsnew
• evilx used in combination with evil.txt

New scripts, to be classified soon:
• test.txt
• bas.txt
• bor.txt
• echo3.txt
• off.txt
• safe.txt
• safeon.txt
• n.txt
• cmd-scan