egghelp.org community

BoaR · Halfop Joined: 20 Jul 2007 Posts: 48

how to hide passwords for auth and dcc chat requests to the bot and in log files?

nml375 · Revered One Joined: 04 Aug 2006 Posts: 2857

That kind of information is never logged as long as it is used properly.
In the case where a user accidentally mistypes a msg-command containing a password, this would be treated as any other message, and logged as such (to avoid this, you'd have to disable msg-logging completely). Quite obviously, it would be quite a daunting task of checking any and all messages recieved for possible passwords of any user, making it an unusable solution.

In any other case where you use one of eggdrop's internal commands that do require passwords, eggdrop will safeguard that no password information is logged in the bot's logfiles.
_________________
NML_375, idling at #eggdrop@IrcNET

BoaR · Halfop Joined: 20 Jul 2007 Posts: 48

i mean when i send a password, i can see the password in the dcc chat window.

i think to hide a password it should be done by irc chat program.

nml375 · Revered One Joined: 04 Aug 2006 Posts: 2857

That is not an eggdrop issue, but rather an issue with the irc-client you are using. There is no standardized way of forcing a client to hide the text the user himself writes.
If your client supports scripting, you might be able to send the text without displaying it, depending on the client and its capabilities (obviously).
_________________
NML_375, idling at #eggdrop@IrcNET

BoaR · Halfop Joined: 20 Jul 2007 Posts: 48

right now i use xchat under linux.. but will be using xchat under windows after i finish installing my eggdrops. I dont know for sure if ill go back on windows though because this linux installation was so perfect i have no problems at all with it. When you send your NickServ password... NickServ bot hides it and put **** instead of clear text password, i can never see the password i send to NickServ, it's cool.

do u know how to make a bot send a file to another bot?

DragnLord · Posted: Fri Jul 20, 2007 7:23 pm Post subject:

nml375 · Revered One Joined: 04 Aug 2006 Posts: 2857

Alchera · Posted: Fri Jul 20, 2007 9:58 pm Post subject:

As a side note: X-Chat uses either Perl, Tcl, Python, Ruby, JavaScript or Lisp for scripting.

The user should be able to get scripting help on the xchat.org Forums.
_________________
Add [SOLVED] to the thread title if your issue has been.
Search | FAQ | RTM

BoaR · Halfop Joined: 20 Jul 2007 Posts: 48

maybe it is possible to send the password encrypted? the bot will decrypt the password? this way even seeing the encrypted password it isnt the real password i am sending.. this could be a very good idea i think to implement on the bot.

When creating the owner user send the password unencrypted but bot should provide something like: This is your encrypted password, please use this password to login on the bot instead.

The password will be decrypted by the bot using md5 module or the default encryption method blowfish.

<BoaR> .file
<Eggdrop> What? You need '.help'

nml375 · Revered One Joined: 04 Aug 2006 Posts: 2857

Your best bet there would be to check one of the ssl-patches written to be used with eggdrop.
Keep in mind, that in order to achieve proper protection from encryption, keys must have been exchanged in a secure manner prior to connection attempt.
One option might be the challenge/respond scheme using a random hash; bot sends you a hash, you use the hash on your password using a "non-decryptable" algorithm, and returns the result. This however, would still need support on the clients (unless you're comfortable calculating md5/blowfish/sha/etc sums in your head), and is more sensitive to bruteforce attacks than using a secured channel such as provided by ssl.
_________________
NML_375, idling at #eggdrop@IrcNET

BoaR · Halfop Joined: 20 Jul 2007 Posts: 48

i have compiled my bot with the ssl patch but whenever i add set use-ssl 1 in my config the bot wont connect even if irc server supports ssl connection. so i dont know why it doesnt work..

as a side note i think i will continue sending clear passwords to the bot.

Is it possible to connect to the bot use SSH ? instead of telnet use ssh..

YooHoo · Posted: Sat Jul 28, 2007 7:38 pm Post subject:

BoaR · Halfop Joined: 20 Jul 2007 Posts: 48

i am running netbots i never seen this maybe i have to search the code ?

if i find a way to hide the password on the eggdrop source i will post here

YooHoo · Posted: Wed Aug 01, 2007 11:59 pm Post subject:

BoaR · Halfop Joined: 20 Jul 2007 Posts: 48

yup that works i have it running that way already Very Happy

I was asking something more like NickServ to hide passwords replacing the giving password with asterix ****.. the user can't see his own password. You ever seen this on a nickserv bot ? i dont know how well this will work on eggdrop tho.. maybe looking at the nickserv bot source code will reveal the answer. Smile

thanks tho, netbots is a nice botnet script, i wish there were more ..