Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: IRC protocols and insecurity |
|---|---|
| Date: | Wed, 08 Sep 2004 14:15:48 -0400 |
proc ps <procps@softhome.net> writes: [snip]
As the clients purpose are just for file sharing, email, internet access, instant messaging and some irc usage for the students.
[snip]
How can I secure/scan for virii what the members are downloading via IRC? How about the possibilities of hijacking connections via IRC? What are the threats that can come to this network via the IRC protocol?
The File transfer capabilities of IRC are implemented using the DCC protocol. DCC was an addon after IRC was created that transmits port information across the messages between clients and then one client connects to the other client without using the server at all. http://www.irchelp.org/irchelp/rfc/dccspec.html There are client side vulnerabilities and server side vulnerabilities in IRC software much like anything else. -- Chris Green <cmg@dok.org> Don't use a big word where a diminutive one will suffice. ------------------------------------------------------------------------------ Ethical Hacking at the InfoSec Institute. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. Check out our Advanced Hacking course, learn to write exploits and attack security infrastructure. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. http://www.infosecinstitute.com/courses/ethical_hacking_training.html -------------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Achilles proxy for linux, Rajeev Kumar |
|---|---|
| Next by Date: | Re: Rogue activity methodology (was: Tool to find hidden web proxy server), Chris Brenton |
| Previous by Thread: | IRC protocols and insecurity, proc ps |
| Next by Thread: | Re: IRC protocols and insecurity, Jose Maria Lopez |
| Indexes: | [Date] [Thread] [Top] [All Lists] |