# 194,6667,6660-7000 - Pentesting IRC {% hint style="success" %} Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte)
Support HackTricks * Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! * **Join the** πŸ’¬ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.** * **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
{% endhint %} ## κΈ°λ³Έ 정보 IRCλŠ” μ²˜μŒμ— **일반 ν…μŠ€νŠΈ ν”„λ‘œν† μ½œ**둜, IANA에 μ˜ν•΄ **194/TCP**둜 ν• λ‹Ήλ˜μ—ˆμ§€λ§Œ, 일반적으둜 **6667/TCP** 및 μœ μ‚¬ν•œ ν¬νŠΈμ—μ„œ μ‹€ν–‰λ˜μ–΄ **루트 κΆŒν•œ** 없이 μž‘λ™ν•  수 μžˆμŠ΅λ‹ˆλ‹€. μ„œλ²„μ— μ—°κ²°ν•˜λŠ” 데 ν•„μš”ν•œ 것은 **λ‹‰λ„€μž„**λΏμž…λ‹ˆλ‹€. μ—°κ²° ν›„, μ„œλ²„λŠ” μ‚¬μš©μžμ˜ IP에 λŒ€ν•΄ μ—­ DNS 쑰회λ₯Ό μˆ˜ν–‰ν•©λ‹ˆλ‹€. μ‚¬μš©μžλŠ” 더 λ§Žμ€ 접근을 μœ„ν•΄ **μ‚¬μš©μž 이름**κ³Ό **λΉ„λ°€λ²ˆν˜Έ**κ°€ ν•„μš”ν•œ **운영자**와 일반 **μ‚¬μš©μž**둜 λ‚˜λ‰©λ‹ˆλ‹€. μš΄μ˜μžλŠ” λ‹€μ–‘ν•œ μˆ˜μ€€μ˜ κΆŒν•œμ„ 가지며, κ΄€λ¦¬μž κΆŒν•œμ΄ κ°€μž₯ λ†’μŠ΅λ‹ˆλ‹€. **κΈ°λ³Έ 포트:** 194, 6667, 6660-7000 ``` PORT STATE SERVICE 6667/tcp open irc ``` ## Enumeration ### Banner IRCλŠ” **TLS**λ₯Ό 지원할 수 μžˆμŠ΅λ‹ˆλ‹€. ```bash nc -vn openssl s_client -connect : -quiet ``` ### Manual μ—¬κΈ°μ—μ„œ **λ¬΄μž‘μœ„ λ‹‰λ„€μž„**을 μ‚¬μš©ν•˜μ—¬ IRC에 μ—°κ²°ν•˜κ³  μ•‘μ„ΈμŠ€ν•œ λ‹€μŒ ν₯미둜운 정보λ₯Ό λ‚˜μ—΄ν•˜λŠ” 방법을 λ³Ό 수 μžˆμŠ΅λ‹ˆλ‹€. IRC의 더 λ§Žμ€ λͺ…λ Ήμ–΄λŠ” [μ—¬κΈ°](https://en.wikipedia.org/wiki/List\_of\_Internet\_Relay\_Chat\_commands#USERIP)μ—μ„œ 확인할 수 μžˆμŠ΅λ‹ˆλ‹€. ```bash #Connection with random nickname USER ran213eqdw123 0 * ran213eqdw123 NICK ran213eqdw123 #If a PING : is responded you need to send #PONG : VERSION HELP INFO LINKS HELPOP USERCMDS HELPOP OPERCMDS OPERATOR CAPA ADMIN #Admin info USERS #Current number of users TIME #Server's time STATS a #Only operators should be able to run this NAMES #List channel names and usernames inside of each channel -> Nombre del canal y nombre de las personas que estan dentro LIST #List channel names along with channel banner WHOIS #WHOIS a username USERHOST #If available, get hostname of a user USERIP #If available, get ip of a user JOIN #Connect to a channel #Operator creds Brute-Force OPER ``` μ„œλ²„μ— λΉ„λ°€λ²ˆν˜Έλ‘œ λ‘œκ·ΈμΈν•˜λ €κ³  μ‹œλ„ν•  μˆ˜λ„ μžˆμŠ΅λ‹ˆλ‹€. ngIRCd의 κΈ°λ³Έ λΉ„λ°€λ²ˆν˜ΈλŠ” `wealllikedebian`μž…λ‹ˆλ‹€. ```bash PASS wealllikedebian NICK patrick USER test1 test2 :test3 ``` ### **IRC μ„œλΉ„μŠ€ μ°ΎκΈ° 및 μŠ€μΊ”** ```bash nmap -sV --script irc-botnet-channels,irc-info,irc-unrealircd-backdoor -p 194,6660-7000 ``` ### [Brute Force](../generic-methodologies-and-resources/brute-force.md#irc) ### Shodan * `호슀트 이름 쑰회` {% hint style="success" %} Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte)
Support HackTricks * Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! * **Join the** πŸ’¬ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** 🐦 [**@hacktricks\_live**](https://twitter.com/hacktricks\_live)**.** * **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos.
{% endhint %}