Forums Scripts & Popups Detecting mIRC 6-6.11 exploit.

Hi

I'm using mIRC v6.12 and when I get in my status window:
[timestamp] DCC Send from <nick> rejected (invalid parameters)
when someone try to use the mIRC 6-6.11 dcc exploit, I'd like to be able to detect it using an event so I could ban the user from all the chans I'm opped in automatically (using $comchan(), while loops, isop...). I have tried to detect when I get this msg with many events but with no success. Is it possible to detect such a thing ? If so, can someone tell me with what event ? Thanks...

Yes, it's possible. Here's a short script I made:

• On *:logon:*:{
  .debug -i nul xploit
  }
  
  alias xploit {
  if $regex($1,/^<- :[/b](\S+)!\S+@\S+ privmsg (\S+) :\x01dcc (?:send|resume|accept) +\S*"(?:\S* ){35}/i) {
  var %nick = $regml(1), %target = $regml(2)
  echo 4 -at > Possible DCC Exploit by %nick on %target
  }
  }

Below the /echo line you can add your kickban commands, for example: /ban -k %target %nick 2 <kick msg>

Another script was made by Olathe and can be found here.