Blame


1 aa513bf8 2023-01-22 jrmu version=pmwiki-2.2.130 ordered=1 urlencoded=1
2 aa513bf8 2023-01-22 jrmu agent=Mozilla/5.0 (X11; Linux x86_64; rv:97.0) Gecko/20100101 Firefox/97.0
3 aa513bf8 2023-01-22 jrmu author=xfnw
4 aa513bf8 2023-01-22 jrmu charset=UTF-8
5 aa513bf8 2023-01-22 jrmu csum=
6 aa513bf8 2023-01-22 jrmu ctime=1644458409
7 aa513bf8 2023-01-22 jrmu host=71.246.231.249
8 aa513bf8 2023-01-22 jrmu name=Botnow.SqliteViews
9 aa513bf8 2023-01-22 jrmu rev=2
10 aa513bf8 2023-01-22 jrmu targets=
11 aa513bf8 2023-01-22 jrmu text=by default, Botnow's sqlite database is scattered across different tables, making it difficult to search for similarities in different columns.%0a%0athis can be resolved by creating "views" which are basically virtual tables that are the output of some other statement%0a%0afor example, with these views%0a[@%0aCREATE VIEW bncirc AS SELECT * FROM irc INNER JOIN bnc ON irc.id = bnc.ircid;%0aCREATE VIEW shellirc AS SELECT * FROM irc INNER JOIN shell ON irc.id = shell.ircid;%0a@]%0a%0aif you wanted to find all shell accounts registered via gmail who are in the @@182.1.0.0/16@@ subnet, %0ainstead of having to use messy nested statements, it would be super simple%0a[@%0aSELECT username,email,ctcpversion FROM shellirc WHERE email LIKE "%25@gmail.com" AND ip LIKE "182.1.%25";%0a%0ausername email ctcpversion %0a-------- ------------------------------------ -----------------------------------------------------------------------------%0ajrmu ihaslotsofshellaccounts923@gmail.com AndroIRC - Android IRC Client (5.2 - Build 6830152) - http://www.androirc.com %0ajrsusmu redacted123@gmail.com AndroIRC - Android IRC Client (5.2 - Build 6830152) - http://www.androirc.com%0a@]%0aas we can see, jrmu is suspicious and might be a clone!%0a
12 aa513bf8 2023-01-22 jrmu time=1644458447
13 aa513bf8 2023-01-22 jrmu author:1644458447=xfnw
14 aa513bf8 2023-01-22 jrmu diff:1644458447:1644458409:=12c12%0a%3c instead of having to use messy nested statements, it would be super simple%0a---%0a> it would be super simple, instead of having to use messy nested statements%0a
15 aa513bf8 2023-01-22 jrmu host:1644458447=71.246.231.249
16 aa513bf8 2023-01-22 jrmu author:1644458409=xfnw
17 aa513bf8 2023-01-22 jrmu diff:1644458409:1644458409:=1,21d0%0a%3c by default, Botnow's sqlite database is scattered across different tables, making it difficult to search for similarities in different columns.%0a%3c %0a%3c this can be resolved by creating "views" which are basically virtual tables that are the output of some other statement%0a%3c %0a%3c for example, with these views%0a%3c [@%0a%3c CREATE VIEW bncirc AS SELECT * FROM irc INNER JOIN bnc ON irc.id = bnc.ircid;%0a%3c CREATE VIEW shellirc AS SELECT * FROM irc INNER JOIN shell ON irc.id = shell.ircid;%0a%3c @]%0a%3c %0a%3c if you wanted to find all shell accounts registered via gmail who are in the @@182.1.0.0/16@@ subnet, %0a%3c it would be super simple, instead of having to use messy nested statements%0a%3c [@%0a%3c SELECT username,email,ctcpversion FROM shellirc WHERE email LIKE "%25@gmail.com" AND ip LIKE "182.1.%25";%0a%3c %0a%3c username email ctcpversion %0a%3c -------- ------------------------------------ -----------------------------------------------------------------------------%0a%3c jrmu ihaslotsofshellaccounts923@gmail.com AndroIRC - Android IRC Client (5.2 - Build 6830152) - http://www.androirc.com %0a%3c jrsusmu redacted123@gmail.com AndroIRC - Android IRC Client (5.2 - Build 6830152) - http://www.androirc.com%0a%3c @]%0a%3c as we can see, jrmu is suspicious and might be a clone!%0a
18 aa513bf8 2023-01-22 jrmu host:1644458409=71.246.231.249