IRC Enumeration
IRC stands for Internet Relay Chat, this application allows the users to text each other through different channels.
The tool for the trade will be: Hexchat
![](https://lyethar.gitbook.io/~gitbook/image?url=https%3A%2F%2F3418038199-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FyTPWZkKJbJfX8uHiRzmn%252Fuploads%252F3RlPfXLQvWP4FcFRHcOM%252Fimage.png%3Falt%3Dmedia%26token%3Da8e4e138-a63b-4789-90bf-a7b04fca5512&width=300&dpr=4&quality=100&sign=b1c4b11f&sv=1)
In order to connect to the correct server, we have to add a new network by providing a new IP address and a port.
![](https://lyethar.gitbook.io/~gitbook/image?url=https%3A%2F%2F3418038199-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FyTPWZkKJbJfX8uHiRzmn%252Fuploads%252Fuq8MxYP9txUcVIUMOcQ8%252Fimage.png%3Falt%3Dmedia%26token%3D10a4ece8-9b98-4b15-b935-dcf2e554633d&width=300&dpr=4&quality=100&sign=39c1e800&sv=1)
Upon connection we are able to see different chats by scanning different channels.
![](https://lyethar.gitbook.io/~gitbook/image?url=https%3A%2F%2F3418038199-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FyTPWZkKJbJfX8uHiRzmn%252Fuploads%252FsmF4JDxlQW2sqHs5oWX8%252Fimage.png%3Falt%3Dmedia%26token%3Dbd0ab090-2e8d-4f7d-b95c-e4264235624b&width=300&dpr=4&quality=100&sign=24920939&sv=1)
To scan for different channels we change the frequency at the bottom, and download the list. Moreover we see that when we connect to a channel we are able to chat with people. This helped us in UT99, we found out that the person we were chatting with broadcasted a message that allowed us to see that the server was running Unreal Tournament 99 and then from there we exploited this.
![](https://lyethar.gitbook.io/~gitbook/image?url=https%3A%2F%2F3418038199-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FyTPWZkKJbJfX8uHiRzmn%252Fuploads%252FI6MCEUJnfPcafa4sHfos%252Fimage.png%3Falt%3Dmedia%26token%3Da46dc1d5-44be-4873-9100-2894cdb7f803&width=300&dpr=4&quality=100&sign=d6713d45&sv=1)
In conclusion by enumerating chat messages we see what people are saying and maybe somebody gives up a certain vulnerable service.
Here is the example I mentioned before and how we exploited it.
Credit: iyethar gitbook
Last updated
Was this helpful?