menu * {
  IRCop Tool:Trace
}

alias trace {
  window $+(-,$iif(!$window(@Bot-Tracker),aen1,n1)) @Bot-Tracker
  dialog -md IRCopTool IRCopTool
}

dialog IRCopTool {
  title "IRCop Tool"
  size -1 -1 317 235
  option dbu

  tab "Bot Finder",13,0 0 317 235
  tab "Trace",14
  tab "SpamFilter",48
  tab "Help",40

  text "Idents Added",1,79 66 50 15, tab 13
  list 2, 54 73 100 100 vsbar hsbar, tab 13
  text "Nicknames Added",3,184 66 50 15, tab 13
  list 4, 164 73 100 100 vsbar hsbar, tab 13
  button "Add Ident",5,54 168 50 20, tab 13
  button "Del Ident",6,104 168 50 20, tab 13
  button "Add Nickname",7,164 168 50 20, tab 13
  button "Del Nickname",8,214 168 50 20, tab 13
  edit "",9,54 188 80 10, tab 13
  button "Add",10,134 188 20 10, tab 13
  edit "",11,164 188 80 10, tab 13
  button "Add",12,244 188 20 10, tab 13

  edit "", 15, 59 24 111 10, autohs, tab 14
  button "Trace", 16, 176 23 37 12, tab 14
  text "Search Criteria:", 17, 16 25 41 8, tab 14
  list 18, 15 49 84 113, group size extsel, tab 14
  button "Execute", 19, 187 199 37 12, disable, tab 14
  combo 47, 133 200 50 72,disable size drop, tab 14
  box "Search", 20, 6 15 304 155, tab 14
  box "With Selected...", 21, 6 173 304 46, disable, tab 14
  edit "", 22, 52 183 50 10, disable autohs, tab 14
  text "Expire after:", 23, 14 184 35 8, disable, tab 14
  text "(e.g 1d)", 24, 106 185 25 8, disable, tab 14
  edit "", 25, 178 184 123 10, disable autohs, tab 14
  text "Reason:", 26, 152 185 23 8, disable, tab 14
  button "Cancel", 27, 262 222 37 9, ok cancel, tab 14
  list 28, 99 49 117 113, group size extsel, tab 14
  text "Nickname:", 29, 16 40 25 8, tab 14
  list 30, 216 49 84 113, group size extsel vsbar, tab 14
  text "Hostname:", 31, 101 40 27 8, tab 14
  text "Realname:", 32, 220 40 27 8, tab 14
  button "Clear", 33, 263 39 35 9, tab 14
  edit "", 34, 28 222 140 10, read autohs, tab 14
  text "Status:", 35, 6 223 20 8, tab 14
  check "After Akill/Kill, delete match from list", 36, 14 195 107 10, disable, tab 14
  button "Clonesxs Check",37,213 23 42 12, tab 14
  button "I",38,255 23 10 12, tab 14
  button "N",39,265 23 10 12, tab 14

  box "Output", 49, 6 15 301 90,tab 48
  edit "", 50, 62 91 93 10,tab 48
  text "String to filter:", 51, 19 92 38 8,tab 48
  check "Channel MSG", 52, 24 124 50 10,tab 48
  list 53, 19 24 276 64, size hsbar vsbar,tab 48
  check "Private MSG", 54, 24 133 50 10,tab 48
  check "Part MSG", 55, 24 160 50 10,tab 48
  check "Private Notice", 56, 24 142 50 10,tab 48
  check "Quit MSG", 57, 24 151 50 10,tab 48
  check "DCC", 58, 24 196 50 10,tab 48
  check "Away", 59, 24 178 50 10,tab 48
  check "Topic", 60, 24 169 50 10,tab 48
  check "User", 61, 24 187 50 10,tab 48
  radio "Kill", 62, 93 195 38 10,tab 48, group
  radio "Temp Shun", 63, 93 133 50 10,tab 48
  radio "Shun", 64, 93 143 50 10,tab 48
  radio "Kline", 65, 93 154 50 10,tab 48
  radio "Gline", 66, 93 165 50 10,tab 48
  radio "Zline", 67, 93 175 50 10,tab 48
  radio "Gzline", 68, 93 185 50 10,tab 48
  radio "Block", 69, 93 123 50 10,tab 48
  radio "DCC Block", 70, 93 206 50 10,tab 48
  box "Select one:", 71, 85 115 63 102,tab 48
  check "All", 72, 24 205 50 10,tab 48
  box "Select multiple:", 73, 16 115 63 102,tab 48
  button "Cancel", 74, 262 222 37 9, ok cancel,tab 48
  box "Group Box", 75, 6 107 301 113,tab 48
  button "Execute", 76, 192 90 37 12, disable,tab 48
  radio "Add", 77, 161 89 22 8,tab 48, group
  radio "Delete", 78, 161 96 27 8,tab 48
  button "List All", 79, 232 90 37 12,tab 48
  button "Clear", 80, 272 90 32 12,tab 48

  edit "This script is designed to easily and quickly ban botnets without accidentally labeling SwiftSwitch users as bots.",41, 0 14 317 15, read multi, tab 40
  edit "The Bot Finder tab allows you to add %, ?, and & in place of letters, numbers, and  ^_}{[]`|, as well as regex to detect bots when they connect, switch nicks, and quit.",42, 0 29 317 20, read multi, tab 40  
  edit "The Trace tab uses the 'os trace' command to make finding and akilling bots more effective. The Clonesxs search will check for typical Clonesxs nicks and idents, or will check nicks and idents separately if you press and N or I buttons.",43, 0 49 317 20, multi read, tab 40
  edit "This script will also detect when multiple nicks in the pattern *%%%%, such as 'bot1234' and 'bot4321', connect within 10 minutes of eachother from different hosts and will notify you of it.",44,0 69 317 20, multi read, tab 40
  edit "The aliases in this script are '/origsettings', which will reset the values in the Bot Finder tab to some common bot defaults. The '/nickexc nick' command will exempt a nick from being labeled as a bot if they match a bot pattern.",45,0 89 317 20, multi read tab 40
}

alias typeprint {
  return $+($chr(91),$1,$chr(93))
}

raw 229:*: {
  if ($dialog(IRCopTool)) {
    did -a IRCopTool 53 Type: $typeprint($3) Action: $typeprint($4) Reason/Regex: $typeprint($8-)
  }
  else {
    echo -q $2-
  }
}

ON *:Dialog:IRCopTool:sclick:79,80: {
  if ($did == 79) {
    did -r $dname 53
    /spamfilter
  }
  if ($did == 80) {
    did -r $dname 53
  }
}

on *:notice:*:?:{
  if ($nick == OperServ && $regex($1-,/Match: (.*) => .* (.*) on/) && $dialog(IRCopTool)) {
    tokenize 33 $regml(1)
    did -a IRCopTool 18 $1
    did -a IRCopTool 28 $2
    did -a IRCopTool 30 $remove($regml(2),$chr(40),$chr(41))
  }
  if ($nick == OperServ && $regex($1-,/Found (\d+) matches(?:[.,])(?: truncated list to (\d+))?/) && $dialog(IRCopTool)) {
    did -ar IRCopTool 34 Returned $qt($iif($regml(2),$regml(2),$regml(1))) matches.
  }
  if ($nick == OperServ && $regex($1-,/Unknown search criteria: (.*)/) && $dialog(IRCopTool)) {
    did -ar IRCopTool 34 Unknown search $qt($strip($regml(1)))
  }
  if ($nick == OperServ && $regex($1-,/^Access denied\.$/) && $dialog(IRCopTool)) {
    did -ar IRCopTool 34 Access denied. Inadequate Oper Privileges.
  }
}

on *:dialog:IRCopTool:edit:50: {
  did -e $dname 76
}

on *:dialog:IRCopTool:sclick:16,37,38,39:{
  if ($did != 16) {
    if ($did == 37) {
      did -o $dname 15 1 $(nick ?%%%* ident ~?%%%%,0)
    }
    if ($did == 38) {
      did -o $dname 15 1 $(ident ~?%%%%,0)
    }
    if ($did == 39) {
      did -o $dname 15 1 $(nick ?%%%* !ident *ss*,0)
    } 
  }
  if ($did($dname,15)) {
    msg OperServ trace print $did(15)
    did -r $dname 18,28,30
    did -o $dname 34 1 Search $qt($did(15)) initiated.
  }
  else {
    did -ar $dname 34 Search not intiated - Must enter search string!
  }
}

on *:dialog:IRCopTool:sclick:33:{
  did -r $dname 18,28,30
  did -b $dname 21-26,22,19,36
  did -ar $dname 34 List Cleared.
}

on *:dialog:IRCopTool:sclick:18,28,30:{
  var %x = 1
  while (%x <= $did($dname,$did,0).sel) {
    did -c $+ $iif($did($dname,$did,0).sel > 1,k) $dname $replace($remtok(18.28.30,$did,1,46),$chr(46),$chr(44)) $did($did,%x).sel
    inc %x
  }
  did -e $dname 19,21-26,36
}

on *:dialog:IRCopTool:sclick:19:{
  if ($did($dname,47).text == akill) {
    var %x = $did(28,0).sel
    var %y = 1
    while (%x > 0) {
      msg OperServ akill add $iif($did(22),$+($iif($left($did(22),1) != +,+),$did(22)),+7d) $+(*@,$gettok($did(28,$did(28,%x).sel).text,$numtok($did(28,$did(28,%x).sel).text,64),64)) $iif($did(25),$did(25),Abuse)
      if ($did(36).state == 1) {
        did -d $dname 18,28,30 $did(28,%x).sel
      }
      dec %x
      inc %y
    }
    if ($did(22).state == 1) {
      did -b $dname 21-26,22,19,36
    }
    did -ar $dname 34 $calc(%y -1) users AKilled for reason: $iif($did(25),$ifmatch,Abuse)
  }
  elseif ($did($dname,47).text == kill) {
    var %x = $did(18,0).sel
    var %y = 1
    while (%x > 0) {
      kill $did($dname,18,$did($dname,18,%x).sel)).text $iif($did($dname,25),$did($dname,25),Abuse)
      if ($did(36).state == 1) {
        did -d $dname 18,28,30 $did(18,%x).sel
      }
      dec %x
      inc %y
    }
    if ($did(22).state == 1) {
      did -b $dname 21-26,22,19,36
    }
    did -ar $dname 34 $calc(%y -1) users Killed for reason: $iif($did(25),$ifmatch,Abuse)
  }
}
on *:dialog:IRCopTool:sclick:36:{
  if ($did($did).state == 1) { 
    set %akill.pref1 $did($did).state
  }
  else { 
    unset %akill.pref1
  }
}

On *:Dialog:IRCopTool:close:0:{
  remini bots.ini Settings
  remini bots.ini coresidents
  remini bots.ini coresnicks
}

on *:Dialog:IRCopTool:init:0:{
  if (%akill.pref1) {
    did -c $dname 36
  }
  var %x = 1
  var %y = $ini(bots.ini,Idents,0)
  var %z = 0
  while (%x <= %y) {
    if ($ini(bots.ini,Idents,%x) >= %z) {
      var %z = $ini(bots.ini,Idents,%x)
    }
    inc %x
  }   
  var %a = 1
  var %b = $ini(bots.ini,Nicks,0)
  var %c = 0
  while (%a <= %b) {
    if ($ini(bots.ini,Nicks,%a) >= %c) {
      var %c = $ini(bots.ini,Idents,%a)
    }
    inc %a
  }
  writeini bots.ini Settings botidentnum $calc(%z +1)
  writeini bots.ini Settings botnicknum $calc(%c +1)
  loadidents
  loadnicks

  did -a $dname 47 Akill
  did -a $dname 47 Kill
  did -a $dname 47 Silence
  did -c $dname 36 1
  did -c $dname 47 1 
  did -c $dname 69 1
  did -c $dname 77 1
}

On *:Dialog:IRCopTool:sclick:5,6,7,8,10,12:{
  if ($did == 5) {
    addident $$?="Enter the ident ban you wish to add."
    loadidents
  }
  elseif ($did == 6) {
    if ($did(IRCopTool,2).sel) {
      remini bots.ini Idents $readini(bots.ini,n,coresidents,$v1)
      remini bots.ini coresidents $v1
      loadidents
    }
  }
  elseif ($did == 7) {
    addnick $$?="Enter the nick ban you wish to add."
    loadnicks
  }
  elseif ($did == 8) {
    if ($did(IRCopTool,4).sel) {
      remini bots.ini Nicks $readini(bots.ini,n,coresnicks,$v1)
      remini bots.ini coresnicks $v1
      loadnicks
    }
  }
  elseif ($did == 10) {
    if ($did(IRCopTool,9).text) {
      addident $v1
      loadidents
      did -r IRCopTool 9
    }
  }
  else {
    if ($did(IRCopTool,11).text) {
      addnick $v1
      loadnicks
      did -r IRCopTool 11
    }
  }
}

alias loadidents {
  remini bots.ini coresidents
  did -r IRCopTool 2
  var %x = $ini(bots.ini,Idents,0)
  var %y = 1
  while (%y <= %x) {
    did -a IRCopTool 2 $readini(bots.ini,n,Idents,$ini(bots.ini,Idents,%y))
    writeini bots.ini coresidents %y $ini(bots.ini,Idents,%y)
    inc %y
  }
  did -c IRCopTool 2 1
}

alias loadnicks {
  remini bots.ini coresnicks
  did -r IRCopTool 4
  var %x = $ini(bots.ini,Nicks,0)
  var %y = 1
  while (%y <= %x) {
    did -a IRCopTool 4 $readini(bots.ini,n,Nicks,$ini(bots.ini,Nicks,%y))
    writeini bots.ini coresnicks %y $ini(bots.ini,Nicks,%y)  
    inc %y
  }
  did -c IRCopTool 4 1
}

alias addnick {
  writeini bots.ini Nicks $readini(bots.ini,Settings,botnicknum) $1
  writeini bots.ini Settings botnicknum $calc($readini(bots.ini,Settings,botnicknum)) +1)
}

alias addident {
  writeini bots.ini Idents $readini(bots.ini,Settings,botidentnum) $1
  writeini bots.ini Settings botidentnum $calc($readini(bots.ini,Settings,botidentnum)) +1)
}

alias checknick {
  var %x = $ini(bots.ini,nicks,0)
  var %y = 1
  while (%y <= %x) {
    if ($regex($1,^ $+ $replace($readini(bots.ini,n,Nicks,$ini(bots.ini,Nicks,%y)),?,[a-zA-Z],%,[0-9],&,[\]\[\-\^{}\\_`\|]) $+ $)) {
      return $true
    }
    inc %y
  }
}

alias checkident {
  var %x = $ini(bots.ini,idents,0)
  var %y = 1
  while (%y <= %x) {
    if ($regex($1,^ $+ $replace($readini(bots.ini,n,Idents,$ini(bots.ini,Idents,%y)),?,[a-zA-Z],%,[0-9],&,[\]\[\-\^{}\\_`\|]) $+ $)) {
      return $true
    }
    inc %y
  }
}

on *:connect:{
  if ($network == SwiftIRC) { window -aen1 @Bot-Tracker }
}

on *:snotice:*Client connecting*:{
  if ($network == SwiftIRC) {
    if (. isin $7) {
      var %nick = $8
      var %host = $9
    }
    else {
      var %nick = $9
      var %host = $10
    }
    checkbot %nick %host
    var %ident = $remove($left(%host,$pos(%host,@,1)),$chr(40),$chr(64))
    if (($regex($left(%ident,3),^(~)?s{2})) || ($execcheck(%nick))) { halt }
    if ($checkident(%ident)) {
      $iif(!$window(@Bot-Tracker),window -aen1 @Bot-Tracker) 
      aline -ahp 7 @Bot-Tracker $timestamp SUSPICOUS Identd: Nick: %nick %host 
    }
    if ($checknick(%nick)) {
      $iif(!$window(@Bot-Tracker),window -aen1 @Bot-Tracker) 
      aline -ahp 7 @Bot-Tracker $timestamp SUSPICOUS NICK: %nick %host  
    }
  }
}

On *:Exit:{
  unset %bot.*
}

alias checkbot {
  var %nick = $1
  var %host = $2
  tokenize 64 %host
  var %hostname = $left($2,-1)
  if (($right(%nick,4) isnum) && ($len(%nick) >= 6) && ($left($right(%nick,5),1) !isnum) && (Guest !isin %nick) && (SwiftIRC !isin %nick) && (Unknown !isin %nick) && (!$regex($right($left($1,4),-1),^(~)?s{2}))) {
    var %y = 1 
    while ($var($+(%,bot.,%y))) {
      tokenize 32 $($var($+(%,bot.,%y),1),2)
      if ($left($1,-4) == $left(%nick,-4)) {
        if ((%hostname != $2) || (%nick != $1)) {
          $iif(!$window(@Bot-Tracker),window -aen1 @Bot-Tracker) 
          aline -ahp 10 @Bot-Tracker $timestamp Possible bot detection (check $+($left(%nick,-4),$str(%,4)) $+ ): $+(%nick,%host)
        }
        var %z = 1 
      }
      inc %y   
    }
    if (!%z) {
      var %x = 1
      while ($var($+(%,bot.,%x))) {
        inc %x
      }
      set -u600 $+(%,bot.,%x) %nick %hostname
    }
  }
}

on *:snotice:*has changed his/her nickname*:{
  if ($network == SwiftIRC) {
    var %nick1 = $4
    var %host = $5
    var %nick2 = $11
    checkbot %nick2 %host
    var %ident = $remove($left(%host,$pos(%host,@,1)),$chr(40),$chr(64))
    if (($regex($left(%ident,3),^(~)?s{2})) || ($execcheck(%nick1)) || ($execheck(%nick2))) { halt }
    if (($checkident(%ident)) || ($checknick(%nick1)) || ($checknick(%nick2))) {
      $iif(!$window(@Bot-Tracker),window -aen1 @Bot-Tracker) 
      aline -ahp 9 @Bot-Tracker $timestamp Ch:: From: %nick1 to: %nick2 %host
    }
  }
}

on *:snotice:*Client exiting*:{
  if ($network == SwiftIRC) {
    if ($6 == at) {
      var %ident = $remove($right($left($8,$pos($8,@,1)),$calc($pos($8,@,1) - $pos($8,!,1))),$chr(40),$chr(64))
      var %nick = $remove($left($8,$pos($8,!,1)),$chr(33),$chr(40))
      if (($regex($left(%ident,3),^(~)?s{2})) || ($execcheck(%nick))) { halt }
      if (($checkident(%ident)) || ($checknick(%nick))) { 
        $iif(!$window(@Bot-Tracker),window -aen1 @Bot-Tracker) 
        aline -ahp 5 @Bot-Tracker $timestamp $8 disconnected
      }
    }
    else {
      var %ident = $remove($left($7,$pos($7,@,1)),$chr(40),$chr(64))
      if (($regex($left(%ident,3),^(~)?s{2})) || ($execcheck($nick))) { halt }
      if (($checkident(%ident)) || ($checknick($6))) {
        $iif(!$window(@Bot-Tracker),window -aen1 @Bot-Tracker) 
        aline -ahp 5 @Bot-Tracker $timestamp $6 $7 disconnected 
      }
    }
  }
}

alias origsettings {
  $iif($dialog(IRCopTool),dialog -x IRCopTool) 
  remini bots.ini settings
  remini bots.ini nicks
  remini bots.ini idents
  writeini bots.ini Nicks 1 ?%%%%
  writeini bots.ini Nicks 2 ?%%%
  writeini bots.ini Nicks 3 lemming%%*
  writeini bots.ini Nicks 4 smurf%%*
  writeini bots.ini Idents 1 ?%%%%
  writeini bots.ini Idents 2 ?%%%
  writeini bots.ini Idents 3 lemming%%*
  writeini bots.ini Idents 4 smurf%%*
  writeini bots.ini settings botidentnum 5
  writeini bots.ini settings botnicknum 5
}

alias execcheck {
  var %x = $ini(bots.ini,Exceptions,0)
  var %y = 1
  while (%y <= %x) {
    if ($1 == $readini(bots.ini,Exceptions,$ini(bots.ini,Exceptions,%y))) {
      return $true
    }
    inc %y
  }
}

alias nickexc {
  var %x = 1
  var %y = $ini(bots.ini,Exceptions,0)
  var %z = 0
  while (%x <= %y) {
    if ($ini(bots.ini,Exceptions,%x) >= %z) {
      var %z = $ini(bots.ini,Exceptions,%x)
    }
    inc %x
  }   
  writeini bots.ini Exceptions $calc(%z +1) $1
}