KeyFocus - KFSensor Extras - SubSeven Commands
 
 

SubSeven Command List

kfSubSeven - information and download

Refer to the following list of commands to interpret the traffic between a SubSeven client ands its server.

APR - add port redirect
BMB - restore mouse buttons
BOT - start irc bot
BTR - read irc bot settings
BTS - stop irc bot
CAD - CtrlAltDel disable
CAE - CtrlAltDel enable
CCD - close cdrom
CCT - clear clipboard
CL2 - screen preview
CL7 - web cam
CLS - close server
COM - execute command
CPT - set trojans port
CRS - refresh resolutions
CRT - change resolution
CSLOFF - CapsLock off
CSLON - CapsLock on
CSS - full screen capture
CTP - change thread priority
CVC - close chat
CWC - change colors
DEM - disable email notify
DIC - disable irc notify
DIN - disable icq notify
DOS - run dos command
EEM - email notify
EIC - irc notify
EIN - icq notify
FFN - find files
FLP - flip screen
FMD - delete file
FMP - play wave
FMS - file size
FMW - set wall paper
FMX - run file
FMZ - display picture
FTP - ftp server
GAP - get aim passwords
GHI - get home info
GIP - get icq passwords
GMI - get pc info
GPR - refresh redirect ports
GPW - get recorded passwords
HDI - desktop hide
HGU - disconnect victim
HTB - hide taskbar
IMX - matrix
IN2 - open screen preview
IN7 - open web cam
IRG - registry editor
IUL - ICQ takeover
KRP - kill process
MFV - chat response
MNF - create folder
MTK - send keys
MTV - chat message
MW: - send message
NMLOFF - NumLock off
NMLON - NumLock on
NPD - set password
NTF - download file
OCC - chat with other clients
OCD - open cdrom
OVC - chat with the victim
PING - keep alive
PSS - get cached passwords
PTF - print file
PWD - password
RAS - retrieve RAS passwords
RAW - refresh windows
RCT - read clipboard
RIS - remote ip scan
RMB - reverse mouse buttons
RMS - remove server
RPL - process manager
RSF - sound recording
RSH - file manager
RSP - restart server
RSS - run screen saver
RTD - get time
RTF - upload file
RWC - restore colors
RWN - shutdown/restart
SAY - say text-2-speech
SCLOFF - ScrollLock off
SCLON - ScrollLock on
SCT - change clipboard
SDI - desktop restore
SFT - upload
SIS - stop ip scan
SMC - mouse cursor
SMT - mouse tails
SNS - change screen saver
SP1 - speaker on
SP2 - speaker off
SPR - stop port redirect
SPY - spy
STA - start button
STB - restore taskbar
STD - set date/time
SVT - volume settings
TKS - key logger
TMF - monitor off
TMN - monitor on
TTS - check text-2-speech
UFU - update from url
UPS - update from local
URL - open browser