From 25c6f7a84e557f1874f12852c4783ca1e1ae2d0e Mon Sep 17 00:00:00 2001
From: acidvegas <acid.vegas@acid.vegas>
Date: Tue, 30 May 2023 17:48:13 -0400
Subject: [PATCH] Advanced open proxy monitoring detection via WHOIS replies

---
 ircp.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ircp.py b/ircp.py
index 39dc378..b95e09c 100644
--- a/ircp.py
+++ b/ircp.py
@@ -341,7 +341,11 @@ class probe:
 					self.loops['init'] = asyncio.create_task(self.loop_initial())
 				elif numeric == '311' and len(args) >= 4: # RPL_WHOISUSER
 					nick = args[3]
-					debug(f'{self.display}\033[34mWHOIS\033[0m {nick}')
+					if 'open proxy' in line.lower() or 'proxy monitor' in line.lower():
+						self.snapshot['proxy'] = True
+						error(self.display + '\033[93mProxy Monitor detected\033[30m')
+					else:
+						debug(f'{self.display}\033[34mWHOIS\033[0m {nick}')
 				elif numeric == '322' and len(args) >= 4: # RPL_LIST
 					chan  = args[3]
 					self.channels['all'].append(chan)