Full Disclosure mailing list archives
msblast DDos counter measures - a new worm to fix the problem
From: "Daniel Rudolph" <lists () daniel-rudolph de>
Date: Fri, 15 Aug 2003 15:20:12 +0200
Hi, i have an (maybe) new idea that worth discussing. What about writing a new worm based on the well know exploit - this worm should do something like: - disinfect the machine from the know variants of msblast - install the patch or at least inform the user that he should to that - spread out like every worm does ;-) The worm should stop spreading and delete itself if he cant effect new systems. Maybe if 95% of his attacks failed on an open 135 port. Or 100% of the last X machine he attacked wasnt reachable on that port. I dont think I have all the needed skills to make that really work like it should. Also im not sure if that really is an solution or just an other stupid idea. Tanks for your ideas about that. Cya Daniel PS: greetings to Kristian M. who brought that idea into my mind but dont wanted to post here _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: msblast DDos counter measures (More Insight Maybe?) Christopher Lyon (Aug 15)
- RE: msblast DDos counter measures (More Insight Maybe?) B3r3n (Aug 15)
- Re: msblast DDos counter measures (More Insight Maybe?) Vladimir Parkhaev (Aug 15)
- Re: msblast DDos counter measures (More Insight Maybe?) Chris Garrett (Aug 15)
- msblast DDos counter measures - a new worm to fix the problem Daniel Rudolph (Aug 15)
- Re: msblast DDos counter measures - a new worm to fix the problem Paul Schmehl (Aug 15)
- Re: msblast DDos counter measures - a new worm to fix the problem Ron DuFresne (Aug 15)
- msblast DDos counter measures - a new worm to fix the problem Daniel Rudolph (Aug 15)
- RE: msblast DDos counter measures (More Insight Maybe?) B3r3n (Aug 15)
- <Possible follow-ups>
- RE: msblast DDos counter measures (More Insight Maybe?) Christopher Lyon (Aug 15)
- Re: msblast DDos counter measures (More Insight Maybe?) Vladimir Parkhaev (Aug 15)
- RE: msblast DDos counter measures (More Insight Maybe?) Christopher Lyon (Aug 15)
- Re: msblast DDos counter measures (More Insight Maybe?) Vladimir Parkhaev (Aug 15)