Full Disclosure mailing list archives

Re: mydoom.c information


From: Rodrigo Barbosa <rodrigob () suespammers org>
Date: Mon, 8 Mar 2004 17:39:00 -0300

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, Mar 08, 2004 at 12:15:20PM -0500, Maxime Ducharme wrote:
Another way :

Create a script named "mydoom_listener",
chmod 700 mydoom_listener, and then start it
via ./mydoom_listener &


mydoom_listener contains 2 lines :
nc -l -p 3127 > doomjuice.dump$$
./mydoom_listener &

will create random file names.

Can you say zombie processes ? Resource starvation ?

I'm sure you can :)

We could also do something like the following (one more entry on the
A 1000 Ways to Use NC book):

while true
do
        nc -l -p 3127 > `mktemp doomjuice.dump.XXXXXX`
done

- -- 
Rodrigo Barbosa <rodrigob () suespammers org>
"Quid quid Latine dictum sit, altum viditur"
"Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFATNnkpdyWzQ5b5ckRAq30AJ9lQSr259+xVFbyhp613dyILEKEDQCeOpFC
azZhcFLjO97h1c2CkdIPhy0=
=yAer
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: