Scanning for Confiker via nmap

[florian.sicking at hotmail.com (Florian Sicking)]

I haven't tested it by myself yet but you can get it here:
http://iv.cs.uni-bonn.de/uploads/media/scs.zip

Additional information are available here:
http://honeynet.org/node/388

Cheers,
Florian


-----Original Message-----
From: pauldotcom-bounces at mail.pauldotcom.com
[mailto:pauldotcom-bounces at mail.pauldotcom.com] On Behalf Of Chris Merkel
Sent: Montag, 30. M?rz 2009 17:10
To: PaulDotCom Security Weekly Mailing List
Subject: [Pauldotcom] Scanning for Confiker via nmap

According to this:
http://www.theregister.co.uk/2009/03/30/conficker_signature_discovery/

A script should be released today to scan for conficker-infected
machines over the wire.

I looked at the NSE portal and haven't seen anything yet - would it
show up there, or is there a development site or repository where this
will first appear?

I'd like to get a scan in before April 1st, when variant C drops.

-- 
- Chris Merkel
_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com