.:[ packet storm ]:.
                             
global security disclosure
global security disclosure

 Section:  .. / worms  /

Page 1 of 1
<< 1 >> Files 1 - 18 of 18
Currently sorted by: File NameSort By: Last Modified, File Size

 ///  File Name: 1i0n.tar.gz
Description:
1i0n.tar.gz is an executable package for the 1ion worm by the ramen crew. Includes several shell scripts and helper binaries.
File Size:15406
Last Modified:Apr 17 03:39:38 2001
MD5 Checksum:002160e89fc8386261b60252ea6dd1a5

 ///  File Name: adore.worm.txt
Description:
Information on the Adore worm, a worm that we originally called the Red Worm which is similar to the Ramen and Lion worms. Adore scans the Internet checking Linux hosts to determine whether they are vulnerable to any of the following well-known exploits: LPRng, rpc-statd, wu-ftpd and BIND. LPRng is installed by default on Red Hat 7.0 systems. From the reports so far, Adore appears to have started its spread on April 1.
Author:Matt Fearnow
Homepage:http://www.sans.org
File Size:2635
Last Modified:Apr 8 20:41:54 2001
MD5 Checksum:1aaf1442ac408124ef5820ba592841d8

 ///  File Name: adorefind-0.2.0.tar.gz
Description:
Adorefind checks for the adore worm on the local system.
Homepage:http://www.ists.dartmouth.edu/IRIA/knowledge_base/tools/adorefind.htm
File Size:3151
Last Modified:Apr 8 20:44:19 2001
MD5 Checksum:2734de0b439d2701afbdcfc85ba4dedf

 ///  File Name: AnnaKlean.cpp
Description:
AnnaKlean is a Console Application To Wipe Out Anna Kournikova Worm From Registry.
Author:Wanderley J. Abreu Jr.
File Size:1436
Last Modified:Feb 28 03:06:30 2001
MD5 Checksum:4de4550be4a992b19ddd77aa72cb0c06

 ///  File Name: AnnaKournikova-source.txt
Description:
Unencrypted source code for the AnnaKournikova email worm, which is written in vbs. Sent by Wanderley J. Abreu Jr.
File Size:2075
Last Modified:Feb 28 03:03:38 2001
MD5 Checksum:4ad89f22979f76adfc6534ab76a310c9

 ///  File Name: apache-worm.c
Description:
Apache-worm.c is an Internet worm based on the GOBBLES exploit for the Apache chunked encoding vulnerability. Affects FreeBSD 4.5 Apache 1.3.20-24.
File Size:67605
Last Modified:Jul 3 08:43:47 2002
MD5 Checksum:bc48df43745876b0c40ef4f9854e67c9

 ///  File Name: cinikworm.tgz
Description:
The Cinik worm is based on the bugtraq worm. Installs a ddos client.
File Size:48920
Last Modified:Sep 29 12:16:38 2002
MD5 Checksum:c2ef7909789751390183321abdf732ff

 ///  File Name: crew.tgz
Description:
Crew.tgz is the executable package for the lion worm. Includes 1i0n.sh and helper binaries.
File Size:13365
Last Modified:Mar 28 21:53:26 2001
MD5 Checksum:8e791aeee8bddf7f4f75edac002b525e

 ///  File Name: die_rst.tgz
Description:
Remotely detects and cleans binaries infected with the RST worm.
File Size:11070
Last Modified:Sep 11 06:52:29 2001
MD5 Checksum:9609d3460acff6c72d9663f745a2ce27

 ///  File Name: GMW_v0.1.zip
Description:
Godmessage worm is a worm based on Godmessage IV. Untested dangerous code.
Author:Taint
File Size:9167
Last Modified:Oct 28 09:53:29 2000
MD5 Checksum:2f111c59d2a8461f940c38325aad1fe2

 ///  File Name: mindjail.txt
Description:
Quick analysis of the Mindjail worm being distributed by the trojan sdbot 0.5b.
Author:sloth
Homepage:http://www.nopninjas.com
File Size:2303
Last Modified:Jul 6 21:44:27 2003
MD5 Checksum:2ca02680080ee37930a1466702574257

 ///  File Name: nb_worm.c
Description:
Netbios Worm v1.0 is a simple program which shows how a worm can spread across netbios shares.
Author:r-22
Homepage:http://www.manshadow.org
File Size:4201
Last Modified:Dec 6 11:38:22 2002
MD5 Checksum:0007e7d6cf65a804f54cee8ff38dc0ef

 ///  File Name: PolyPedoWorm.zip
Description:
PolyPedoWorm is an example of a way to create a polymorphic, Microsoft Encoded Worm. Features include Polymorphism, Varying file size, and renaming of the variants.
Author:Taint
File Size:20781
Last Modified:Mar 9 20:41:42 2001
MD5 Checksum:550400eda25aa0e6d705398e726e6a2c

 ///  File Name: sass.snort.txt
Description:
Snort signatures that identify the new Sass worm that is propagating.
Author:Martin Overton
Related Exploit:HOD-ms04011-lsasrv-expl.c"
File Size:1000
Last Modified:May 4 04:58:36 2004
MD5 Checksum:65392ba74c0fbbd684793905ac32c32d

 ///  File Name: tclworm.tcl
Description:
Tclworm.tcl is a worm coded in TCL/Expect which exploits easily guessed passwords.
Author:sirius_black
Homepage:http://membres.lycos.fr/lotfree
File Size:5513
Last Modified:Dec 16 05:33:48 2003
MD5 Checksum:b72811bcbbac3894e97672fd8c859029

 ///  File Name: voyagerWorm.txt
Description:
Snippet of code from the Voyager Beta worm.
File Size:6849
Last Modified:Nov 1 06:57:57 2005
MD5 Checksum:e46bef2356755e2a2cde54e715de3b8f

 ///  File Name: worms.pl
Description:
Worms.pl is a script which checks apache log files for nimda and code red attempts.
Author:Tyler Longren
Homepage:http://longren.no-ip.org
File Size:4661
Last Modified:Mar 31 08:43:09 2002
MD5 Checksum:deb9142693256bce6e295eaf0263adbc

 ///  File Name: zbcode.c
Description:
Source code for a worm that spreads using Zboard PHP vulnerabilities. Known as the ZeroBoard worm, it infects Linux, FreeBSD, and Sun.
File Size:19040
Last Modified:Feb 10 04:49:00 2005
MD5 Checksum:0d482a78e5fa3223544775c1ddc6dfdd