Re: Collecting Malware

[r00t <r00t () ellicit org>]

I agree, you have two choice, collect them yourself with a low
interaction honeypot or explore the wealth of malware on
offensivecomputing.net

On Mon, Jul 27, 2009 at 5:02 AM, 51l3n73y3s<51l3n7 () live in> wrote:
> Just download the live samples and if you don't find what you want, open a
> thread for it:
>
> http://www.offensivecomputing.net
>
> Regards, Sandeep
>
> --------------------------------------------------
> From: "Brandon Gotch" <stuffypants () gmail com>
> Sent: Sunday, July 26, 2009 2:39 AM
> To: "Brian Pohlman" <bjpohlman1 () gmail com>;
> <security-basics () securityfocus com>
> Subject: Re: Collecting Malware
>
> > I've found one method that worked fairly well for me was to use VMWare (as
> > already stated) and using isolated snapshots (that is without VMWare tools,
> > lessen the chance of something jumping to the host) and using good old
> > Google to search for sites that I suspected would deliver malware. Of course
> > Google has implemented some measures to make being infected difficult, it
> > still worked very well.
> >
> >
> > -- Brandon
> >
> > --------------------------------------------------
> > From: "Brian Pohlman" <bjpohlman1 () gmail com>
> > Sent: Thursday, July 16, 2009 7:14 AM
> > To: <security-basics () securityfocus com>
> > Subject: Collecting Malware
> >
> > > I'm looking to get "spammed" or "attacked" so to speak for the purpose
> > > of collecting malware for analysis. I've set up a few vulnerable
> > > machines on my network, made some changes to my router to expose those
> > > machines. I've also signed up for various email addresses in hopes
> > > that something comes (malicious attachments) through that way. My
> > > question is, what is the best way to collect malware, if there is even
> > > one solid method?
> > >
> > > ------------------------------------------------------------------------
> > > Securing Apache Web Server with thawte Digital Certificate
> > > In this guide we examine the importance of Apache-SSL and who needs an
> > > SSL certificate.  We look at how SSL works, how it benefits your company and
> > > how your customers can tell if a site is secure. You will find out how to
> > > test, purchase, install and use a thawte Digital Certificate on your Apache
> > > web server. Throughout, best practices for set-up are highlighted to help
> > > you ensure efficient ongoing management of your encryption keys and digital
> > > certificates.
> > >
> > >
> > > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > > ------------------------------------------------------------------------
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL
> > certificate.  We look at how SSL works, how it benefits your company and how
> > your customers can tell if a site is secure. You will find out how to test,
> > purchase, install and use a thawte Digital Certificate on your Apache web
> > server. Throughout, best practices for set-up are highlighted to help you
> > ensure efficient ongoing management of your encryption keys and digital
> > certificates.
> >
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and how
> your customers can tell if a site is secure. You will find out how to test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------



-- 
NodeReality - random ramblings on code, security, and similar
http://www.nodereality.com

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------