RE: Worm samples /exploits

["Srinivasa Addepalli" <srao () intoto com>]

Hi,

You can find source code for real exploits in metasploit and milWorm sites.
You require simulator to simulate vulnerable applications to test
effectiveness of IPS devices or application firewalls. You can use low
interaction honeypots for this purpose or you can go with commercial tools. 


Srini


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of iv_soft () yahoo com
Sent: Tuesday, September 25, 2007 10:24 AM
To: focus-ids () securityfocus com
Subject: Worm samples /exploits

Hi,
  I am trying out a new IPS solution and would like to get some samples of
older exploits/worms which can be used to check the credibility of the
solution. There are number of tools out there which simulate them I believe
,yet it would be good to see if we can get a real sample which can be run on
a virtual machine and see how it impacts and then put the IPS solution in
place and see what it can block. I would appreciate if anybody could point
me to the right resources/website from where I could download these.

Regards
Amit.

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=in
tro_sfw 
to learn more.
------------------------------------------------------------------------


********************************************************************************
This email message (including any attachments) is for the sole use of the intended recipient(s) 
and may contain confidential, proprietary and privileged information. Any unauthorized review, 
use, disclosure or distribution is prohibited. If you are not the intended recipient, 
please immediately notify the sender by reply email and destroy all copies of the original message. 
Thank you.
 
Intoto Inc. 


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------