asn.1 worm

[Dave Aitel <dave () immunitysec com>]

The new ASN.1 worm is available at 
https://www.immunitysec.com/downloads/msupdtm.exe . It's basically just  
solar eclipse's killbill sploit tacked onto the already existing worm. 
The worm itself is a pain in the rear to debug, but throw a breakpoint 
on 41e9e0 and you should be good to go.

http://netsecurity.about.com/cs/windowsxp/a/aa021204.htm
http://www.metasploit.com/projects/Framework/modules/exploits/msasn1_ms04_007_killbill.pm

-dave

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave