Full Disclosure mailing list archives

DDoS on the 16th - Fail if no DNS resolution?


From: Jason Witty <jason () wittys com>
Date: Wed, 13 Aug 2003 19:12:29 -0500

All,

Has anyone tested this worm yet to see what it'll do if you set up an internal DNS entry for windowsupdate.com to point to a black hole address (127.0.0.1 for example) and then set the system clock to be August 16th (this Saturday)?

Based on the way it's obviously coded, I wouldn't think the authors would have built much error handling into it, but I haven't got source to read....

Thanks very much for any input.

Jason

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: