Full Disclosure mailing list archives
mydoom.c information
From: "morning_wood" <se_cur_ity () hotmail com>
Date: Sun, 7 Mar 2004 09:43:03 -0800
bascially looking for sync-src-1.00.tbz. That message was posted to thisavail on infected hostsThis is how I came to be in possession of it: nc -l -p 3127 > doomjuice.dump You will probably want to write a loop to restart netcat because it exits after a successful transfer.
nc -L -p 3127 > out.txt note: " -L " will not exit your netcat, as it is for a persistant listener. please see http://lists.netsys.com/pipermail/full-disclosure/2004-February/017126.html as i do not wish to type-iterate. Donnie Werner http://exploitlabs.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- mydoom.c information m . mohr (Mar 06)
- Re: mydoom.c information Gregory A. Gilliss (Mar 07)
- Message not available
- Re: mydoom.c information m . mohr (Mar 07)
- Re: mydoom.c information John Sage (Mar 07)
- Re: mydoom.c information m . mohr (Mar 07)
- Re: mydoom.c information m . mohr (Mar 07)
- <Possible follow-ups>
- mydoom.c information morning_wood (Mar 07)
- Re: mydoom.c information John Sage (Mar 07)
- Re: mydoom.c information morning_wood (Mar 07)
- Re: mydoom.c information John Sage (Mar 07)
- Re: mydoom.c information Gyrniff (Mar 07)
- RE: mydoom.c information Chris Eagle (Mar 07)
- RE: mydoom.c information Frank Knobbe (Mar 07)
- RE: mydoom.c information m . mohr (Mar 07)
- RE: mydoom.c information Frank Knobbe (Mar 07)
- Re: mydoom.c information Maxime Ducharme (Mar 08)
- Re: mydoom.c information Rodrigo Barbosa (Mar 08)
- Re: mydoom.c information John Sage (Mar 07)