Full Disclosure mailing list archives

worms wanted


From: Stephanie Wehner <_ () r4k net>
Date: Sat, 15 May 2004 12:23:05 +0200

Hi,

I'm currently running some experiments classifying network traffic.
In particular, I am interested in classifying worms using a new
classification method. Unfortunately, however, I don't have a honeynet
or other large scale network available to collect them. I'm also 
interested in more 'historic' worms, who have died out by now. Thus 
I was hoping that some of you might be able to help me out. 

In particular, I would be interested in:
- the executables used by worms. Any new worms, but any older worm 
  is fine as well. Since I am interested in recurring patterns 
  common to all worms, I'm not only looking for different worms, but
  also different versions of the same worm.

- packet traces of all worm interactions, starting from the initial
  infection to later spreading of the worm

Please mail me off list, since I gather from the previous discussions
that posting worms to the list would not be appreciated.

Disclaimer, (before any of you start accusing me of being a 'viruskiddie'
or whatever :) ): My interest in these worms is purely academic and 
restricted to their patterns. In fact, I don't even own a windows box
myself to create viri on or something. I will be happy to share the
results of my classification experiments with you, once I'm done.

Thanks a lot, 
Steph

--<> _ () r4k net <>------------------<> FreeBSD <>-------------------
#3 - Anime Law of Sonic Amplification, First Law of Anime Acoustics
In space, loud sounds, like explosions, are even louder because
there is no air to get in the way.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: