简介：a blog about the worm problem, technology, detection, and defenses.

原站：http://www.wormblog.com/

标签：wormblog

“worm blog”的内容更新

累计：13 篇（自 2008-01-10 起）

更新：约3篇/年，最后更新1422 天前

worm blog

Facebook Worm?

Details are sketchy at this point, but is Facebook undergoing an XSS worm attack? I checked with my Aunt, and she thinks someone may have stolen her password and hijacked her account to send out those messages to all her friends. My brother got a few of these posted to his wall as well from her Account. I also noticed that her status was changed to, “... (313 天前)

http://inezha.com/w/0r0wbx2

worm blog

Writing A Modular Universal XSS Worm

With the recent Orkit worm, and a few MySpace worms, web/XSS worms are a very interesting topic. Here's someone's attempt on the Ph4nt0m group discussion site who is trying to create a sustainable, growable XSS worm. It seems that the use of a centralized JS source file could be it's Achilles heel, however. The biggest issue regardingwebapplication wo... (313 天前)

http://inezha.com/w/egn5jx0

worm blog

LEET '08 Call for Papers

The First USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET '08) has a CFP that closes soon. From the CFP:OverviewAs the Internet has become a universal mechanism for commerce and communication, it has also become an attractive medium for online criminal enterprise. Today, widespread vulnerabilities in both software and user behavior a... (313 天前)

http://inezha.com/w/ns0nuxr

worm blog

Diminutive XSS Worm Replication Contest

A friend pointed this out to me. Evidently the Sla.ckers.org website is hosting a "Diminutive XSS Worm Replication Contest". Their mission: to see who an write a new XSS worm (like the MySpace one, the recent Orkut one, etc).The goal of the contest is to have a functional web worm in as small a package as possible. From the website: Okay folks, new sma... (313 天前)

http://inezha.com/w/91norwf

worm blog

The 5th ACM Workshop on Recurring Malcode (WORM 2007

Morning, everyone. I know Wormblog has been very, very silent lately as I've been very busy with work. However, I'll wake it up and post a conference call for papers that applies here. I'm on the PC for WORM07, so I should have done this sooner ...Internet-wide infectious epidemics have emerged as one of the leading threats to information security and ... (313 天前)

http://inezha.com/w/bdtl2wz

worm blog

Grey Goo hits Second Life

This isn't the first time a worm (self replicating code) has hit a a large online game, and it wont be the last. Via various news outlets (like this BBC story, Slashdot, and the official Second Life blog:[PST 2:44PM] An attack of self-replicators is causing heavy load on the database, which is in turn slowing down in-world activity. We have isolated the... (313 天前)

http://inezha.com/w/tf04bwx

worm blog

Hacking the Malware– A reverse-engineer’s analysis

A nice, thorough analysis of a Yahoo! instant messaging worm by Rahul Mohandas, showing how he decoded the exploit, reverse engineered it, and it's effects. Very good example, and something you can learn from. This paper attempts to document an approach on how the hackers make use of thevulnerabilities to install malicious software on the vulnerable ma... (313 天前)

http://inezha.com/w/xbnmjws

订阅者 ( 1 )