3 ms·
WARNING DO NOT DOWNLOAD: FILES INCLUDED IN ZIP FILES! FILE HIT LIST: {HEX}perl.ircbot.Arabhack.47 : /home/$USER/Zines/ZF0/zf0 4.txt {HEX}php.cmdshell.avi.209 :
by nyounker 8y ago
WARNING DO NOT DOWNLOAD: FILES INCLUDED IN ZIP FILES!
FILE HIT LIST:
{HEX}perl.ircbot.Arabhack.47 : /home/$USER/Zines/ZF0/zf0 4.txt
{HEX}php.cmdshell.avi.209 : /home/$USER/Zines/ZF0/zf0 5.txt
{CAV}Win.Worm.SomeFool-32 : /home/$USER/Zines/h0no/h0no.txt
{HEX}php.pktflood.oey.671 : /home/$USER/Zines/owned and exposed/2.txt
{YARA}php_backdoor_php : /home/$USER/Zines/29a/29a-3.zip
{CAV}Win.Trojan.U-83 : /home/$USER/Zines/29a/29a-5.zip
{CAV}Win.Trojan.Flatei-3 : /home/$USER/Zines/29a/29a-7fe.zip
{CAV}Win.Trojan.P98M-1 : /home/$USER/Zines/29a/29a-4s.zip
{CAV}Win.Worm.rb2-1 : /home/$USER/Zines/29a/29a-8.zip
{CAV}Win.Trojan.VirTools-1 : /home/$USER/Zines/29a/29a-1.zip
{CAV}Win.Trojan.Flatei-3 : /home/$USER/Zines/29a/29a-7.zip
{CAV}Win.Trojan.U-78 : /home/$USER/Zines/29a/29a-6.zip
{CAV}Win.Trojan.VirTools-2 : /home/$USER/Zines/29a/29a-2.zip
{YARA}telnet_cgi : /home/$USER/Zines/uninformed/3.6.txt
{CAV}Win.Trojan.Rootkit-133 : /home/$USER/Zines/uninformed/code.3.6.tgz
{CAV}Win.Downloader.51998-1 : /home/$USER/Zines/phrack/65/10.txt
{HEX}exp.linux.setuid.6 : /home/$USER/Zines/phrack/61/3.txt
{HEX}php.malware.magento.578 : /home/$USER/Zines/phrack/62/6.txt
{CAV}Html.Trojan.Shellcode-19 : /home/$USER/Zines/HITB/HITB-Ezine-Issue-001.pdf
===============================================
- wfn 8y agoWell yes, the zines will have a bunch of shellcode and command shell scripts and (from the looks of it) code of some trojans and the like. This will get flagged by AVs, etc.; but that's to be expected, really. :)
- nyounker 8y agoDisclosure sometimes helps others. :)
- myself248 8y agoX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* Makes for a splendid email sig.
- ryanlol 8y agoIs it because nothing will ever detect it in an email signature? If you want excellent detection rates, you might consider this string: <script type="text/javascript" src="http://web.nba1001.net:8888/tj/tongji.js"></script> http://web.nba1001.net:8888/tj/tongji.js"></script> Lots of AVs will detect this even if you put the string into an image file.
- ydolph 8y agoThis is not true, retard.
- batlegdotcom 8y agoOne time in 19A4, I made my personal computing device and open honeypot and self installed all the virii I could find. Whale shit at the bottom of the ocean occasionally finds itself in 13 Corinthians.