[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: red worm amusement - redirect



On Fri, Jul 20, 2001 at 06:24:54PM -0700, Alvin Oga wrote:
> if ya wrote a script... was thinking..wouldnt it be funny
> to redirect that incoming attack with the cgi script to 
> redirect it back to the incoming machine ???

It wouldn't get you anything exciting.  The source machine has already
been cracked, and chances are it will get hit again by the worm anyway.
From what I've read about the "random" IP address generator used by the
worm, the same sets of hosts get hit again and again.  Everybody that's
reported seeing the worm has reported many attempts at the exploit from
many different hosts.

noah

-- 
 _______________________________________________________
| Web: http://web.morgul.net/~frodo/
| PGP Public Key: http://web.morgul.net/~frodo/mail.html 

Attachment: pgp6bflzJqdkV.pgp
Description: PGP signature


Reply to: