Re: nimda probes
DvB wrote:
>
> "Brooks R. Robinson" <brooks.robinson@rides.com> writes:
>
> > > > the worm wouldn't even know the difference, to it it looks like it would
> > > > hit microsofts site from your url if it tries those extentions.
> > >
> > > Not correct, it gets a Redirect as the response, and it's its
> > > responsibility to follow it, unless it's using a toolkit that does so
> > > automatically.
> > >
> > > Code Red, for instance, wouldn't follow redirects.
> >
> > What about port forwarding? It'd still up the CPU usage on a machine, but
> > would it have the same results? I so much want to do this.
>
> You could always set up a tarpit:
>
> http://www.hackbusters.net/LaBrea/
>
How is this different from, or better than, CodeRedneck?
Reply to: