Network Worms are self replicating programs which spread all over the Internet at a very fast rate. They cause a huge bandwidth drain while propagating and sometimes bring even large networks down to their knees.
In this video series we will look at the following:
1. What are worms? types of worms?
2. How do network worms propagate?
3. Understanding the programming concepts behind a computer worm.
Lets start with a presentation on how this whole section is structured
and what all we will cover. Please download the following presentation and follow the next video.
Hope things cleared up a little bit! In order to understand how to stop computer worms, we need to understand how they are programmed. The programming of computer worms is a complicated subject but my intention is to keep it as simple to understand as possible.
Lets now look at how to generate Victim IPs in the computer worm code. We will limit ourselves to the following IP generation/worm scanning techniques:
1. Random IP scan
2. Sequential IP scan
3. Subnet IP scan
Please download the following code and follow the next video.
Some computer worms might just try and lauch the exploit whenever a Victim IP is generated, some might use an IP scan to find out if the host is actually up. More sophisticated worms might run an OS and Service fingerprinting before actually launching the exploit. To keep it simple we will discuss the most simple case - whenever a new Victim IP is generated using our IP generating techniques, we will try to exploit it rightaway.
Coming up next:
1. Studying an exploit - a blackbox approach
2. Making an exploit compatible to be used with a computer worm
3. Designing a simple framework for making computer worms
I will be putting these up as i keep producing the videos! Hopefully by end of this week all the videos will be up!
