Going Viral for Fun, not Profit
summary
Claims that historical worms infected huge fractions of the net — Melissa 20% of machines, ILOVEYOU tens of millions, Mydoom causing ~$38B damage — motivate a live demo that writes and deploys a PHP file-infector. The demo scans a directory for .php files, writes .infected temp files, inserts an encrypted payload (per-file random key + IV, base64), executes via eval, and blocks reinfection with a seeded per-file checksum in the first line. It runs successfully inside a Vagrant sandbox and demonstrates payloads like phpinfo, mail send attempts, and HTTP redirects.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:36The I-Love-You Virus
- 7:39Act Benign
- 9:46Source Code
- 15:11File Type Header
- 15:45Writing the Virus
- 20:58Encryption
- 27:59Step Four Is To Stop the Virus from Reinfecting Itself
- 36:10Wordpress
related talks
44mWriting Viruses for Fun, not Profit
41mWriting Viruses for Fun, not Profit
47mWorm Charming: Harvesting Malware Lures for Fun and Profit
46mAttacks, Lies and the Underground World
26mWhen Models Write Malware: Defending Against On-demand Exploits
15mTales from the Underground: Hilarious Cybercrime Fails!!
45mKnow Your Enemies: Live Exploit of a PHP Engine Security Breach
28mFuzzing Malware for Fun & Profit