Writing Viruses for Fun, not Profit
summary
Live demos show a PHP file called boom.php that uses glob("*/.php"), fopen and copy-rename to prepend an encrypted payload, decrypting with mcrypt + base64 at runtime so the virus is obfuscated. Reinfection is prevented by inserting an md5 filename checksum in the first line. Proofs include infecting PHP scripts, hiding payloads inside JPEGs (image still renders), executing eval payloads like phpinfo and sending mail, and remotely replacing index.php to redirect sites; historical context notes Melissa at 20% infected and Mydoom ~$38B damage.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:21Virus history and pledge
- 3:24Virus anatomy and detection
- 5:11Security evasion strategies
- 7:56Building a basic virus
- 17:22Encryption and obfuscation
- 21:44Refining the virus
- 27:21Payload implementation
- 33:51Live demo of malicious impact
- 40:26Conclusion
related talks
41mWriting Viruses for Fun, not Profit
43mGoing Viral for Fun, not Profit
10mState of the Malware
45mKnow Your Enemies: Live Exploit of a PHP Engine Security Breach
15mTales from the Underground: Hilarious Cybercrime Fails!!
01h 03mEffects Malware hunting in Cloud environment
26mWhen Models Write Malware: Defending Against On-demand Exploits
41m"Revenge of The Script Kiddies: Current Day Uses..."