Writing Viruses for Fun, not Profit
summary
Live demo builds a working PHP file infector named boom.php that scans for .php files, writes an infected temp file, renames it, and prevents reinfection with a checksum (md5 of filename). Payloads get packed with mcrypt then base64, injected into example.php and foo.php and executed via an eval=phpinfo query parameter. Demo also embeds PHP into images (bread.jpg) to exploit include-based image serving and even rewrites index.php to perform a site redirect; the code runs as shown.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:18First Big Viruses
- 2:10What a Virus Is
- 3:39Best Security Defense Mechanisms
- 12:30Step 3
- 25:33How Files Are Uploaded
- 35:09Payload Ideas
related talks
44mWriting Viruses for Fun, not Profit
43mGoing Viral for Fun, not Profit
01h 01mHow hacking works - Web edition
45mKnow Your Enemies: Live Exploit of a PHP Engine Security Breach
35mPHP is evil (Defensive programming)
51mHow hacking works - Web edition
26mWhen Models Write Malware: Defending Against On-demand Exploits
53mHow hacking works - Web edition