[Full-Disclosure] RE: Any dissasemblies of the Witty worm yet?
nodialtone at comcast.net
Tue Mar 23 10:38:12 GMT 2004
You've completely missed what I was talking about. I said I have seen
those dump, disassemblies and stuff.
On Mon, 2004-03-22 at 23:32, Disclosure From OSSI wrote:
> Com'on. This is a worm. SQL Slamme binary is widely available on the net and
> its dissembly (or "its source code") is everywhere with "google". For
> example, part of it can be found at
> http://www.eeye.com/html/Research/Flash/sapphire.txt. With IDAPro
> (http://www.datarescue.com/) (you must have heard of it, don't you?), the
> SQL Slammer and/or Witty worms can be easily turned into their "original"
> source code format (assembly).
Here is what I said again. Read it this time, putz.
> > I've seen the slammer code as hex dumps, etc, but haven't seen the any
> > original slammer source code. Just wondering how anyone could make any
> > determinations of any comparisons to either when the coding style really
> > isn't known. Maybe I am the only one who missed seeing the original
> > code.
> > -b
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
"Save yourself from the 'Gates' of hell, use Linux." -- The_Kind @
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040323/c572ba17/attachment.bin
Full-Disclosure is hosted and sponsored by Secunia.