📜 ⬆️ ⬇️

Conficker network detector

Thanks to the Honeynet Project participants, it became possible to detect the most widespread worm through the network. They noticed that machines infected with this virus when calling RPC return nonstandard errors.

The scanner itself, additional utilities on the subject and details of the detection method can be found on their website .

To run under Linux, you need the python interpreter and the Impacket package.

')

Source: https://habr.com/ru/post/56028/


All Articles