+ Reply to Thread
Results 1 to 5 of 5
  1. #1
    Member DXsTuK's Avatar
    Join Date
    Jan 2006
    Posts
    51

    Arrow Access to other computers over the same network ?

    How are u doing guys ?

    I'm just wondering if I could gain access to other coputers on the same network !

    Say I have a victim infected with my server on a network that two ppl share .. is there a way to infect the other person (the one not infected yet) sharing the same network cable with the already infected guy as well ?

    Thanks in advance

  2. #2
    Senior Member -silent-'s Avatar
    Join Date
    May 2005
    Posts
    1,374
    the worm I-Worm.Sircam tries to spead over local network
    its also written in delphi




    Network Spreading

    To spread over a local network the worm enumarates all network resources (gets all shared directories on remote machines), then copies itself to there. If there is a "\recycled" directory in the victim shared directory the worm copies itself to this directory with the name SirC32.exe : \recycled\SirC32.exeThe worm then appends to the end of AUTOEXEC.BAT file the following command: @win \recycled\SirC32.exeIf there is a "\Windows" directory, the worm renames the RUNDLL32.EXE file to RUN32.EXE , and then overwrites the original RUNDLL32.EXE with its own copy. The worm then sets the hidden attribute to its copies.
    just thought it might intrest you in the explantion how that tries to do it
    00101101 01110011 01101001 01101100 01100101 01101110 01110100 00101101


  3. #3
    Member DXsTuK's Avatar
    Join Date
    Jan 2006
    Posts
    51
    Thanks silent, but say there is nothing shared, is it still possible ?

    sample code or sth would be awesome

  4. #4
    Junior Member
    Join Date
    Jan 2006
    Posts
    24
    Errm... I don't think it is... You'd have to exploit the other computer on the network somehow, like the lsass exploit (i think) so no... Maybe it might be possible to enable sharing??

  5. #5
    Senior Member -silent-'s Avatar
    Join Date
    May 2005
    Posts
    1,374
    you could try looking on war driving forums

    i have seen a few posts on this before

    but like bsmaat says probley have to use some exploit

    i read something once on a wardriving forum with something to do with mapping network drives but can not remember what it was

    anyway good luck with it
    00101101 01110011 01101001 01101100 01100101 01101110 01110100 00101101


Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Network Shutdown 1.0
    By LttCoder in forum Malware sources
    Replies: 3
    Last Post: 15-05-2007, 21:51

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Search Engine Friendly URLs by vBSEO 3.6.0 ©2011, Crawlability, Inc.