bittorrent == botnet

From: Jason L. Ellison (infotek@datasync.com)
Date: Tue Oct 03 2006 - 17:25:50 EDT


  A friend and I were discusing the possible uses of the bittorrent
network in DDOS's. It could be a very massive botnet if you advertised
popular files with the targets ip address and target service. In the most
recent version of azerus I noticed that the default settings ignore
clients that advertise on ports "0;25;135;139".

  For instance if I falsely advertise: HTTP, RDP, SIP, VNC ports and the
victims ip address and loaded my client with very popular hashes... I
would think this would overburden most small medium businesses without
having to own or buy a botnet.

comments?

-Jason Ellison

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:05 EDT