, SecurityFocus 2001-02-26
ShareSniffer turns Windows hacking into a P2P play.
Expand all |
Post comment
But what about bandwidth?
2001-02-26
Anonymous (7 replies)
Anonymous (7 replies)
An Internet where *everybody* is a script kiddie
2001-02-27
A.Lizard alizard (at) ecis (dot) com [email concealed]
A.Lizard alizard (at) ecis (dot) com [email concealed]
User Ignorance (or "I Didn't Mean To Do It")
2001-02-28
raptorfan (at) earthlink (dot) net [email concealed]
raptorfan (at) earthlink (dot) net [email concealed]
How to make ShareSniffer unusable/undesirable
2001-03-01
Johan Lindqvist <lindq (at) bigfoot (dot) com [email concealed]>
Johan Lindqvist <lindq (at) bigfoot (dot) com [email concealed]>

I dont think bandwidth is oging to be an issue, the newsgroup idea can really help get aroudn that if the program is designed to look at the newsgroup first before scanning on its on. Ideally the newsgroup could be engineered to kep track of scanned addresses in such a way that a redudant port scan of an address only happens once a day or so. sniffer would first look at the newsgroup, see if the address had been scanned in the last day, then only scan the address again if the previous scan was outdated.
Another way to do it, is to have sniffer portscanner the computer its running on and update the newsgroup. The idea here being people using sniffer are the most likely to have open shares themselves. Let each user update their own share status as needed so that other dont have to port scan them.
The newsgroup is just replacing the napster server as the central IP address repository. Al you have to do is be clever in how you post,expire and construct articles to make the system bandwidth efficient.
-jef
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/articles/159/4753#4753