Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Multiple 0-days in Dark Comet RAT
From: "Hertz, Jesse" <jesse_hertz () brown edu>
Date: Tue, 16 Oct 2012 15:35:28 -0400

Agreed, it is very probably illegal to actually do so. This attack is
purely theoretical and should only be attempted after obtaining competent
legal counseling.

Myself, Matasano, and my other researches DO NOT endorse actually
counter-hacking. But its certainly pretty awesome that you could

On Mon, Oct 15, 2012 at 2:10 PM, <Valdis.Kletnieks () vt edu> wrote:

On Sat, 13 Oct 2012 14:47:20 -0400, "Hertz, Jesse" said:

The cool thing about it is that if you are a net/sys admin, and you
one of your computers has been compromised, you can pwn the C+C server.

these are exploits in the C+C server, not in the installed trojan.

that's why its relevant. you can counterhack and pwn the person who pwned

Strongly recommended that you retain competent legal counsel before
actually doing so.  The legality of counterhacking is *highly* debated in
most jurisdictions.

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]