November Scan of the Month

This is my entry for the Honeynet.org November 2002 Scan of the Month Challenge.

Bob Mathews <bobmathews at alumni.calpoly.edu>

answers.html

Answers to the Scan of the Month Challenge questions.

analysis.html

Steps followed in the analysis of the Challenge file.

shellcode.c

Shellcode extracted from .unlock.c program.

shellcode.txt

Disassembly of the shellcode.

crypt.html

Cryptanalysis of the stream cipher used by the worm to obscure peer-to-peer messages. This wasn't required for the contest, but I found it interesting.

crypt.c

C implementation of the known-plaintext attack described above.