Skip to content

dbortiz/Worm

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

Worm

Network Security Assignment #1
Professor Manabat - CPSC 456 - F 9-11:45AM

Author

Dan Ortiz (dbortiz@csu.fullerton.edu)

SKELETON CODE CREDIT: PROFESSOR MANABAT

Language

Python

How to Execute

You first must choose a VM, within the internal network of VMs, which you want to execute the worm from. Once selected, you execute by typing:
python worm.py

After the worm has been executed, it will begin to propagate through the network and begin infecting other VM systems.

Before Execution

I decided to choose this VM (lubuntu) as my point of execution. As you will see, other VMs will become infected, but not this one because I shouldn't be able to infect myself!

After Execution

As stated before, these VMs have now been infected with the worm and is stored onto their systems.

Explanation

The purpose of this assignment was to create a worm that would be able to propagate through a network and infect it. I first set up a virtual network, using VirtualBox VMs, and gave said VMs credentials and configured them to the same subnet. After the network was properly configured, I executed the worm program on one of the VMs. The worm first scans the network and checks for all IPs on the network with port 22 (SSH) open. After the list of networks are found, the worm will attempt a "dictionary" attack against the open port with the predefined credentials. Once the SSH connected is established, the worm will check if it has already infected the system. If it has, then it will kill its execution; but if it hasn't, it will add itself to the system, change it's permissions, and execute itself. Once all identified systems have been infected, the worm will cease execution and will inform the user of its completed infection.

Extra Credit

I have implemented the extra credit which is to clean all infected VMs by removing the worm file. In order to execute the clean function, type:
python worm.py -c
or
python worm.py --clean

As you can see, after executing the clean up function, the worm has been removed from the systems.

Releases

No releases published

Packages

No packages published

Languages