view release on metacpan or  search on metacpan

Report/examples/localTrojans.pl  view on Meta::CPAN

  7441	=> 'LNVALARM Access',
  8000	=> 'Shoutcast WWW Server Hack',
  8001	=> 'VCOM Tunnel',
  8002	=> 'Teradata ORDMBS',
  8180	=> 'Aplore/Aphex/Bloodhound worm',
  9100	=> 'Backdoor.Cabro',
  10080	=> 'alternate www, MyDoom',
  10168	=> 'Lovgates remote control',
  20168	=> 'Lovgates remote control',
  25867	=> 'Ring0 trojan',
  34816	=> 'Dirt, Backdoor.SubSari15 trojan',
  45295	=> 'Firebird DB trojan',
  43981	=> 'NewareIP',
# these trojans can be found at
# http://www.robertgraham.com/pubs/firewall-seen.html
  555	=> 'phAse zero',
  1243	=> 'Sub-7',
  2745	=> 'Bagle backdoor',
  3129	=> 'Masters Paradise',
  4755	=> 'Bagle-V backdoor',
  6670  => 'Deep Throat',
  6711	=> 'Sub-7',
  6969	=> 'GateCrasher',
  9898	=> 'Dabber Virus backdoor',
  21544	=> 'GirlFriend',
  12345	=> 'NetBus',
  23456	=> 'EvilFTP',
  27374	=> 'Sub-7',
  30100	=> 'NetSphere',
  31789	=> "Hack'aTack",
  31337	=> 'BackOrifice',
  50505	=> 'Sockets de Troie',
  65506	=> 'myDoom proxy',
};


my $builder = sub {
  my($port,@trjs) = @_;
  my $line = '';
  foreach(0..$#trjs) {
    $trjs[$_] =~ s/\s+([\..]+)/$1/;
    while ($trjs[$_] =~ /\s$/) { chop $trjs[$_] };
    if (length($trjs[$_]) + length($line) > 25) {
      if ($line) {
        $line .= ', more...';
      } elsif (length($trjs[$_]) < 37) {
	$line = $trjs[$_];
      } else {
	$line = substr($trjs[$_],0,34) . '...';
      }
      last;
    } else {
      $line .= ', ' if $line;
      $line .= $trjs[$_];
    }
  }
  return($line);
};


# overlay above with below in order

@_ = split('\n',q|
#
# my additions + user contributions
1 Sockets des Troie
2 Death
701 Marotob
778 NetCrack
887 W32.Huayu
890 Dsklite
905 Netdevil
1022 W32.Sasser
1023 W32.Sasser
1026 MStask planner
1027 ICQ port trojan
1029 ICQ port trojan
1093 proofd
1094 rootd
1220 qt-serveradmin
1502 T.120
1533 LiveTutor
1666 netview-aix-6
1718 Gatekeeper Discovery
1719 Gatekeeper RAS
1731 Audio Call Control
1900 MS UPnP
1915 facelink
1978 unisql
2082 infowave
3606 splitlock
4128 RedShad, RCServer backdoor
4899 Radmin, JDeveloperPro
6101 Veritas Backup Exploit
6129 Dameware
7040 Star Wars Galaxies server
7070 Star Wars Galaxies server
9666 RabbIT2
8004 IExchange https proxy
8005 IExchange https proxy
8081 Tomcat 4 proxy
9273 trojan Wingate 3.0
9274 trojan Wingate 3.0
9275 trojan Wingate 3.0
9276 trojan Wingate 3.0
9277 trojan Wingate 3.0
9278 trojan Wingate 3.0
11768 Dipnet/Oddbob
14441 Bagel-V Mitglieder.AG
15118 Dipnet/Oddbob
17300 Milkit trojan
17771 Bagel-V Mitglieder.AG
18844 backdoor socks4 proxy
21000 IRTrans Control
29992 Bagel-V Mitglieder.BG
31121 Troj/BagleDl-H
38884 Bagle-V Mitglieder.BN
#
# this URL has links to many descriptions of hacks and ports that are
# not listed on it's port list page which are included below.
# ports from: http://www.networkice.com/Advice/Exploits/Ports/default.htm