| NET WAR (Internet Torpedos and Such) |
| Recently, some interesting tools have come up on the web to attack people's ip's directly among other things - and being the victim of one of these such attacks, and some friends having sent me a couple sample programs, I went and looked across the net to see what was out there. Well here they are, as well as some defenses for you as well. |
NETWAR is the basic file, most of these require no special DLLs to run
NETWAR2 is made of other programs that require
Visual Basic DLL's and/or activex controls to run
Some of the other files contain files with similar requirements
If you do not desire to install these DLLs, it is okay,
the ones that do not require them handle
basically all the attack and defense forms.
Attack forms generally include Port 129 OOB attack,
(Port 135 attack for NT), or ICMP (Ping) or UDP attacks
I find the port 139 attack the most fun because it tends
to cause a bluescreen on the victim's windows screen
if they are not protected. It causes immediate cut of internet
connection as well as sometimes crashing win95 altogether
on some people's pc's.
(Note that I have only played this trick on friends just before I told them how to protect
themselves so don't go spamming me for this, I am after all a nice guy.)
The other files are included for completeness
and the fact is that some are actually quite interesting.
If a program asks for OCX files, you probably need the activex install.
Search for the 6.2mb activex files here: ax602.zip
or 868k Visual Basic 4 Components here: vb4dll.zip
or 1mb Visual Basic 5 components here: vb5run.zip
Now for the software...
| FILE NAME | FILE SIZE | DESCRIPTION |
| netwar.zip | 2,402,177 bytes | netwar.txt |
| netwar2.zip | 287,684 bytes | netwar2.txt |
| scanners.zip | 536,677 bytes | scanners.txt |
| spoof.zip | 229,032 bytes | spoof.txt |
Some of the above programs have minor defenses included,
but to defend your pc you can install the actual microsoft patches.
I have tested the winsock 1.1 patch on my own machines
vs the port 139 attack - but the rest I have not.
The article describing the patches that appeared
in the bugtraq mailing list is here: defenses.txt
And here they are...
If you are unsure of your winsock 1.1 version, install this one (it works with the patch on my machine just fine) wsock114.exe |
+gthorne'98