Hi all

Really need your help now. As soon as possible

I need malware for Ubuntu for testing purposes in a controlled environment.
More specifically, I need software that does illegitimate connections outside of the local machine (probably to the internet or to other machines on the network). Like spyware, DDoS software or some software with hidden user logging. I hope you understand

Im not allowed to configure the software. The best thing would be if it starts sending traffic directly after installation.

.deb packages would be the best but .rpm might also work (tar.gz is a no go).

Is there anyone who can help me? All suggestions are appreciated!

//ScorchPipe

Hi,

I don't know of any, but you maybe find something like this on google - test web server for vulnerabilities
It finds:
- security vulnerability scanners for example
- hackertarget


It may be a start for your purposes

I'm afraid not. What I have here is a environment for testing and analyzing the connections software do on the network.
And I need "bad" programs to run in it.

Doesn't really need to be harmful code. I need code that sends traffic when it's not supposed to. Could be as simple as a port scanner that starts automatically

Do you have a nmap ?

I have nmap. The problem with nmap is that it doesnt start automatically (what I know of).

Maybe portscanner wasnt the best example because its sole purpose is to scan networks. The best thing would be a software with some random purpose that has a HIDDEN portscanner that scans your network "in secret".

Another example would be a software that sends (or at least tries to send) information to its developer or something.

I rather doubt any admin would ever ask for such things. Two reasons. One is if there were some known threat out there, they'd have protected their system from it. Two is if there were some unknown (not known yet) malware then they'd have little defense to it, and as such have no way to predict it's travel or methods.

Companies like Symantec and McAffee might have sample codes as well as the major Governments. None of them would supply them to anybody.

AFAIK LQ is not the place to ask for any malware. Besides there's very few people who should have (a legitimate interest in) that kind of stuff anyway. And from how you describe "malware" in your later reply you should be able to write such a script yourself "as soon as possible" (as you put it) and package it yourself.

I could write the functionality in bash, python, php or something. However I know nothing on how to package

Then distribute the source code in a tar.gz file with instructions. Done all the time.

You actually should know better than carrying on talking in
a thread that a mod commented on as being unsuitable.



Closed.