George Stone wrote: > I need to verify that the Bugbear plugin does in fact work. Does anyone > know where I can get a copy of the Bugbear worm or find an infected host > to perform a test scan against? > > Thanks. > -- > George > > - > [EMAIL PROTECTED]: general discussions about Nessus. > * To unsubscribe, send a mail to [EMAIL PROTECTED] with > "unsubscribe nessus" in the body. >
We've already verified the bugbear plugin works against numerous live hosts infected with the virus. Regrettably, we can't tell you the hosts. But trust me, it does work. Michel Arboi spent a fair bit of time on this as well validating that it works. Both the original version I submitted to the list, as well as the significantly improved version from Michel will detect the worm, although Michel's version, which is the version in CVS, really _communicates_ with the worm to weed out false positives. Thomas - [EMAIL PROTECTED]: general discussions about Nessus. * To unsubscribe, send a mail to [EMAIL PROTECTED] with "unsubscribe nessus" in the body.
