webbufferoverflow.xml.local

来自「The Network Security Response Framework 」· LOCAL 代码 · 共 35 行

<?xml version="1.0" encoding="UTF-8"?>
<Worm xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="file:///home/kelek/wormsim/xml/wormProp.xsd">
	<name>WebBufferOverflow</name>
	<Field name="RequiredService" type="string" strval="webserver" set="1"/>
	<Field name="host" type="string" set="0"/>
	<Field name="filesystem" type="string" strval="web" set="1"/>
	<Field name="ispv" type="int" set="1" intval="0"/>
	<Field name="pvfpp" type="int" intval="100" set="1"/>
	<PropagationVector>
		<Medium>
			<VulnerableServices>
			<name>webserver</name>
			<version>1.0</version>
			<Effect name="InfectFilesystem" type="string" strval="web"/>
			</VulnerableServices>
		</Medium>
		<TargetDiscoveryMechanism>
			<ClientOriented>
				<PortScan>
					<PortScanMechanism>
						<RandomScan method="probe" objective="query-first">
	                                                <addressRange>169.237.7.21</addressRange>
							<netmask>32</netmask>
							<probability>1.0</probability>
						</RandomScan>
					</PortScanMechanism>
					<PortScanRate unit="sec" value="2">
						<numAddresses>2</numAddresses>
					</PortScanRate>
				</PortScan>
			</ClientOriented>
		</TargetDiscoveryMechanism>
	</PropagationVector>
</Worm>