šœÆšžš” šœššš¦š¬š¤š¢Nov 3

Skeletor is here to help

https://lemmy.world/post/38263914

Skeletor is here to help - Lemmy.World

Lemmy

Show threadslazer2au
Use EICAR test strings as passwords so when the password is stored as plain text the antivirus software will delete the file.
Nov 3 at 11:21amWeb
Show threadEkybioNov 3
What is an EICAR test string?
Show threadStriderNov 3
en.wikipedia.org/wiki/EICAR_test_file
EICAR test file - Wikipedia

Show threadCaptainBlagbirdNov 3

a computer file that was developed by the European Institute for Computer Antivirus Research (EICAR) and Computer Antivirus Research Organization to test the response of computer antivirus programs. Instead of using real malware, which could cause real damage, this test file allows people to test anti-virus software without having to use real malware.

Show threadJGrffnNov 3
This sounds like a step towards computer vaccines, and Iā€™m not about to let my computer get autism, thank you.
Show threadBassman1805Nov 3
Jokeā€™s on you, all computers are autistic.
Show thread0opsNov 3
This is cs101 smh
Show threadtomiantNov 3
Sir this is cs101
Show threadtomiantNov 3
I am really liking this place.
Show threadslazer2auNov 3
A specific string of text that you can use to test your AV without actually grabbing a virus.
Show threadSabataNov 3

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Show threadValmondNov 3
Dude makes a whole binary of a virus his password.
Show threadslazer2auNov 3
Doesnā€™t have to be a binary file, toss the string in a txt file and the AV still throws a fit.
Show threadsemNov 3
According to wikipedia it has to be at the beginning of the test file or it wonā€™t work.
Show threadNatakuNoxNov 3
01001000 01100101 01101100 01101100 01101111 00101100 00100000 01110100 01101000 01101001 01110011 00100000 01101001 01110011 00100000 01101110 01101111 01110100 00100000 01100001 00100000 01110011 01110100 01110010 01101001 01101110 01100111 00100000 01101111 01100110 00100000 01100010 01101001 01101110 01100001 01110010 01111001 00100000 01110100 01101000 01100001 01110100 00100000 01110100 01101111 01110100 01100001 01101100 01101100 01111001 00100000 01110111 01101111 01101110 00100111 01110100 00100000 01101001 01101110 01100110 01100101 01100011 01110100 00100000 01111001 01101111 01110101 01110010 00100000 01110000 01101000 01101111 01101110 01100101 00100000 01101111 01110010 00100000 01100011 01101111 01101101 01110000 01110101 01110100 01100101 01110010 00100000 01110111 01101001 01110100 01101000 00100000 01100110 01110101 01110010 01110010 01111001 00100000 01110000 01101111 01110010 01101110 00101110 00100000 01010100 01101000 01100001 01110100 00100000 01101001 01110011 00100000 01100001 01101100 01101100 00101110 00101110 00101110 00100000 01000100 01101111 01101110 00100111 01110100 00100000 01100011 01101000 01100101 01100011 01101011 00100000 01101001 01101110 01110100 01100101 01110010 01101110 01100001 01101100 00100000 01110011 01110100 01101111 01110010 01100001 01100111 01100101 00101110 00100000 01010100 01101000 01100001 01101110 01101011 00100000 01111001 01101111 01110101 00100000 01111000 01101111 01111000 01101111
Show threadSaganakiNov 3
unfortunately, nearly all AV abides by the ā€œcannot be larger than 68 bytesā€ rule
Show threadhenfredemarsNov 3
Unfortunately there is significant overlap between plain-text-password-servers and servers that canā€™t be bothered to use antivirus. Also, the string may not work if itā€™s not at the start of the file. AV often doesnā€™t process the whole file for efficiency purposes.
Show threadB-TR3ENov 3
Itā€™s not about the password on the server where you want to log in, itā€™s about CSV files stored on the machine of the cybercrook who wants to use the passwords to steal peopleā€™s identities.
Show threadOryginNov 3

Sadly it wouldnā€™t work if found in a CSV file with other records:

According to EICARā€™s specification the antivirus detects the test file only if it starts with the 68-byte test string and is not more than 128 bytes long. As a result, antiviruses are not expected to raise an alarm on some other document containing the test string

Show threadflambonksciousNov 3

They actually thought it through, huh?

For some reason that surprises me from the AV vendors

Show threadLucy :3Nov 3

According to EICARā€™s specification the antivirus detects the test file only if it starts with the 68-byte test string and is not more than 128 bytes long.

Unless youā€™re the only one in the dump, no :c

Show threadJeeBaiChowNov 4
Mine is: ā€˜ā€™; delete from clients;ā€™