NetBus
Results 1 to 8 of 8

Thread: NetBus

  1. #1

    NetBus

    What exactly is NetBus? I just scanned a friends network and saw this:'

    Port State Service
    ======================
    tcp/12345 filtered NetBus
    tcp/12346 filtered NetBus

    What does NetBus do? I have only heard of it in connection to the NetBus trojan. Any clues would be of big help. Thanks

  2. #2
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    Netbus is a remote control trojan. It allows you to remotely control a machine to the point of even shutting it off. It consists of two portions: client and server. If you do a search through google you will find more info and probably it.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  3. #3
    Is it a legitimate program or is it only a trojan used for penetration purposes?

  4. #4
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    It was meant I believe as a trojan and has recently been attempted to turn into a legit program. If you look at earlier version you see a simplier interface. The newer version I understand is more glitter.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  5. #5
    Senior Member
    Join Date
    Feb 2002
    Posts
    262
    it can be used both ways
    aislinn, Aria, BTBAM, chevelle, codeseven, Cky, dredg, evergreen terrace, from autumn to ashes,hopesfall, hxc, luti-kriss, nirvana, norma jean, shai hulud, this hero dies, tool, underoath, zao,

  6. #6
    Banned
    Join Date
    Apr 2002
    Posts
    89
    You must have the computer you want to infect run a .exe then when you find out their ip and whether or not they are online, you can use the other half of the proggie to control the infected comp. Make it do all kinds of stuff, nowadays, netbus is widely known, and any half decent anti-virus proggie should get rid of it, if you are infected.

  7. #7
    With the port scan that I did it showed that the state of the port was filtered. What does this mean? Perhaps the sysadmin. is using it for his own reasons and
    he has set up a packet filtering rule only allowing connections from his own PC(?)

  8. #8
    I could be wrong, but I think back orifice came first.. and it was said to be a "remote administration tool." Which is what it does, however, it's also easily considered a trojan with a GUI. It's way too well known, was kind of cool for a few weeks in highschool when it came out.

    No clue, some sys admins are partially insane.


    ---Aku. Soku. Zan.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides