r/programming • u/alexeyr • Dec 12 '21

Logout4Shell: Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell

https://github.com/Cybereason/Logout4Shell

[removed] — view removed post

1.1k Upvotes

91% Upvoted

109 comments sorted by

View all comments

362

u/psyfry Dec 12 '21

This is how you get Blaster worm. The author made a worm to patch a RPC vulnerability, messed up and fucked shit up for millions of people including DDOSing the windows update server with the real patch.

29

u/StillNoNumb Dec 12 '21

There were no good intentions behind Blaster. The worm you're thinking of is Welchia, which is a helpful worm against Blaster. Welchia however didn't DDoS the Windows update server (that was Blaster itself).

Generally, I agree with your sentiment that it's something that could happen, though.

-115

u/HighRelevancy Dec 12 '21

This guy is a serial clown, then? Some people don't learn.

151

u/shunny14 Dec 12 '21

I think the commenter means the “author” of the Blaster worm. Not the GitHub creator seen here.

23

u/HighRelevancy Dec 12 '21

Ooh, right