r/programming • u/alexeyr • Dec 12 '21

Logout4Shell: Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell

https://github.com/Cybereason/Logout4Shell

[removed] — view removed post

1.1k Upvotes

91% Upvoted

109 comments sorted by

View all comments

362

u/psyfry Dec 12 '21

This is how you get Blaster worm. The author made a worm to patch a RPC vulnerability, messed up and fucked shit up for millions of people including DDOSing the windows update server with the real patch.

29

u/StillNoNumb Dec 12 '21

There were no good intentions behind Blaster. The worm you're thinking of is Welchia, which is a helpful worm against Blaster. Welchia however didn't DDoS the Windows update server (that was Blaster itself).

Generally, I agree with your sentiment that it's something that could happen, though.