Media Defender tools and utilities used to poison with fake files p2p networks.

[chuck]

The saga of Media Defender continues with more leaked material. This time is epic: tools and utilities used to poison with fake files p2p networks. LOL if we wait they will give us the source code to winmx at this rate.


http://thepiratebay.org/tor/3812960/MediaDefender.Source.TrapperKeeper-MDD

List of utilities:

AresDataCollector, AresLauncher, AresProtector, AresSupernode, AresUDPDataCollector, AutoUpdater, AutoUpdaterSource, BTClient, BTDataCollector, BTDecoyClient, BTInflationDest, BTInterdictor, BTIPGatherer, BTPoster, BTRemover, BTScraper, BTScraperDLL, BTSearcher, BTSeedInflator, BTTorrentGenerator, BTTorrentSource, BTTracker, BTTrackerChecker, CVS, DCMaster, DCScanner, DCSupply, DistributedKazaaCollector, DllLoader, ED2KSupplyProcessor, EdonkeyIpBanner, FastTrackGift, FastTrackGiftDecoyer, GnutellaDecoyer, GnutellaFileDownloader, GnutellaProtector, GnutellaSupply, KademliaProtector, KazaaDBManager, KazaaLauncher, KazaaSupplyProcessor, KazaaSupplyTaker, KazaaSwarmerDest, KazaaSwarmerDistributedSource, KazaaSwarmerDownloader, KazaaSwarmerSource, MediaMaker, MediaSwarmerDest, MediaSwarmerSource, MetaMachine, MetaMachineHashSetCollector, MetaMachineSpoofer, MI-GnutellaSupply, MovieMaker, NameServer, NetworkMonitor, OverNetLauncher, OvernetProtector, OvernetSpoofer, P2PFileIndexer, PioletDC, PioletPoisoner, PioletSpoofer, SamplePlugIn, SLSKSpooferDLL, SoulSeekClient, StatusDest, StatusSource, SupernodeCollector, SupernodeController, SupernodeDistributer, SupplyProcessor, TKCom, TKFileTransfer, TKLauncher, TKProjectManager, TKSyncher, UsenetPoster, UsenetSearcher, WatchDogControllerDestination, WatchDogControllerSource, WinMxDC, WinMxLauncher, WinMxProtector, wma generator


Book Mark and check for more info.  http://www.mediadefender-defenders.com/

[Scyre]

Thx Chuck!

[GhostShip]

I,m told this stuff is a good crash course in some aspects of network topography.

Cheers to mediadefender for confirming how bad their systems are, they use windows based systems to flood with and not very efficiently I,m told.
This could be why they have stopped attacking the network overnight, we only have macrovision doing flooding at this time.

[7]

I had a feeling the source was grabbed too, yeehah!  I haven't tried to compile anything yet though may well give it a go to see what happens (hoping there's not too many dependencies missing).  I'm sure coders out there will have a field day with this lot, quite possibly a real insight into many different protocols...

A thought that crossed my mind though is that I'm wondering if those applications could be modified by others intent on exploiting the networks (spammers and such).  Assuming that the faker client source code is there I'm wondering if it wouldn't be too hard to modify that to spam all manner of things... I wonder if the clients (assuming they're there) have the apparent ability to connect to (potentially) thousands of primaries simultaineously as observed with typical fakers?  Maybe if things start being exploited in this way networks like WinMX (no longer developed) will suffer hard, though on the other hand it could prove insightful for other active networks if they're able to see exactly how protocols are being exploited and so may help with closing holes (if possible, and if interested, and assuming they don't actually have full knowledge of what's being exploited already (unlikely I would have thought)).

Macrovision next, please.

[Lagerlout666]

nah i see a plus point, would be damn cool for advertsing winmx on othernetworks lol, a little "look see this crap, you cant see fake files like this when using winmx" lol

[7]

Yeah, and watch your reputation fall through the roof.

[GhostShip]

I have been informed by "those in the know" that this code is interesting but safe enough, its built on the mxsock dll for secondary client operation, of course I,m happy in turn after receiving some technical info to confirm there is no immediate threat to dll users who have been protected against this sort of disruption program for some time now.

Of course folks I expect it would be breaking some sort of law to obtain this code, but it seems many are not so concerned and I,m sure they will post here if they wish to draw the communities attention to any potential problems. 

[7]

Aye, I noticed Nushi's mxsock code in there, heh.  I've no idea really what may come later as a consequence of this code release though I suspect there could be some interesting surprises.

With regards obtaining that code, well, the torrent file I clicked to download was actually named '101.Interesting.Chocolate.Cake.Recipes.[Copyleft]-y0gr4nm4.torrent' which, to my surprise, turned out to have nothing to do with chocolate cake recipes at all!  Goddamn, there sure are some jokers out there these days...