How long to write a virus?

[Onix]

I'm working on my virus rules and I'd like to set an amount of time it might take a PC to write one. This could be with some kind of root kit or just a script virus of some sort. What is the shortest time you'd think it would take and what would be the upper bounds of reasonable for programming a virus?

This might be a Rob question, but maybe another monkey might know too.

[BubbaBrown]

A simple virus? Roughly a day if you know what and where to attack. On an ill-prepared system there's a few one-line bash scripts that'll shut a system down. If your linux/unix distro doesn't have a ulimit set... This will take it out: ":(){ :|:& };:"

If you want an old school virus that was something more than a script with a bad attitude, then it could take a week. The main issue with a good virus is how it spreads and gains control over the system. One good exploit to a process or software package that leaves a port open and acts as server is all that can be needed. The exploit is used on the server port, a payload with code is dumped into a executable region of memory (A buffer overflow attack is a fun one for that!), and the process executes that code. If successful, the process my have permissions to do some damage on the system. If not, another exploit is used to try to get administrative or root permission levels.

Even then, if you know where and how to hit, you can code up something in day. It might not be completely reliable, but could still be effective enough to do some significant damage.

[Onix]

Cool, thanks. That's about half what I was expecting.

[Evil Scientist]

Now, onto the next question! If I... I mean, if a PC would want to create a bomb from household materials, where would she find detailed instructions?

[Onix]

I already know the answer to that question. And I have rules for it.