[MR.FREE]

Code

if(files.split('.')[1] in files_ext_to_infect):
   if(signature.decode('base64') in files):
    pass
   else:
    vul_files.append(files)
    del files
  else:
   pass
   del files
except:
  pass
  del files

Hope you don't mind. I'm reading over your code to learn. I have a few questions.

why are you decoding the signature and checking to see if its already in the file? Is it to make sure its not going over the files constantly? And why decode it first?

And why multiple attempts at del the files? Is this to ensure they get deleted? And does that mean the .append makes a copy of the file?

According to OP's neg rep, he steals source code and posts it as his own. So I doubt you'll get an answer.

Edit: After looking at the code OP deff wrote this.

Ive barely skimmed the script but, this is another proof of concept script, it does absolutely nothing, at most it would seed what pretty much amounts to a string into 'X' files and then does nothing else. It almost looks like he ripped off someones word-press eval vulnerability.

Where is the rest of the script, or is that all you got?

Assuming that what ever you posted above is the same as http://pastebin.com/ZznhyHmY

[MR.FREE]

^ Clearly, MR. FREE, you shouldn't be posting about code

Decodes a base64 string which assumingly is an exploit and then writes it to the files.

Which does...nothing.Whoever wrote this code is a retard.

Before I get started. #worm

Lol what fuckin planet are you from?
How did you write a wall of text and not say anything more then I said in my first post.

It's really cool you could google a reason to encode python stings. OP said "[NEW] Demon-606 13lackWorm PYTHON SOURCE CODE", that implies it should spread and execute itself with no interdiction.

you said

which assumingly is an exploit and then writes it to the files.

So please, show me the one liner(the exploit) that you would write and spread to a .txt,png,exe,html,zip,etc to make this thing work like a "WORM"...

Dude this is the python section, we write code around here. We don't just run programs and think were Ub3r l33t. Look at my profile, all my posts are in the python section. All my rep is from the python section, lol get bent. And keep this half assed garbage off the sub-section, posting altered broken code from other people is a sin around here.

Anybody that programs tools/malware, would tell you this isn't a real script. Show me that script running and spreading like a "Worm" and I will Blow "averageguys"(your) mom. LOL Op I would give you +1 if you could Google and find an exploit that could make that script actually work.

I say proof of concept cause op attempts to check for seed in files, if seed not in file, write a decoded base64 string.
lol that is very little concept. Let me know If I need to dumb down what im saying OP, I can make it simpler.

http://pastebin.com/ZznhyHmY

Edit:

^ Clearly, MR. FREE, you shouldn't be posting about code
No offense, buddy - but you're off the hook by a lot and that misleads others.

Since I am misleading people, you should hurrying up and post the one liner you Googled. Don't edit the actual function of the code, just base.encode(64).oneliner and run. Let us know how far the script gets.
When you find that miracle one liner that would make this script work, let me know, i'll write you a real spreader that actually executes the seed, if the signature isn't detected in memory.