Re: [Full-disclosure] Some shit going on in seclist
On Wed, 25 Nov 2009 03:10:04 +0530, Tyler Durten said:
> I guess this is an email list. This guy -* Day Jay, has put up this
> vulnerability up on seclist, stating that it relates to microsoft iis 6.0,
> when it actually deletes the user's home folder. This is total shit, and if
> you (Day Jay), think that this is ultral33t, know that you suck, and you're
> pretty good at that.
Some lessons to learn:
1) Backups are important. If nothing else, buy a 500G USB SATA disk drive and
dump your machine to it once or twice a week.
2) Always mount a scratch monkey. (Bonus points for the silverbacks who get the
reference). A crash-n-bun test system, or at least a throwaway VMware with a
'revert' button.
3) If something is doing nothing but a 'system()' call on a string of hex
constants, you
probably want to do the following first:
a) See what 'printf("%s", hexconstant)": produces
b) Understand why you don't want to just do "printf(hexconstant);'
4) You should have read the whole thread, not just snarfed up the exploit.
Often, first posts of new exploits are buggy and the rest of the thread has
useful bugfixes. In this case, the thread almost certainly had several
indignant posts just like yours. ;)
pgpObjOAYpTFl.pgp
Description: PGP signature
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Some shit going on in seclist
> I guess this is an email list. This guy -/ Day Jay, has put up this > vulnerability up on seclist, stating that it relates to microsoft iis > 6.0, when it actually deletes the user's home folder. / If you don't understand the code well enough to realize what it's doing, then you deserve getting whacked for running some random shit you found on an anonymous mailing list. PS: "I send this file to have your advice", Loveletter.txt.vbs, etc. Oh .. and I hear 4chan has a bunch of cool pictures you can rename from .jpg to .js and get free porn for life. (the only time I remember this actually being funny was when somebody did one that mailed the contents of /etc/passwd .. and somebody else took the time to make a passwd file that when run through jtr said something like "you're so lame for decoding this") Cheers, Michael Holstein Cleveland State University ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Some shit going on in seclist
2009/11/24 Tyler Durten : > I guess this is an email list. This guy - Day Jay, has put up this > vulnerability up on seclist, stating that it relates to microsoft iis 6.0, > when it actually deletes the user's home folder. This is total shit, and if > you (Day Jay), think that this is ultral33t, know that you suck, and you're > pretty good at that. > hm, maybe next time try it out in a virtualized environment / sandbox ;) cheers gregor -- just because your paranoid, doesn't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 @ http://pgp.mit.edu:11371/ skype:rc46fi ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] Some shit going on in seclist
you have lost your homedir, or what? well, this is very stupid and pretty badly obfuscated, but I wonder how many scriptkiddies have been temporary suspended in their activities... On Wed, Nov 25, 2009 at 12:40 AM, Tyler Durten wrote: > I guess this is an email list. This guy - Day Jay, has put up this > vulnerability up on seclist, stating that it relates to microsoft iis 6.0, > when it actually deletes the user's home folder. This is total shit, and if > you (Day Jay), think that this is ultral33t, know that you suck, and you're > pretty good at that. > ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] Some shit going on in seclist
I guess this is an email list. This guy -* Day Jay, has put up this vulnerability up on seclist, stating that it relates to microsoft iis 6.0, when it actually deletes the user's home folder. This is total shit, and if you (Day Jay), think that this is ultral33t, know that you suck, and you're pretty good at that. * ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
