Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread Antony widmal
Is this thread about a sk who talk about shit he doesnt know, or impacket, or about an actual vuln ? Not sure here Le 14 nov. 2011 00:56, "Dan Tulovsky" a écrit : > http://www.secdev.org/projects/scapy/build_your_own_tools.html > > Seems to be what you want. > > On Sat, Nov 12, 2011 at 12:27 PM

Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread Dan Tulovsky
http://www.secdev.org/projects/scapy/build_your_own_tools.html Seems to be what you want. On Sat, Nov 12, 2011 at 12:27 PM, Darren Martyn wrote: > Off topic (kinda) but with all this talk on SCAPY, has anyone a good > reference on using it IN a python script for crafting/reading packets? Me > an

[Full-disclosure] [Announcement] ClubHack Mag Issue 22- November 2011 Released

2011-11-13 Thread Abhijeet Patil
Dear All, Here are with the Issue-22, November 2011 of ClubHack Magazine. This issue covers following articles:- 0x00 Tech Gyan - Looking Into the Eye of the Bits 0x01 Tool Gyan - Ravan – JavaScript Distributed Computing System 0x02 Mom's Guide - Best Practices of Web Application Security 0x03 Le

Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread Valdis . Kletnieks
On Sat, 12 Nov 2011 02:42:00 GMT, baqstabz said: > Judging by your posts I would go out on the edge and say that you have > about as much chance of having 0-day (yes, that is including xxs) as > your mommy. face it lol Actually, the mommy has a better chance. https://xkcd.com/327/ pgpggm9LpJ

Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread Dan Ballance
Cheers Antony, I began by asking if Scapy was a suitable tool for crafting this attack - and then asked more generally what tools/languages/frameworks do people recommend for this kind of task? Are you suggesting due to the very large numbers of packets involved that for performance reasons this ne

Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread Jon Kertz
On Fri, Nov 11, 2011 at 6:26 PM, xD 0x41 wrote: > i should never have even said anything, again, i wont make that > mistake again, the proof, will as always be n the pudding... > later. Yes, it is. The only problem is you've failed to provide the pudding, so there is no proof. Back to your regul

Re: [Full-disclosure] Even worse

2011-11-13 Thread Chris L
I have no idea what the point of this post is. Hell, most of your posts are hard to understand. However, considering it appears it involves your own, (or at least an associated to you "crazy coders" site), I'd think you would pay more attention to it. Now, I'm not one to think that security through

[Full-disclosure] Even worse

2011-11-13 Thread crazy coder
So, you know how to view the source of a message. Do you know how to fix a zone transfer, eh? crazycoders.com.300 IN SOA ns2.psychz.net. ufo.mboca.com. 201102 20 20 20 20 crazycoders.com.60 IN MX 0 crazycoders.com. crazycoders.com.86400

Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread baqstabz
Judging by your posts I would go out on the edge and say that you have about as much chance of having 0-day (yes, that is including xxs) as your mommy. face it lol Now please, stfu son, you're sounding like a total tardlump; otherwise we will have to unleash the dragons and let you see what a 1

Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread Chris L
Wow, good eye. I can't remember UDP having an ACK packet type, being a stateless protocol and all, either. I actually looked back through this thread of emails and it is actually mentioned many times, the idea of the exploit involving certain SQN or ACK packets, although only by "xD 0x41" as far as

[Full-disclosure] [Announcement] ClubHack 2011 Hacking and Security Conference

2011-11-13 Thread Abhijeet Patil
== ClubHack 2011 Security Conference 3rd, 4th & 5th December 2011 http://clubhack.com/2011 =

Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread Georgi Guninski
On Thu, Nov 10, 2011 at 05:47:07PM +, Thor (Hammer of God) wrote: > So, I've looked about on the web to see what software of any consequence you > have written, but I can't find any. Can you point me to anything that > illustrates that you know how to develop wide scale software applications

Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread dave bl
On 13 November 2011 04:27, Darren Martyn wrote: > Off topic (kinda) but with all this talk on SCAPY, has anyone a good > reference on using it IN a python script for crafting/reading packets? Me > and a friend wanted to write a python version of Ettercap/dsniff using the > SCAPY libraries as a cha

Re: [Full-disclosure] Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

2011-11-13 Thread Robert Kim App and Facebook Marketing
WOW! HA! Did you type all this from your cell phone?!?!?! It's like youre talking for hours without breathing in!!! =p On Wed, Nov 9, 2011 at 8:42 PM, xD 0x41 wrote: > Is awesome exploit yes! > I have looked at this and, you dont need to be udp... only... it is > TCP-IP. ... wich, i was luckily

Re: [Full-disclosure] Joomla Component (com_content) - Blind SQL Injection Vulnerability

2011-11-13 Thread Henri Salo
On Sat, Nov 12, 2011 at 12:35:35AM +0100, resea...@vulnerability-lab.com wrote: > Title: > == > Joomla Component (com_content) - Blind SQL Injection Vulnerability > > > Date: > = > 2011-11-11 > > > References: > === > http://www.vulnerability-lab.com/get_content.php?id=323 > >