Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-09 Thread Tatercrispies
Guys, don't be haters. n3td3v found a CRITICAL HOLE in one of the worlds biggest online products. He may not be the most popular face on this list, but his reputation stands firm. And now he's proven himself. You can't argue with that. It's solid. Those of you casting disparagements need to look

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-09 Thread sk / GroundZero
Guys, don't be haters. n3td3v found a CRITICAL HOLE in one of the worlds biggest online products. He may not be the most popular face on this list, but his reputation stands firm. And now he's proven himself. You can't argue with that. It's solid. Those of you casting disparagements need to

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-08 Thread ghost
lol, n3td3v, you are so pathetic. Exactly 1 lame XSS post and now you're some sort of elite h4x0r, everyone who's googled knows how lame you really are. You must be related to morning_wood. Lets post this one last time google:

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread n3td3v
Four days on and Google has yet to implement a patch. I guess groups getting deleted, harvesting of e-mail addresses, and theft of Google / Gmail accounts isn't that important. :-( On 12/5/05, Joseph Pierini [EMAIL PROTECTED] wrote: N3td3v, Thanks for the info. Wow, it must have been an

RE: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread jpierini
To: full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] Re: Google is vulnerable from XSS attack Four days on and Google has yet to implement a patch. I guess groups getting deleted, harvesting of e-mail addresses, and theft of Google / Gmail accounts isn't that important. :-( On 12/5/05

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread n3td3v
On 12/7/05, jpierini [EMAIL PROTECTED] wrote: I'm just a CISSP, and as discussed numerous times I'm without the elite mad skills of a hacker (XSS wasn't even on our test!) You're not a professional then in my eyes and don't have a right to be even in this thread let alone go around wtih your

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread Morning Wood
As a owner of a Google Group, I would personally like this patched for the security of my group and that of my personal computer and web browser. hmm... did you pay for this group? did'nt think so read the eula? bet not who owns you? hint: Google ( they own the world )

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread n3td3v
Hackers own Google while vulnerabilities remain unpatched. Once they patch a vulnerability, they can own me again! Until then... Google is in the hands of hackers. Since you're having a stab at me. Wheres your Google and Yahoo vulnerabilities? Naw, you don't have any. You prefer to go looking for

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 where is your heap overflow ?? (XSS easy targets) ; n3td3v wrote: Hackers own Google while vulnerabilities remain unpatched. Once they patch a vulnerability, they can own me again! Until then... Google is in the hands of hackers. Since you're

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread c0ntex
For what it is worth, it would be trivial right now to name 10 very large online presences that have some form of vulnerability, whether that is XXS, SQL Injection or some other form of web application quirkiness, it's not really a big deal. I do how ever have to agree with ad, it takes far more

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread c0ntex
Excuse me, I clicked send too soon As I was saying You found a bug, and thats great, well done, congratulations. However, at the end of the day that is all it is. A bug, write it off and end the thread, you have not found the holy grail, you have not discovered the akashic records on

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread InfoSecBOFH
Way to blow it out of perportion kiddie On 12/7/05, n3td3v [EMAIL PROTECTED] wrote: Hackers own Google while vulnerabilities remain unpatched. Once they patch a vulnerability, they can own me again! Until then... Google is in the hands of hackers. Since you're having a stab at me. Wheres

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread n3td3v
My point exactly. Thank you for confirming you have no reason to be on this list. On 12/7/05, InfoSecBOFH [EMAIL PROTECTED] wrote: Yes kiddie, no one has seen any vulnerabilities by me posted to this list or posted anywhere with this email address.

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread InfoSecBOFH
And thank you for proving that you are truly a kiddie. You just don't get it do you. On 12/7/05, n3td3v [EMAIL PROTECTED] wrote: My point exactly. Thank you for confirming you have no reason to be on this list. On 12/7/05, InfoSecBOFH [EMAIL PROTECTED] wrote: Yes kiddie, no one has seen

RE: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread Paul
: Google is vulnerable from XSS attack Hackers own Google while vulnerabilities remain unpatched. Once they patch a vulnerability, they can own me again! Until then... Google is in the hands of hackers. Since you're having a stab at me. Wheres your Google and Yahoo vulnerabilities? Naw, you don't

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread n3td3v
Go study internet security for 7 years, do CS at college, learn computer programming in C++ and PHP, find hacks for Google/ Yahoo, setup your own security group, be friends with hundreds of people in multiple scenes, have IM and E-mail contact with some of Yahoo's top security advisors and

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread n3td3v
http://n3td3v.blogspot.com http://www.geocities.com/n3td3v http://groups.google.com/group/n3td3v Exiting thread now through the stupidity of your comments. On 12/8/05, InfoSecBOFH [EMAIL PROTECTED] wrote: You have proven to know nothing. You have proven to have zero contacts. I have already

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread InfoSecBOFH
Wow, so setting up a blogspot, geocities, and google groups accounts because you can't afford your own domain or know how to host your own shit makes you 1337. On 12/7/05, n3td3v [EMAIL PROTECTED] wrote: http://n3td3v.blogspot.com http://www.geocities.com/n3td3v

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread J.A. Terranson
On Wed, 7 Dec 2005, InfoSecBOFH wrote: Wow, so setting up a blogspot, geocities, and google groups accounts because you can't afford your own domain or know how to host your own shit makes you 1337. Looks like somebody parked his domain in anticipation of some fun :-) http://www.n3td3v.com

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread Mike Hoye
On Wed, Dec 07, 2005 at 11:54:08PM +, n3td3v wrote: Go study internet security for 7 years, do CS at college, learn computer programming in C++ and PHP, find hacks for Google/ Yahoo, setup your own security group, be friends with hundreds of people in multiple scenes, have IM and E-mail

Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread sk / GroundZero
, 2005 12:54 AM Subject: Re: [Full-disclosure] Re: Google is vulnerable from XSS attack Go study internet security for 7 years, do CS at college, learn computer programming in C++ and PHP, find hacks for Google/ Yahoo, setup your own security group, be friends with hundreds of people

RE: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-07 Thread Joseph Pierini
, December 07, 2005 9:56 AM To: jpierini; full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] Re: Google is vulnerable from XSS attack On 12/7/05, jpierini [EMAIL PROTECTED] wrote: I'm just a CISSP, and as discussed numerous times I'm without the elite mad skills of a hacker (XSS wasn't

[Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-05 Thread n3td3v
***Still unpatched vulnerable*** On 12/3/05, n3td3v [EMAIL PROTECTED] wrote: Vendor: Google Service: Groups Issue: XSS in pending message page Credit: n3td3v ___ Full-Disclosure - We believe in it. Charter:

RE: [Full-disclosure] Re: Google is vulnerable from XSS attack

2005-12-05 Thread Joseph Pierini
N3td3v, Thanks for the info. Wow, it must have been an exhaustive search to find that needle in a haystack. I'm sure Google appreciates your time and effort. Keep up the good work! -J ***Still unpatched vulnerable*** On 12/3/05, n3td3v [EMAIL PROTECTED] wrote: Vendor: Google Service: