RE: [Full-Disclosure] Akamai

2004-06-15 Thread Chris Carlson
http://www.washingtonpost.com/wp-dyn/articles/A43635-2004Jun15.html Need to register, but it's no hassle. I'd mirror to my server, but copyright blah blah blah. Anyone have any more info? > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > james e

RE: [Full-Disclosure] Akamai

2004-06-15 Thread Chris Carlson
I've just been told that it was a DoS. No details. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Niek Baakman > Sent: Tuesday, June 15, 2004 09:58 > To: [EMAIL PROTECTED] > Subject: [Full-Disclosure] Akamai > > Hi list, > > akamai disappear

[sb] RE: [Full-Disclosure] Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan)

2004-06-07 Thread Chris Carlson
When run remotely: Line: 1 Char: 1 Error: Access is denied. Code: 0 URL: http://62.131.86.111/security/idiots/repro/installer.htm When run locally, software installation is blocked. Using IE 6.0.2900.2096 SP2, WinXP SP2 I've gotta say that SP2 has some VERY nice protection builtin. On the dow

[Full-Disclosure] WinXP SP2 comments (was: Internet explorer 6 execution of arbitrary code)

2004-06-06 Thread Chris Carlson
k in the installer. /c > -Original Message- > From: Jelmer [mailto:[EMAIL PROTECTED] > Sent: Sunday, June 06, 2004 22:17 > To: Chris Carlson > Cc: [EMAIL PROTECTED] > Subject: RE: [Full-Disclosure] Internet explorer 6 execution > of arbitrary code (An analysis of

RE: [Full-Disclosure] Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan)

2004-06-06 Thread Chris Carlson
When run remotely: Line: 1 Char: 1 Error: Access is denied. Code: 0 URL: http://62.131.86.111/security/idiots/repro/installer.htm When run locally, software installation is blocked. Using IE 6.0.2900.2096 SP2, WinXP SP2 I've gotta say that SP2 has some VERY nice protection builtin. On the dow

[Full-Disclosure] Get over it (Was: Psexec on *NIX)

2004-05-06 Thread Chris Carlson
: Thursday, May 06, 2004 19:14 To: [EMAIL PROTECTED] Subject: Re: [despammed] Re: [Full-Disclosure] Psexec on *NIX Ops...I should avoid drinking too much. I totally inverted the sense of your question. Obviously, you're trolling. -Original Message- From: Michael Gargiullo [mailto:[EMAIL

RE: [Full-Disclosure] Psexec on *NIX

2004-05-06 Thread Chris Carlson
It looks like everyone is successfully beating the shit out of the wrong bush(es) here. Let's just end this. The tool I want does not exist, so I'll go make it. Thanks to those who gave relevant responses. - Chris ___ Full-Disclosure - We believe in

RE: [Full-Disclosure] Psexec on *NIX

2004-05-06 Thread Chris Carlson
27;t need to log into a router to check its arp tables. I simply execute a command on the remote system. I need this for unix. Any more questions? - Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, May 06, 2004 15:50 To: Chris Carlson Cc: [EM

RE: [Full-Disclosure] Psexec on *NIX

2004-05-06 Thread Chris Carlson
it doesn't exist. In that case, I'll go make one. I'm just trying to save myself some time here. -Original Message- From: Michael Gargiullo [mailto:[EMAIL PROTECTED] Sent: Thursday, May 06, 2004 14:54 To: Harlan Carvey Cc: Chris Carlson; [EMAIL PROTECTED] Subject: Re: [F

[Full-Disclosure] Psexec on *NIX

2004-05-06 Thread Chris Carlson
This has probably come up before, but does anyone know of a *nix utility similar to psexec[1] to execute commands on remote windows systems? I've seen several samba newsgroup threads about this, but no posted solutions. I'm not looking for any extra services to add to my machines - I already know

[Full-Disclosure] Looking for BKDR_IRCFLOOD.X

2004-04-24 Thread Chris Carlson
Several users of an IRC network of mine have been infected with a strange form of virus, worm, trojan, or other that is causing some rather odd problems for some. Trend Micro's Pc-Cillin detects the presence of BKDR_IRCFLOOD.X when mIRC is loaded by these users. I don't know anything more abou

RE: [Full-Disclosure] Removing ShKit Root Kit

2003-12-23 Thread Chris Carlson
> IIRC the host file can be deleted and even overwritten > without having an impact on the ADS. Actually, deleting the host file deletes all associated data streams. If a file of the same name is created on the system, the ADS' will not remain: \> echo this is a test > notepad.txt \> echo testi