full-disclosure - Re: Google is vulnerable from XSS attack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed Dec  7 23:45:36 2005
From: pvnick at gmail.com (Paul)
Subject: Re: Google is vulnerable from XSS attack

I hacked www.comcast.net about 3 months ago (file content
disclosure/directory transversal). No-one heard about it because after I
reported the problem and it was patched, I had no evidence to back up my
claim, so what would have been the point of telling everyone? However, I
knew that I was doing a responsible thing to help the computer industry. I
just don't think that having a huge company like Comcast under hacker
control would have been a very good idea.

Btw, since when did you "own" a corporation when you're able to execute
script on others' computers?

Not flaming you or anything, just answering your challenge.

Regards,
Paul
Greyhats Security
http://greyhatsecurity.org

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of n3td3v
Sent: Wednesday, December 07, 2005 3:23 PM
To: full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] Re: Google is vulnerable from XSS attack

Hackers own Google while vulnerabilities remain unpatched. Once they
patch a vulnerability, they can own me again! Until then... Google is
in the hands of hackers.

Since you're having a stab at me. Wheres your Google and Yahoo
vulnerabilities? Naw, you don't have any. You prefer to go looking for
your SQL injections and cross site scripting in web sites no one has
ever heard of or cared about before (easy targets).

As the score goes, how many high profile brand names have you found
vulnerabilities for?

Fancy having a hacking challenge for finding vulnerabilities in major
dot-com's?

Lets do it!

On 12/7/05, Morning Wood <se_cur_ity@...mail.com> wrote:
> who owns you? hint: Google ( they own the world )
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.362 / Virus Database: 267.13.12/192 - Release Date: 12/5/2005

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.362 / Virus Database: 267.13.12/192 - Release Date: 12/5/2005