full-disclosure - All you WMF haxxors are belong to...... Mr Moore

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon Jan 23 14:40:18 2006
From: fdlist at digitaloffense.net (H D Moore)
Subject: All you WMF haxxors are belong to...... Mr Moore

Nice DoS bug, next time try emailing us first :-)

-HD

On Monday 23 January 2006 04:23, cranium pain wrote:
> WMF Exploit vulnerable?
>
> [*] Starting Reverse Handler.
> [*] Waiting for connections to http://0.0.0.0:80/
> [*] Got connection from 0.0.0.0:443 <-> 1.1.1.1:42121
> [*] Sending Stage (2834 bytes)
> [*] Sleeping before sending dll.
> [*] Uploading dll to memory (69643), Please wait...
> [*] Upload completed
> meterpreter> Out of memory during "large" request for 2147487744 bytes,
> total sbrk() is 17950720 bytes at
> /home/framework/lib/Pex/Meterpreter/Packet.pm line 509
>
>
> 509:  $res -1 if ($res >= 0 and not defined(recv($fd, $tempBuffer,
> $tempBufferLength, 0)));
>
> --
>
> "haxxoring haxxors for fun and fun"