full-disclosure - Re: Google Search Feature Exploitation Scenario

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 12 Apr 2011 20:08:06 +1000
From: "david.klein@...ocus.com.au" <david.klein@...ocus.com.au>
To: literalka@...a.eu, full-disclosure@...ts.grok.org.uk
Subject: Re: Google Search Feature Exploitation Scenario

Bing?


------- Original Message -------
>>From    : Leon Kaiser[mailto:literalka@...il.com]
Sent    : 4/12/2011 1:05:37 PM
To      : full-disclosure@...ts.grok.org.uk
Cc      : 
Subject : RE: Re: [Full-disclosure] Google Search Feature Exploitation Scenario

 I don't see why people are able to directly link to "I'm Feeling Lucky"
Google search results in the first place. Can anyone think of a
practical use for it?

========================================================
Leon Kaiser      - Head of GNAA Public Relations -
        literalka@...a.eu || literalka@...tse.fr
        http://gnaa.eu  ||  http://security.goatse.fr 
      7BEECD8D FCBED526 F7960173 459111CE F01F9923
"The mask of anonymity is not intensely constructive."
       -- Andrew "weev" Auernheimer
======================================================== 

On Sun, 2011-04-10 at 14:05 +0530, satyam pujari wrote:

> Thanks for that Nick , good to know , but unfortunately it's still
> exploitable in 2011 :)
> 
> 
> On Sun, Apr 10, 2011 at 2:31 AM, Nick FitzGerald
> <nick@...us-l.demon.co.uk> wrote:
> 
>         satyam pujari wrote:
>         
>         > Here is a simple Google's "I'm Feeling Lucky" search feature
>         exploitation
>         > scenario.
>         
>         
>         > [...]
>         
>         Yawn...
>         
>         That's _so_ 2007!
>         
>         
>          http://www.virusbtn.com/resources/spammerscompendium/lucky.xml 
>         
>         ...and I seriously doubt that was the first time it was done,
>         just when
>         _I_ happened to make a note of it being actively abused in
>         spam.
>         
>         All that other stuff about free hosting sites and IFrames on
>         blogger.com is unnecessary implementation detail that can be
>         achieved
>         multitudinous ways.
>         
>         
>         
>         Regards,
>         
>         Nick FitzGerald
>         
>         
>         _______________________________________________
>         Full-Disclosure - We believe in it.
>         Charter:  http://lists.grok.org.uk/full-disclosure-charter.html 
>         Hosted and sponsored by Secunia -  http://secunia.com/ 
> 
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:  http://lists.grok.org.uk/full-disclosure-charter.html 
> Hosted and sponsored by Secunia -  http://secunia.com/ 


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/