[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20050610212235.60485.qmail@web53308.mail.yahoo.com>
Date: Fri, 10 Jun 2005 14:22:35 -0700 (PDT)
From: "C.J. Steele, CISSP" <coreyjsteele@...oo.com>
To: bugtraq@...urityfocus.com
Cc: intrusions@...ts.sans.org
Subject: `tattle`, now with goodness
http://sodaphish.com/files/tattle
This new version of `tattle` brings:
* a shift away from using whois information to using the abuse.net dns
lookup to get contacts to report abuse to.
* no more domain-based reporting -- all is done by IP. hopefully this
will quell much of the concern about abuse being reported to the wrong
parties.
* no more dependancy on external system binaries (such as `host` or
`whois`.) Thus, there should be no threat of some remote maliciousness
and the the code should be somewhat more portable.
Let the next barrage of e-mails telling me how wrong my implementation
is begin! ;-P
Ciao,
-C
--
C.J. Steele, CISSP <coreyjsteele@...oo.com>
_______________________________________________
Intrusions mailing list
Intrusions@...ts.sans.org
http://www.dshield.org/mailman/listinfo/intrusions
Powered by blists - more mailing lists