full-disclosure - Unusual request

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <A7043C74B6DA4842BD57E4449F43BB1B028FA4@shiro.oicinc.com>
From: schoe at oicinc.com (Sung J. Choe)
Subject: Unusual request

> For the rest of you jews: be nice to Paul.
Whoa, what's this supposed to mean!


.--------------------------------------------------.
| Sung J. Choe <schoe[at]oicinc.com>, TICSA        |
| Systems Administrator, Facility Security Officer |
.--------------------------------------------------.----.
                    | Oceanic Imaging Consultants, Inc. |
                    | Phone #: (808) 539-3634 x3634     |
                    .-----------------------------------.

568D CAD6 53A0 92E6 4A2A  4E87 3BA0 5F90 37BB 8EE7

> -----Original Message-----
> From: Day Jay [mailto:d4yj4y@...oo.com]
> Sent: Thursday, February 13, 2003 11:20 AM
> To: Paul Schmehl
> Cc: full-disclosure@...ts.netsys.com
> Subject: Re: [Full-Disclosure] Unusual request
> 
> 
> Pauli Shore,
> 
> I attached 2 html files that you can use to run your
> tests. Just access these html files through a web
> browser locally and the rest is self-explanatory and
> edumacational-even simple people like you will
> understand.
> 
> For the rest of you jews: be nice to Paul. Just
> because he Schmels don't mean he's all that bad.
> 
> PS: Paul: try an advanced G00000LE search next time. 
> 
> d4yj4y
> day to the motherfucking jay
> 
>  
> 
> 
> --- Paul Schmehl <pauls@...allas.edu> wrote:
> > The net is filled with so much junk now, it's
> > getting harder to find
> > what you need.  I am looking for an exploit that
> > will give you "root" on
> > an unpatched IIS box by simply typing a string in
> > the address line in
> > your browser.  I know I've seen it before, but I
> > can't seem to find it
> > amongst all the vulns for IIS and all the web logs
> > that show up when you
> > google.
> > 
> > I need this for a "security roadshow" that we're
> > putting together, so I
> > can demonstrate how easy it is to break in to an
> > unpatched box.  Can
> > anybody point me in the right direction?
> > 
> > I don't want exploit code.  This is just a simple
> > string that you enter
> > into the URL box in a browser.  It's at least two or
> > three years old, I
> > know.
> > 
> > -- 
> > Paul Schmehl (pauls@...allas.edu)
> > Adjunct Information Security Officer
> > The University of Texas at Dallas
> > http://www.utdallas.edu/~pauls/
> > AVIEN Founding Member
> > 
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter:
> http://lists.netsys.com/full-disclosure-charter.html
> 
> 
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Shopping - Send Flowers for Valentine's Day
> http://shopping.yahoo.com
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030213/70c889d6/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: schoe.vcf
Type: application/octet-stream
Size: 284 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030213/70c889d6/schoe.obj