full-disclosure - 3 new MS patches next week...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20040112080701.GA28409@ee.eee.metu.edu.tr>
From: canacar at eee.metu.edu.tr (Can Erkin Acar)
Subject: 3 new MS patches next week...

On Sun, Jan 11, 2004 at 12:17:23PM -0500, Exibar wrote:
> 
> >
> > This really long 'form action' item
> > http://www.citibank.com:achaaa9uwdtyazjwvwaaaa9p398haaa9uwdtyazjwv
> > waboundpyw
> > wgc2l6zt00pjxtvgc2l6zt00pjxywwgc2l6zt00pjxt398haaa9uwdtyazjwvwaaou
> > ndpywwgc2l
> > 6zt00pjxtvgc2l6zt00pjxvgc2l6zt00pjxt@....239.150.170/login/form.php
> >
> The above http: line doesn't make use of the 0x01 exploit.  In order to make
> use of that exploit, you NEED "0x01" in there just before the @ symbol. 

Yes, however this is the link from the 'fake' page. The distributed pishing
e-mail (which I also received) does contain 0x01 character at the proper
place, on the 'Click here to login' link directing users to this login page.