lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
From: ecb29 at (Elliott B├Ąck)
Subject: Re: [lists] python does mangleme (with IE bugs!)

The URL you give for the crash_IE files simply refresh until they get to and show a 404 error...

Elliott C. B?ck

119 Blair St. #2

ned wrote:

>i've made a port of mangleme:
>with a few extra quirks (such as file extentions/url types)
>it finds IE bugs after roughly 2.5 -> 3 hours and they are at:
>They are not the null pointer dereference that Michal found (which 
>curiously seems to not own my 6.0.2800.1106.xpsp1?) but some other 
>probably non-exploitable problems!
> doesn't use CGI like mangleme but generates webpages in the 
>directory 'html1' numbered 0.html to n.html. 0.html then uses a refresh to 
>load 1.html and so on with little user interaction required!
>anyway, if you find bugs with it, don't sell to anyone/notify vendors!
>- nd

Powered by blists - more mailing lists