full-disclosure - new attack technique? usingJavaScript+XML+OWSPost Data

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20051222183108.662D9DA9@lists.grok.org.uk>
Date: Thu Dec 22 18:31:16 2005
From: mail at hackingspirits.com (Debasis Mohanty)
Subject: new attack technique?
	usingJavaScript+XML+OWSPost Data

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Gaurav Kumar
Sent: Thursday, December 22, 2005 11:10 PM
To: full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] new attack technique?
usingJavaScript+XML+OWSPost Data

>> All I have to say is that we should cut the crap. 
>> I just thought of a possible attack scenario which I 
>> proved using a PoC and posted to this mailing list for 
>> discussion and constructive feedback which can help in 
>> developing more secure applications.

Well !! In your original post, with the amount of data provided by you;
failed to explain what is that you are trying to prove. 

>> All I got from debasis is "PISS OFF, LAME, KID, MORON". 
>> He asked me to do more research before posting anything. 
>> I proved I was right using a screenshot. 

Do you really think, it would have started until you gave you frivilous
statement.. Just to clarify, I never tried to flame you. The only thing that
I asked you is to do a little more research and come up with the right
thing. Is that a flame?? 

>> Looks like it has hurted his ego.

There are several vulnerabilities disclosed every week or every day. I am
just trying to understand how it would hurt my ego?? 

Finally, I infact triggered a technical debate with you which you turned up
into flame. Don't  know what is that you achieved out of it??

- D