full-disclosure - Phun! Search

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <3a166c090603231312t4296f245u9f9756505e201a53@mail.gmail.com>
Date: Thu Mar 23 21:12:46 2006
From: n3td3v at gmail.com (n3td3v)
Subject: Phun! Search

I have exploit code for this issue, which the list won't be getting hold of.
The disclosure was to show that I can ask the slurp robot to cache an
account on the public index, so I can retrieve account information. I ask
the code to cache a copy of 'x user', when 'x' is at critical information
page to obtain access to the yahoo users account. Of course with such a good
0-day, I use it seldom and only on specific targets like yahoo users with
'paid' services and or Yahoo employees.

On 3/22/06, Stan Bubrouski <stan.bubrouski@...il.com> wrote:
How old are you?  Seriously.  I don't know whether you realize just
how completely stupid you come off as to even people new in the
security field.  You are a joke.  Quit filling this list with crap.
BTW did you even check to see if you Yahoo! will let you view OTHER
people's account stuff?  Otherwise it seems pretty useless.

-sb
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060323/e2cbf67e/attachment.html