full-disclosure - Phun! Search

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <122827b90603232156h67cb39bak8dae599acf97a2b2@mail.gmail.com>
Date: Fri Mar 24 05:56:22 2006
From: stan.bubrouski at gmail.com (Stan Bubrouski)
Subject: Phun! Search

How come when people make comments off-list you re-add FD to the
replies?  You are cancer.

On 3/23/06, n3td3v <n3td3v@...il.com> wrote:
> I have exploit code for this issue, which the list won't be getting hold of.
> The disclosure was to show that I can ask the slurp robot to cache an
> account on the public index, so I can retrieve account information. I ask
> the code to cache a copy of 'x user', when 'x' is at critical information
> page to obtain access to the yahoo users account. Of course with such a good
> 0-day, I use it seldom and only on specific targets like yahoo users with
> 'paid' services and or Yahoo employees.
>
>
>
> On 3/22/06, Stan Bubrouski <stan.bubrouski@...il.com> wrote:
> How old are you?  Seriously.  I don't know whether you realize just
> how completely stupid you come off as to even people new in the
> security field.  You are a joke.  Quit filling this list with crap.
> BTW did you even check to see if you Yahoo! will let you view OTHER
> people's account stuff?  Otherwise it seems pretty useless.
>
> -sb
>
>