full-disclosure - Re: Browzar Footprints

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 5 Sep 2006 14:49:29 +0100
From: "Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Browzar Footprints

lsi wrote:
> If the user uses Browzar's default search page, it's obvious as hell:
>
> 2xx.206.1x6.1x5 - - [01/Sep/2006:20:49:19 +0100] "GET
> /parvati/ici_bse.htm HTTP/1.1" 200 18754
> "http://www.browzar.com/search/browzar.asp?q=david%20brown%20prion"
> "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

  <evil>  Why don't you set your server to automatically 302 any client with 
a browzar.com referer header to one of the pages about how useless browzar 
is ?

    cheers,
      DaveK

n.b. closing /evil tag omitted on purpose.  i plan to stay this way. 
muahahahahaaaa!
-- 
Can't think of a witty .sigline today.... 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/