full-disclosure - Re: who needs a server ...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 24 Oct 2006 12:01:57 -0500
From: <cdejrhymeswithgay@...h.com>
To: <full-disclosure@...ts.grok.org.uk>, <auto113922@...h.ai>
Cc: bugtraq@...urityfocus.com
Subject: Re: who needs a server ...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



On Tue, 24 Oct 2006 08:45:35 -0500 auto113922@...h.ai wrote:
>for phsihing and phile downloading specially when server from
>"location: I don't know" :) this is kind of cool normally used for

>
>base64 inline images I think ? Firefox 2.0 and Opera 9.02 you can
>invoke the apps and play from there check .asx in temp with
>foo.asf
>maybe you can do some things else
>
><a
>href="data:image/gif;base64,R0lGODlhFQAVAMQAAADMMwLMNRDPQMry1C3UVlT

>b
>dW3giZvprfb69hDIADnM
>Kje5AEqPAGfBALzFAOvKAKmNAMDAwP3KAPrJAPnHAOy9AMukAGtXAAAAAAAA
>AAAAAAAAAAAAAAAAAAAAAAAAACH5BAEAABEALAAAAAAVABUAQAXKYCSOozSd
>k0SSVQK8BSLPyGAAyWWJUmVBlwtjkUgsGMEgxFIZTRqwwaEgeFkbzImoAnEB
>YjIbwZrTrSISSmXNXlNU58ij4bXisBXtiAKF0WwCAgEADExbC1Zgf1QACxcQ
>Wz+IBVJjdkiPO04+P0lJS1lxEg4NREYNDhVvcQ+TBgSDdguhPA5eYGJVLwlL
>TREViH5/U1ULS1t1ijQINzmaFX1fywcEgoSPkQzCU7EvmJpqFkIKVN0JmDq+
>ERM+QJ7vvXqbnD+gTHkiIQA7">test</a>
>
><a
>href="data:application/hta;7bit,<script>alert()</script>">test</a>
>
><a href="data:text/xml;7bit,''><img>try inject
>">test</a>
>
><a href="data:text/html;7bit,<img
>src=http://ie7.com/firefox.jpg>">test</a>
>
><a href="data:application/pdf;7bit,foo.pdf">test</a>
>
><a href="data:application/x-shockwave-flash;7bit,foo.swf">test</a>
>
><a href="data:video/x-ms-asf;7bit,foo.asf">test</a>
>
><a href="data:application/zip;7bit,foo.zip">test</a>
>
><a href="data:video/quicktime;7bit,foo.mov">test</a>
>
>
>--
>
>
>
>Concerned about your privacy? Instantly send FREE secure email, no

>account required
>http://www.hushmail.com/send?l=480
>
>Get the best prices on SSL certificates from Hushmail
>https://www.hushssl.com?l=485
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/

sweet! time to do some myspace phishing!
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.5

wpwEAQECAAYFAkU+RwUACgkQsGS6s78KOsVXawP/aE32fcfCqnBKTDjSSVRZRo7U8BbW
UzhQFt/j9c2L18KoVoCmy9YYYPmkdHFc7nJPei4IEQ2LnaeBCdoUd79AVROjN+O6pNWS
0Fp8si7o5xwONjR+mEyTEv3aoKa5lndO7W14pqJYD2MCYnyKiJQx9Cx8FZyTHkzElJXf
3d3c7aA=
=6AD7
-----END PGP SIGNATURE-----




Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/