full-disclosure - Re: XSS and SQL injection via SIP (part 2) and toll fraud bonus

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sat, 20 Oct 2007 00:50:00 -0500
From: phioust <phioust@...il.com>
To: full-disclosure@...ts.grok.org.uk, State@...ia.fr
Subject: Re: XSS and SQL injection via SIP (part 2) and
	toll fraud bonus

On 10/20/07, lulzlulzluzluz <hardened.php@...il.com> wrote:
>
> security is serious business. plz do not joke like that phioust:
> xss0day -> x-ssh0day, see serious.


 Only drraid has ssh 0day


On 10/19/07, Radu State < State@...ia.fr> wrote:
> >
> >           my $hex = '';
> > >
> > >           for (my $i = 0; $i < length($_[0]); $i++) {
> > >
> >     LOL 3 phds and not one knows the range operator?
    for(0..length($_[0]))


> $attackerUser = $ARGV[3];
> > >
> > > $callUser = $ARGV[0];
> > >
> > > $targetIP = $ARGV[1];
> > >
> > > $targetPort = $ARGV[2];
> > >
> > > $attackerIP= $ARGV[4];
> > >
> > > $attackerPort= $ARGV[5];
> > >
> >  have you never heard of shift? or what about split @ARGV based on
spaces ... l0l perl retards

 Did you only write this in perl because C is too complicated for you?

you better hope perl underground does see this bullshit perl!!!

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/