full-disclosure - Re: Barbut

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 22 Nov 2007 09:59:36 +0700
From: Ben van Staveren <ben.vanstaveren@...lua.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Barbut

It's all about the law of averages, kind of like spam. Hit enough  
hosts with some cheap automated script and you're bound to get some  
sort of hit on it sooner or later. For most script kiddies this is  
good enough. Scan 10000 hosts and get 1 hit, sure, new toy to play with.

On Nov 22, 2007, at 3:44 AM, Simon Smith wrote:

> Vladis,
> 	Got that right... this vulnerability was released ages ago if memory
> serves right. Whats funny is that I am not using a linux host and I do
> not use awstats anyway... makes the attack even more pathetic.
>

-- 
Ben van Staveren <ben.vanstaveren@...lua.com> :: PT Bellua Asia  
Pacific - http://www.bellua.com/
Bank Bumi Daya Plaza 9th Floor, Jl. Imam Bonjol 61, Jakarta 10310  
Indonesia
Phone: +62 213 983 4116 / Fax: +62 213 983 4114
SHA1: 50 78 07 D3 50 F2 9C 3A C4 61 B8 D2 46 7A F4 95 85 BC F5 D8

Download attachment "smime.p7s" of type "application/pkcs7-signature" (2435 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/