full-disclosure - Anti-Sec - We have Terminated Blackhat-forums. Are you scared now HackForums?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <e60720a90907160222q74753893w3619447fe168f7e6@mail.gmail.com>
Date: Thu, 16 Jul 2009 19:22:11 +1000
From: Ant-Sec Movement <anti.sec.movement@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Anti-Sec - We have Terminated Blackhat-forums.
	Are you scared now HackForums?

Blend in.
Get trusted.
Trust no one.
Own everyone.
Disclose nothing.
Destroy everything.
Take back the scene.
Never sell out, never surrender.
Get in as anonymous, Leave with no trace.

------------------------------

Dear Jesse Labrocca (Omniscient) and Hackforums.net,

The Anti-Sec movement has officially terminated Blackhat-forums.com using
yet ANOTHER 0-day exploit that we have discovered. This one takes advantage
of a previously undisclosed LiteSpeed vulnerability. This is primarily to
prove that we are serious and committed to our primary goal - eradicating
full-disclosure of computer vulnerabilities and exploits, and terminating
general discussion of hacking for any n00b and script-kiddie to read and
review - and learn from.

The Anti-Sec movement hopes Hackrforums.net now understands that our cyber
war against you is NOT a joke. We will be terminating Hackforums.net. You
are our number one target...we want to savor the moment and the suspense. We
will strike when you least expect it. This we promise.

Here is a brief transcript of the hacking of Blackhat-forums.com:

-----------------------------------------------------------------

anti-sec:~/pwn# ./litespeed_0day -t blackhat-forums.com -p80

[+] Connecting to blackhat-forums.com:80
[+] Connected Successfully!
[+] Checking for Lightspeed vulnerability...
[+] Vulnerable!
[+] Sending exploit
[-] Phase 1
[-] Phase 2
[-] Phase 3
[+] Injecting Shellcode...
[+] Waiting for reverse shell...

[~] Connected to shell @ 74.86.203.65!

<snip>

uid=0(root) gid=0 (root) groups=0 (root)

<snip>

-----------------------------------------------------------

By terminating Blackhat-forums.com, we have furthered our goals in more ways
than one.

We are coming for you hackforums.net...and Milw0rm.com. We haven't forgotten
you, Milw0rm. Our juicy Apache 0-day will terminate both websites, which
will cause a major blow to those who support full-disclosure of hacking
related information.

"Take out two birds with one stone."

Sincerely,

-anti-sec

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/