full-disclosure - Re: Some shit going on in seclist

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <72131.1259247027@turing-police.cc.vt.edu>
Date: Thu, 26 Nov 2009 09:50:27 -0500
From: Valdis.Kletnieks@...edu
To: Tyler Durten <ty13rdurt3n@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Some shit going on in seclist

On Wed, 25 Nov 2009 03:10:04 +0530, Tyler Durten said:

> I guess this is an email list. This guy -* Day Jay, has put up this
> vulnerability up on seclist, stating that it relates to microsoft iis 6.0,
> when it actually deletes the user's home folder. This is total shit, and if
> you (Day Jay), think that this is ultral33t, know that you suck, and you're
> pretty good at that.

Some lessons to learn:

1) Backups are important.  If nothing else, buy a 500G USB SATA disk drive and
dump your machine to it once or twice a week.

2) Always mount a scratch monkey. (Bonus points for the silverbacks who get the
reference).  A crash-n-bun test system, or at least a throwaway VMware with a
'revert' button.

3) If something is doing nothing but a 'system()' call on a string of hex constants, you
probably want to do the following first:

a) See what 'printf("%s", hexconstant)": produces
b) Understand why you don't want to just do "printf(hexconstant);'

4) You should have read the whole thread, not just snarfed up the exploit.
Often, first posts of new exploits are buggy and the rest of the thread has
useful bugfixes.  In this case, the thread almost certainly had several
indignant posts just like yours. ;)

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/