full-disclosure - Re: some considerations on Ettercap code repository breach

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <AANLkTinWUftkVj=+0ujNr_9FSvXT8baR0UGFGnqDX6vE@mail.gmail.com>
Date: Wed, 29 Dec 2010 20:53:28 +0100
From: exploit dev <extraexploit@...il.com>
To: Wendel Guglielmetti Henrique <wsguglielmetti@...il.com>
Cc: Full-Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: some considerations on Ettercap code
	repository breach

Hi Wendel,

My post is not about the possibility that the Ettercap code was been
backdoored or not. I have only try to explain (with very few details) how is
possible find breaches in well known web sites (like sourceforge) starting
from the analaysis of source ode of a p(php/perl/python)bot.
Nothing else. If I have more time to spent for this, I will post an
explanation of my "mind map" that I used months ago for start to study this
kind of bot.

Regards.

On Wed, Dec 29, 2010 at 8:24 PM, Wendel Guglielmetti Henrique <
wsguglielmetti@...il.com> wrote:

> Hi,
>
> One of the claims made in the zine was that they compromised the
> popular ARP-Spoofing toolkit – Ettercap, and implied that the code had
> been altered several years ago. The implication was that a backdoor
> was placed in the code. However, there is no evidence...
>
> We wrote a post about that @ SpiderLabs blog.
>
>
> http://blog.spiderlabs.com/2010/12/anti-security-and-the-christmas-day-incident.html
>
> Best regards
>
> On Wed, Dec 29, 2010 at 12:32 PM, exploit dev <extraexploit@...il.com>
> wrote:
> > If you are interested
> >
> http://extraexploit.blogspot.com/2010/12/some-considerations-on-ettercap-source.html
> >
> > Regards
> >
> > --
> > http://extraexploit.blogspot.com
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
>
>
>
> --
> Wendel Guglielmetti Henrique
> http://wsec.110mb.com/ - Personal HomePage
>

-- 
http://extraexploit.blogspot.com

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/