full-disclosure - MSNLVADV-2010-001 Security Advisory

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <AANLkTimXwUxALwjZLq7nQatFeZCk3Smohrf4F3NAoMoX@mail.gmail.com>
Date: Fri, 21 Jan 2011 13:00:20 -0500
From: Григорий Братислава <musntlive@...il.com>
To: full-disclosure@...ts.grok.org.uk, nso-research@...iriu.de, 
	Thierry@...ler.lu
Subject: MSNLVADV-2010-001 Security Advisory

______________________________________________________________________
------------------------- MSNLVADV-2010-001 --------------------------

                 MusntLive Lame ASCII ART ADVISORY
______________________________________________________________________
______________________________________________________________________


   || __   ||
   ||=\_`\=||
   || (__/ ||
   ||  | | :-"""-.
   ||==| \/-=-.   \
   ||  |(_|o o/   |_
   ||   \/ "  \   ,_)
   ||====\ U  /__/
   ||     ;--'  `-.
   ||    /      .  \
   ||===;        \  \
   ||   |         | |
  _______\"""'   _/_/
 (~|_______ |  (_  \
   /  .' ( | )   \\_/
  |_ /     |||  |\\
 /  _)=====|||  | ||
/  /|      ||/  / //
\_/||      ( `-/ ||
   ||======/  /  \\ .-.
   ||      \_/    \'-'/
   ||      ||      `"`
   ||======||
   ||      ||

______________________________________________________________________
______________________________________________________________________

  Title:                  MUSNTLIVE LAME ASCII ART ADVISORY
  Severity:               High/420
  Advisory ID:            MSNLVADV-2010-001
  Found Date:             01.04.1998
  Date Reported:          01.04.1998
  Release Date:           20.01.2011
  Author:                 MUSNTLIVE
  Affected Component:     IS WANNA BE FUTURE CISSPs

  Remote Exploitable:     Yes
  Local Exploitable:      Yes
  Patch Status:           ELECTRO CONVULSIVE SHOCK THERAPY IS NOW ILLEGAL
  Discovered by:          MUSNTLIVE
  Thanks to:              pizdascriptkiddys



Background:
===========

ASCII art is was stupid show of stupid talent. Is now must in use by
lame scriptkiddys who is must want to scare industry into is think
that advisor is super security Yakov Smirnov. You is not funny!!


Proof is Concept
================


  ''      ''
  ||      ||  (''''    ('''' .|'',  '''|.  '||''| '||  ||`
  ||      ||   `'')     `'') ||    .|''||   ||     `|..||
 .||.    .||. `...'    `...' `|..' `|..||. .||.        ||
                                                    ,  |'
                                                     ''

 '||                   '||
  ||                    ||
  ||''|,  '''|.  .|'',  || //`  .|''|, '||''|
  ||  || .|''||  ||     ||<<    ||..||  ||
 .||  || `|..||. `|..' .|| \\.  `|...  .||.



               '||`
                ||
 '||''| .|''|,  ||  .|''|,  '''|.  ('''' .|''|,
  ||    ||..||  ||  ||..|| .|''||   `'') ||..||
 .||.   `|...  .||. `|...  `|..||. `...' `|...



             ||`
             ||          ''
  '''|.  .|''||  \\  //  ||  ('''' .|''|, '||''| '||  ||`
 .|''||  ||  ||   \\//   ||   `'') ||  ||  ||     `|..||
 `|..||. `|..||.   \/   .||. `...' `|..|' .||.        ||
                                                   ,  |'
                                                    ''

                       || ||
                       || ||
 '||  ||` .|''|, ('''' || ||
  `|..||  ||..||  `'')
      ||  `|...  `...' || ||
   ,  |'
    ''



Solution:
=========

USA is style Waterboard torture is user of ASCII

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/