full-disclosure - Re: SSL Capable NetCat and more

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20110328161036.GA29760@syn.titan.net>
Date: Mon, 28 Mar 2011 09:10:36 -0700
From: Fyodor <fyodor@...ecure.org>
To: GomoR <rpt6@...or.org>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: SSL Capable NetCat and more

On Sat, Mar 26, 2011 at 09:17:22PM +0100, GomoR wrote:
> On Sat, Mar 26, 2011 at 08:10:47PM +0200, Anton Ziukin wrote:
>
> > What can your tool do that Ncat (http://nmap.org/ncat/guide/index.html)
> > can't?
> 
> interestingly, I published version 1.00 of scnc in April 2008, 
> the 27th (and it wasn't the first version to be released):
> http://www.securiteam.com/tools/5RP0O20O0U.html
> 
> And more interestingly, ncat has been integrated in nmap SVN
> in May 2008, the 6th:

You seem to be implying that you released scnc 1.00 in April 2008 and
then we copied it a month later with our Ncat.  But the svn log you
referenced was just us moving Ncat between code repositories.  Chris
Gibson and I wrote Ncat years earlier.  Our first public release
(which did include SSL support) was in 2005:

http://seclists.org/nmap-dev/2005/q3/112

Our Ncat certainly wasn't the first reimplementation of Netcat, and it
wasn't even the first to support SSL.  It was just the first to have
all of the features *I* wanted--proxy support (client or server), SSL,
IPv6, connection redirection, connection brokering, portability
(Linux, Windows, Mac, etc.), and more.  See http://nmap.org/ncat/.

> Considering this timeline, pardon me if I fix bugs found in my
> softwares, even when some other tools give the same features.

I think you write some great tools and produce interesting research.
So if you want to write and maintain a Perl implementation of Netcat,
more power to you!  I'm only sending this email to correct the
mistaken timeline.

Cheers,
Fyodor

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/