full-disclosure - Re: MalBox Release! A Program Behavior Analysis System!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20110514074151.GB30543@foo.fgeek.fi>
Date: Sat, 14 May 2011 10:41:52 +0300
From: Henri Salo <henri@...v.fi>
To: CnCxzSec衰仔 <cncxzhack@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: MalBox Release! A Program Behavior Analysis
 System!

On Fri, May 13, 2011 at 11:09:46PM +0800, CnCxzSec衰仔 wrote:
> As many questions has been raised about this online tool, we have contacted
> the authors of this tools. Here is their answer.
> 
> *Hi,
> Malbox <http://malbox.xjtu.edu.cn/> is developed by a couple of students of
> botnet research team in Network Security Lab of  Xi’an Jiaotong
> University(one of the top universities in China). At first it was used  to
> analyze botnet malwares captured by  honeynet, then we decided to release a
> web version, in order to supply a malware analysis service to people who may
> need it, and to collect more  malware samples for research.
> We may do “not good enough”, but we won’t do “bad”.*
> 
> Best regards,
> Shane Zhao

Great service.. or not:

HTTP 500
Apache Tomcat/7.0.11

java.lang.StringIndexOutOfBoundsException: String index out of range: -1
    java.lang.String.substring(String.java:1943)
    java.lang.String.substring(String.java:1916)
    upload.UploadServlet.doGet(UploadServlet.java:133)
    upload.UploadServlet.doPost(UploadServlet.java:91)
    javax.servlet.http.HttpServlet.service(HttpServlet.java:641)
    javax.servlet.http.HttpServlet.service(HttpServlet.java:722)

Best regards,
Henri

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/