full-disclosure - Re: Lulzsec as irc warrior 2.0?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4DFE6F44.4090003@gmail.com>
Date: Sun, 19 Jun 2011 23:51:00 +0200
From: Michele Orru <antisnatchor@...il.com>
To: "Fabio Pietrosanti (naif)" <lists@...osecurity.ch>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Lulzsec as irc warrior 2.0?

Ciao Fabio ;-)

I understand your point of view, and for sure they are using 80% of the time
SQLi as the main attack vector to deface website/stealing data/whatever, 
but not always.
I'm quite sure they used some 0-days when they completely compromised 
some of their
targets that where not running webservers at all.

Some of them would certainly be script-kiddies that uses sqlmap, while 
being lucky enough
to find lame error-based SQLi, others for sure are skilled.

It's also not only a game when you steal hundred of thousand of data: 
you can always
resell it to some agencies/black-market that are hungry of that, as you 
do with CCs.

Ciao
Michele Orru'
/antisnatchor
> ------------------------------------------------------------------------
>
> 	Fabio Pietrosanti (naif) <mailto:lists@...osecurity.ch>
> June 19, 2011 3:12 PM
>
>
> Nothing personal, that's exactly what i wrote previously:
>>> If they're IRC warriors within some time they will just disappear.
>>> Just think, the leaders before or later will start finding the
>>> game boring, will get a girlfriend, will start going out with friends
>>> rather than being twitter/chat addicted.
>
> I also experienced hacking and internet addiction in past, i mean when
> you're young, you want to feel adrenaline pumping up and get it by doing
> 14 hours hacking per day!
>
> But before or later that game will became or too dangerous or too boring
> and you'll probably just park the boat.
>
> In the meantime, have fun!
> But always remember that every game has an end and it's up to you to
> decide how your game will end!
>
> Cheers
>
> -naif
>
> On 6/19/11 1:40 PM, lulzb0at@...hmail.com wrote:
>> ugay its all for lulz
>>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> ------------------------------------------------------------------------
>
> 	lulzb0at@...hmail.com <mailto:lulzb0at@...hmail.com>
> June 19, 2011 1:40 PM
>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> ugay its all for lulz
>
> On Sun, 19 Jun 2011 10:33:47 +0000 "Fabio Pietrosanti (naif)"
> -----BEGIN PGP SIGNATURE-----
> Charset: UTF8
> Note: This signature can be verified at https://www.hushtools.com/verify
> Version: Hush 3.0
>
> wsBcBAEBAgAGBQJN/eA4AAoJEE4sWZ2chp6RnZMH/jiMa7oqnSNWYItjyFylut3IA2+u
> o+L8LwTkxulyCbydn6Vn7B8K7ra5xqN/NNACsDlCmsHnpZYMJQiHKAt0riyxYMHnsA/f
> IfBvXdF0CKp5RzJH71oa5R8yY08NvvrU0MykNrv6oDgXR4rDTm1O+wvTlT+B2ZS8Achc
> VpDeNLJ8lGjJ5OmZVzSo5qw9n01jZExB2ciXYSBnbxXefjgLfxBYfueLIphU4YQE4OCU
> wQi0xwVPNB+lWbCi5bID1zgFZ5rSciif/K/76q/AVO/v0VATNAEMCsIeiVgyNcr4PgkX
> CNv+gv122pjrgV2yjtboL8Lu15J+dhWvUFZ4JQ6GRWM=
> =ZPzX
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

Content of type "text/html" skipped

Download attachment "compose-unknown-contact.jpg" of type "image/jpeg" (1421 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/