full-disclosure - Is there anything wrong with Skype?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 27 Nov 2011 04:58:07 +0530
From: ebhakt <ebhakt@...il.com>
To: security-basics@...urityfocus.com, bugtraq@...urityfocus.com, 
	dailydave@...ts.immunityinc.com, Dailydave@...ts.immunitysec.com, 
	yws-search-general@...oogroups.com, nmap-hackers@...ecure.org, 
	full-disclosure@...ts.grok.org.uk, webappsec@...urityfocus.com, 
	crypto@...urityfocus.com, secureshell@...urityfocus.com, 
	focus-ids@...urityfocus.com, focus-virus@...urityfocus.com, 
	forensics@...urityfocus.com
Subject: Is there anything wrong with Skype?

I HAVE BEEN USING SKYPE FOR THE FIRST TIME

and its been a while now

I have tried that on two separate windows desktops

On windows 7 and on windows server 2008 R2

Clean installation

Freshly downloaded skype from internet and I think there is something wrong

Please check the images below:

*Skype-Hack.png:*

[image: skype-hack]<http://lh5.ggpht.com/-defQ956fj2o/TtF1RgPV_DI/AAAAAAAAALU/iTQtJEfDkbU/s1600-h/skype-hack%25255B3%25255D.png>



*Skype-Fresh-Installation.png:*

[image: skype-fresh-installation]<http://lh3.ggpht.com/-CNKw0x3p3CY/TtF1WrfbB7I/AAAAAAAAALk/Rcz12fjtwEE/s1600-h/skype-fresh-installation%25255B3%25255D.png>

{Personally I never trust using *netstat* or Resource Monitor , I know they
can be spoofed

But let me tell you in depth whats happening here

When ever I see skype running I see strande connections to unknown ip’s and
Domains

Even when I am not on call / chat



I think skype is a free P2P software ?

right ?

but does P2P allows skype to register bots with Temporary domain names?

how is this happening

because the only other option is that the skype software is cracked

even when I downloaded a fresh installation of skype on a newly build
windows machine the connection objects are the same and they are the same
to the point of writing !!



Please anyone enlighten me with your comments!!
I have written down a post there on the internet :
http://hackers.writeup.crackzhack.net/2011/11/is-there-anything-wrong-with-skype.html

Please check out!!

-- 
Bhaskar Tiwari
Freelancer Developer and Active Directory Specialist
Previously with Directory Services, Microsoft
Cell Phone: Home Town : +91 9808437438 (preferred) , Delhi: +91 9971697075
____________________________________________________________
 All we have to decide is what to do with the time that has been given to us

Personal:
===================
http://ebhakt.info/
===================

Professional:
===================
http://www.ebhakt.com/
http://fytclub.net/
http://crackzhack.net/
===================

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/