Re: [Full-disclosure] i've found an exploit, but i want to make it do something before i report it

2006-07-08 Thread whistles
On 7/8/06, ima cow <[EMAIL PROTECTED]> wrote: n3td3v wrote: >Its a Yahoo Mezzenger vulnerability, we sold to him about three months ago. >It must be the most whored vulnerability in the script kid circuit, none of >them can work out what to do with it. i'm not sure if your message was meant to

Re: [Full-disclosure] i've found an exploit, but i want to make it do something before i report it

2006-07-08 Thread evilrabbi
Here are some pretty generic things.. Bind shell, connect back shell. have it download a file an execute it. Those are just a few ideas...On 7/7/06, ima cow <[EMAIL PROTECTED]> wrote: i understand that this is "full disclosure", but before i actually spill the beans on the exact nature of the expl

Re: [Full-disclosure] CFP: DA Workshop - ISOI

2006-07-08 Thread Dude VanWinkle
On 7/8/06, Gadi Evron <[EMAIL PROTECTED]> wrote: On Sat, 8 Jul 2006, J.A. Terranson wrote: > > On Sat, 8 Jul 2006, Gadi Evron wrote: > And, for the second time, in the second forum (but with no answer as yet), > I ask "Why is this closed to these communities?". These are the very > communities m

[Full-disclosure] i've found an exploit, but i want to make it do something before i report it

2006-07-08 Thread ima cow
n3td3v wrote:>Its a Yahoo Mezzenger vulnerability, we sold to him about three months ago.>It must be the most whored vulnerability in the script kid circuit, none of>them can work out what to do with it.i'm not sure if your message was meant to draw out information, or just a straight-out lie to ma

Re: [Full-disclosure] CFP: DA Workshop - ISOI

2006-07-08 Thread Gadi Evron
On Sat, 8 Jul 2006, J.A. Terranson wrote: > > On Sat, 8 Jul 2006, Gadi Evron wrote: > And, for the second time, in the second forum (but with no answer as yet), > I ask "Why is this closed to these communities?". These are the very > communities most closely involved with the very topics being pr

Re: [Full-disclosure] Re: MS Word Unchecked Boundary ConditionVulnerability - POC

2006-07-08 Thread naveed
:) :) a copy paste of a routine could easily be converted to fwrite(ptr,1,sizeof(p1),fptr) or so but the things work in either way. On 7/8/06, Dave No, not that one Korn <[EMAIL PROTECTED]> wrote: "naveed" <[EMAIL PROTECTED]> wrote in message > void dummy(unsigned char* ptr,int sz) > { > fo

Re: [Full-disclosure] i've found an exploit, but i want to make it do something before i report it

2006-07-08 Thread n3td3v
On 7/7/06, ima cow <[EMAIL PROTECTED]> wrote: i understand that this is "full disclosure", but before i actually spill the beans on the exact nature of the exploit i've found, i'd like to make it actually do something.for now, know that it affects a popular plugin for a popular messaging progr

Re: [Full-disclosure] CFP: DA Workshop - ISOI

2006-07-08 Thread J.A. Terranson
On Sat, 8 Jul 2006, Gadi Evron wrote: > Attendance: > --- > The workshop is organized by the DA and MWP communities with the much > appreciated help of Cisco Systems, Inc., and is closed to members of the > following communities: > DA, MWP (and sister communities such as routesec), OARC,

[Full-disclosure] CFP: DA Workshop - ISOI

2006-07-08 Thread Gadi Evron
This is a call for papers for a DA Workshop (ISOTF/TISF DA). Its name is: Internet Security Operations and Intelligence Workshop or ISOI for short. DA stands for Drone Armies (botnets), which is the main subject of this workshop. I apologize for those who get this message multiple times. Introdu

[Full-disclosure] Re: MS Word Unchecked Boundary ConditionVulnerability - POC

2006-07-08 Thread Dave \"No, not that one\" Korn
"naveed" <[EMAIL PROTECTED]> wrote in message > void dummy(unsigned char* ptr,int sz) > { > for(int i=0;i fwrite(&ptr[i],1,1,fptr); > } :) Bit odd way of doing things! cheers, DaveK -- Can't think of a witty .sigline today