Posted to Full-Disclosure list, copied to LegionSec



Full-Disclosure - We believe in it

On a sidenote, this post got dugg !

Cheers :)

I never expected them to reply but they did ! What a surprise ;)




So here's my reply... to them.

Full-Disclosure - We believe in it

Cheers :)

Update to my previous post :)

Possibility to fetch files such as /etc/passwd
http://www.flconferences.com/download.php?file=/legionsec_1/archive/LegionSec'06___Vicente.pdf => Example

Click on the above link to see "Function.fopen"

When it lists out "fopen(/hsphere/local/home/flconf/flconferences.com/user_conference/legionsec_1/archive/LegionSec\'06___Vicente.pdf"

What amount of time will it take for an attacker, to manipulate this function and retrieve critical files as /etc/passwd or /etc/shadow

With this kind of information in hand, the extent of damage that can be done is "maximum"

Documentation for Function.fopen from PHP Website.

Full-Disclosure - We believe in it.

Cheers :)

Advisory by Kishfellow

Site: www.flconferences.com (LegionSec)
Multiple XSS vulnerabilities
Risk: Medium-High




Picture says it all ...

Full-Disclosure - We believe in it.

/Quit

Whoa ! ... I just can't believe that I got myself a BOSE headfone [considered to be really the best money can buy, for a headfone or any sound equipment]

You have the "Right to laugh ;)" ... >> See this post <<
I don't believe that he is such a geek, he uses V=IR to describe parallel dating ;))
~ Hats off to you bro ~

Cheers :)

The new HD-DVD [High definition DVD] already cracked ?

Rumors arose early on the new year that a hacker named muslix64 has compromised the encryption called AACS [both blu-ray & hd-dvd use the same encryption]

Read the news brief from three sources :)

NewYork Times - >> Read more <<
ComputerWorld - >> Read more <<
ZDnet - >> Read more <<

On a side note, happy new year to all of you :)

I heard from a friend of mine, that this year starts and ends with a monday, it has the most number of saturdays & sundays... and no public holidays fall on sunday. Hence, this is a new year with least working days according to the anonymous friend who informed me :)

/Quit

Today as usual I booted in windows 2000 and inspected this "strange" piece of malware [a trojan].

I must really compliment the author of this malware, since he does a good job by deleting important files like mp3,mpeg,pr0n and other illegal stuff that people download off p2p software ;))

Credits fly to you, whoever you are !!

Read more here ...

/Quit

Santa gave me a lot of gifts for christmas of which two were very good,
so Iam sharing with you people ;))

Trust me, he gave me an oppurtunity to see the power of RainbowTables [ >>Here << ]

Ofcourse, he gave me toys to play too ... Check this out ...

Cheers :)

I was doing a bit of wifi-hacking recently... playing with toys ;-)

Recommended reading => Blackhat Slides [Laurent Butti and Franck Veysett]

/me (Quit :)

I've not been with my computer for the last few days ... went out shopping, spotting and doing stuff that I don't do regularly ;)

The surprising thing is I couldn't withstand touching my laptop everyday for emails. . .

I just signed off the internet 8 days ago, and here Iam, back ... Back with a bang ?! Probably.

I just re-energized myself and feels good to be ranting here :)

/Pull D' Plug

Muscles & Fitness - Training system library is worth every penny you invest in it ...

I just bought the 5 DVDs for 40 US Dollars, I think it's an incredible source for body building.

I'll write more about this dvd shortly ...

On a side note, weight that we gain is reversible ... Lots of things are "reversible" in life, and reversing comes naturally ;)

GPS is having it's gcc toolkit ready. I have been examining the board for a while now, and coding the processor module for nintendo with the opcodes.

If someone needs the opcodes for v831 processor, let me know through email.

Cheers :)

http://www.videojug.com/film/how-to-fold-a-t-shirt-in-2-seconds

Amazing piece of "work" ... I saw the comments section, and many people complaining about the video's speed. Use the pause button around 10-12 times in the 2 seconds when they show the folding ;)

100% working, try it

Couple of neat pen-tests were done in the last month. This month I have a mighty big cake in my hand with over a thousand desktops and a few servers, from an organization. ;)

Now about the new reverse-engg project at hand, the GPS unit. It runs on Nintendo processor.

Manufacturer : NEC Corporation
Processor Model : v831
Addn Info: 32 bit Microprocessor



Iam still working on the details of this circuit's datasheet, as of now Iam building a GCC kit for this thingy.

/Ale vide

Today , thoughts that traverse through my mind almost daily has come to a stop.
Seems there is something I failed to realize ... Yes, I have realized "an important" thing
about life. I slept the whole day and Iam blogging now. The SL33P factor has been missing
for the past few years of my life ... which I think has bothered me enough. So Iam planning
to compensate for my misdoings now ;) ...

/part

News... warezov variants are making a lot of headlines in AV blogs.

Today being Diwali, here is a traditional way of saying happy diwali to all my friends here.

जलते जगमगाते रहे, हम आपको आप हमको याद आते रहे जब तक जिन्दगी है, दुआ है हमारी "आप चाँद की तरह जगमगाते रहे" दीपों के पर्व दीपावली की हार्दीक शुभकामनाएँ !!!

Ofcourse, I've got my English version too ... ;))

I wish you all a very Happy Diwali and an even prosperous New Year

Then I've got new toys coming my way for a fresh reverse-engineering challenge.

GPS - Global Positioning system , this time is my target. Seems there is some kinda DVD unit that won't play regular DVDs. After the car ecu and tv hacks, I've started to get a firm grasp on embedded stuff and hardware hacking.

I think this project will go well ;)

I will keep you all posted.

Cheers :D

http://www.gizmodo.com/gadgets/gadgets/mcdonalds-im-lovin-malware-207639.php

Story from Gizmodo on McDonald's malware ;))

Iam loving it !!

/Quit

This picture was done by Antony Zboralski (for his talk in HackInTheBox 2006.

The people at HITBSec2006 were kind enough to provide Live webcast ;)

I heard the second day's keynote and some talks which interested me in the 2 day conference.

VML Exploit from milw0rm receives a lot of attention as vendor patch hasn't come up yet

The unofficial patch from ZERT is the temporary solution, and I think that team consists of the most elite and respected researchers in security industry.

That's all I got in stock now, actually I have been staying away from my box for a while now ... Since I thought life has more to give / take except this machine ;)

Update: Official patch released out of the microsoft patch cycle, available at update website.

Cheers

Pshisssssss ... the hell out !
Long time , no blog ... bah, I have been lazy, tht's one reason
Second reason is I haven't done much except reporting and getting keen on phishing.
Here is the report from APWG (Anti-Phishing Working group) for June06.

Oh, we can't forget Patch Tuesday's advance bulletin
Here is an interesting thread a new set of API's for Java
That's it for now

/quit :)

Hierarchy of Piracy

The above diagram shows how software is pirated schematically ...


Cheers :)

Things I can think of now ...
Microsoft Bulletin (came out 4 days before ... already ppl will be diff'ing patches)
Post on browser bugs from hdm
Then the Anti-Malware Team at Microsoft releasing a whitepaper
Picture of the Anti-Malware Team

Ahh... I almost forgot Italy's World Cup victory over France and about the
"disgusting" words spoken by Materazzi. Zidane's head butt had a lot of press
attention. According to French Coach Raymond Domenech "To me
Materazzi is the man.... He not only uttered those words and sent
our best player packing, but also scored an extra goal and helped
Italy win the world cup"

Ye, we can understand why he said he scored the "extra-goal".
At the near end of the match in the second period of extra-time the french
players were really pushing it hard and almost scored a goal ...
suddenly zidane's head butt and the rest is history ... it went to
penalties and the italians won on penalties. For me this world cup was
less convincing than the 2002 world cup for the sheer fact of the dives
(all hail van bommel)/unfair play (do u remember a banner called "My play is fair play ??")
/inconsistent referees(Portugal v Holland) and ofcourse the materazzi-zidane issue.

I bought a new laptop with very nice specs. That's some good news :)

/quit for now