Full Disclosure mailing list archives

Re: file inclusion (les visiteurs)


From: "Lorenzo Hernandez Garcia-Hierro" <lorenzohgh () nsrg-security com>
Date: Tue, 2 Dec 2003 14:24:47 +0100

Hi Chris,
Good reply , that's it .
I think too that advice people of security issues is not exploiting them in
thw wild with 0day exploits.
But , check the shellcodes of the exploits , i think that kiddies don't look
at them ;-)

Best regards,
-------------------------------
0x00->Lorenzo Hernandez Garcia-Hierro
0x01->\x74\x72\x75\x6c\x75\x78
0x02->The truth is out there,
0x03-> outside your mind .
__________________________________
PGP: Keyfingerprint
4ACC D892 05F9 74F1 F453  7D62 6B4E B53E 9180 5F5B
ID: 0x91805F5B
**********************************
\x6e\x73\x72\x67
\x73\x65\x63\x75\x72\x69\x74\x79
\x72\x65\x73\x65\x61\x72\x63\x68
http://www.nsrg-security.com
______________________
----- Original Message ----- 
From: "Christian Horchert" <chorchert () veedev de>
To: "Full-Disclosure" <full-disclosure () lists netsys com>
Cc: "gazpa" <gazpa () euskalnet net>
Sent: Tuesday, December 02, 2003 3:21 AM
Subject: Re: [Full-disclosure] file inclusion (les visiteurs)


Hi gazpa!

Am 02.12.2003 um 01:09 schrieb gazpa:
Don't blame people who is only intending to advise people about
a bug that is being exploited.

I cannot really follow you here: Scanning websites, running exploit
code, injections etc. on foreign servers without permission and blame
the admins by making it public to guerradigital, delta5 and zone-h
isn't exactly what I would call "intending to advice people", sorry.

But maybe I'm wrong ...

   Christian

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: