Vulnerability Development mailing list archives

(no subject)


From: john () TMSP SCREAMING NET (John Flux)
Date: Tue, 7 Mar 2000 19:28:30 +0000


-----BEGIN PGP SIGNED MESSAGE-----

On Mon, 06 Mar 2000, you wrote:
Greetings all,
...
What it does is when you install a program that has it's app contained
within it (cute ftp, Go!zilla, BuddyPhone, and 300 others have the app in
their software), it surriptisously installs the app, and then it sends info
back to the software creator. Not sure what it sends, just know it does send
info. And that is the problem, as I see it; installed without my knowledge,
and then sending out info with out my knowledge.
Load linux.  Run VMWARE.  Run program in vwmare.  In vmware, output all the
packets to a dummy device or a dead end, or a file.  Use tcpdump to analyse
the packets.  Use ippacket to recreate the packet, and send several thousand
of those packets a minute down your ppp =)
   --
Without ice cream life and fame are meaningless.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBOMVY9Bz17E0LRU/dAQHq1wP9FuwtVz+WXulaUlLiWN2OumWmUjebWSA0
EsSTP8q3CG8LMIOR8gFJrRormZshoBopjqzfL7eJ0n05uvqbmWFPqYrUMHIKw02C
LUWKxNmKSnp5f8iFR5Km+m83X1gBhkM0esxSd16Bx6oPjbodgRGr6jf5o6VF+0gG
kfzUtTA0r3k=
=hNLf
-----END PGP SIGNATURE-----


Current thread: