Full Disclosure mailing list archives
Best behavior to report the holes that i found in NSAS.GOV WEBSITE
From: "Lorenzo Hernandez Garcia-Hierro" <lorenzohgh () nsrg-security com>
Date: Wed, 15 Oct 2003 21:21:40 +0200
Hi friends, I want to make question: what's the best behavior to contact nasa.gov websites masters and report the holes ? This is due to my last mails about the holes i discovered. ( XSS and SQL Injections ) And it is not a honeypot of XSS ;-) Best regards and please answer this question, ------------------------------- 0x00->Lorenzo Hernandez Garcia-Hierro 0x01->/* not csh but sh */ 0x02->$ PATH=pretending!/usr/ucb/which sense 0x03-> no sense in pretending! __________________________________ PGP: Keyfingerprint 4ACC D892 05F9 74F1 F453 7D62 6B4E B53E 9180 5F5B ID: 0x91805F5B ********************************** No Secure Root Group Security Research Team http://www.nsrg-security.com ______________________ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Best behavior to report the holes that i found in NSAS.GOV WEBSITE Lorenzo Hernandez Garcia-Hierro (Oct 15)