Full Disclosure mailing list archives

Re: Phun! Search


From: <0x80 () hush ai>
Date: Thu, 23 Mar 2006 23:07:11 -0800

On could hope that the two of you will get cancer and die and soon.

On Thu, 23 Mar 2006 21:56:13 -0800 Stan Bubrouski 
<stan.bubrouski () gmail com> wrote:
How come when people make comments off-list you re-add FD to the
replies?  You are cancer.

On 3/23/06, n3td3v <n3td3v () gmail com> wrote:
I have exploit code for this issue, which the list won't be 
getting hold of.
The disclosure was to show that I can ask the slurp robot to 
cache an
account on the public index, so I can retrieve account 
information. I ask
the code to cache a copy of 'x user', when 'x' is at critical 
information
page to obtain access to the yahoo users account. Of course with 

such a good
0-day, I use it seldom and only on specific targets like yahoo 
users with
'paid' services and or Yahoo employees.



On 3/22/06, Stan Bubrouski <stan.bubrouski () gmail com> wrote:
How old are you?  Seriously.  I don't know whether you realize 
just
how completely stupid you come off as to even people new in the
security field.  You are a joke.  Quit filling this list with 
crap.
BTW did you even check to see if you Yahoo! will let you view 
OTHER
people's account stuff?  Otherwise it seems pretty useless.

-sb



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: