Full Disclosure mailing list archives

Re: InlineEgg library release


From: ned <nd () felinemenace org>
Date: Thu, 4 Sep 2003 23:22:02 -0700 (PDT)

i find this release funny, not because it isn't a really nice piece of 
code, but because of the circumstances surrounding it.
check this out:
http://www.blackhat.com/html/bh-federal-03/bh-federal-03-speakers.html#David%20Aitel
dave aitel will give a talk on his software MOSDEF, which as i understand 
it is a python c compiler with some other pretty neet features.
so what?
immunitysec (which dave aitel started) has a product CANVAS 
(www.immunitysec.com/CANVAS) which is a 
python exploit suite for testing networks. MOSDEF will be a part of CANVAS 
when completed, and will also be GPL'd so that everyone else can use it.
on the other hand we have CORE, with their product IMPACT (everyone loves 
the big caps names dont they?) which again, is a python exploit toolkit 
thing aswell. however, dave aitel has been talking about MOSDEF for months 
now, and all of a sudden a copy of inlineegg pop's up which offers the 
same functionability as MOSDEF (i spose).

why would CORE do this? are IMPACT sales down (ie, symatec hasn't renewed 
their licenses) or do they feel threated by the publicity MOSDEF & CANVAS 
will be receiving at blackhat?

-- 
http://felinemenace.org/~nd

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: