Full Disclosure mailing list archives
Re: Anonymizing RFI Attacks Through Google
From: "Dave \"No, not that one\" Korn" <davek_throwaway () hotmail com>
Date: Thu, 23 Nov 2006 14:15:48 -0000
Gadi Evron wrote:
Noam Rathaus on using Google to anonymize attacks on websites: http://blogs.securiteam.com/index.php/archives/746
By placing a URL on any web page, Google will find it, visit it and then index it. With this mechanism, it is possible to anonymize attacks on third party web sites through Google by the use of its crawler.
This technique was described by Michal Zalewski in Phrack years ago. http://www.phrack.org/archives/57/p57-0x13 cheers, DaveK -- Can't think of a witty .sigline today.... _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Anonymizing RFI Attacks Through Google Gadi Evron (Nov 24)
- Re: Anonymizing RFI Attacks Through Google Dave "No, not that one" Korn (Nov 23)
- Re: Anonymizing RFI Attacks Through Google endrazine (Nov 24)
- Re: Anonymizing RFI Attacks Through Google Dude VanWinkle (Nov 24)
- Re: Anonymizing RFI Attacks Through Google Vincent Archer (Nov 27)
- Re: Anonymizing RFI Attacks Through Google Dude VanWinkle (Nov 24)