Full Disclosure mailing list archives
Re: Flash that simulates virus scan
From: reepex <reepex () gmail com>
Date: Wed, 31 Oct 2007 22:40:22 -0500
dont you listen to pdp ever? the government uses xss and bruteforces remote desktop logins http://seclists.org/fulldisclosure/2007/Oct/0417.html pdp: "military grade exploits? :) dude, I am sorry man.. but you are living in some kind of a dream world. get real, most of the military hacks are as simple as bruteforcing the login prompt.. or trying something as simple as XSS." ------ pdp is an hero and a computer security expert and based on his fans from the list he is the greatest researched since lcamtuf. his word = gold On 11/1/07, jf <jf () danglingpointers net> wrote:
must be on one of the .gov red teams ;] On Wed, 31 Oct 2007, reepex wrote:Date: Wed, 31 Oct 2007 16:56:20 -0500 From: reepex <reepex () gmail com> To: Joshua Tagnore <joshua.tagnore () gmail com>, full-disclosure () lists grok org uk Subject: Re: [Full-disclosure] Flash that simulates virus scan resulting to se in a pen test cuz you cant break any of the actual machines? lulz On 10/31/07, Joshua Tagnore <joshua.tagnore () gmail com> wrote:List, Some time ago I remember that someone posted a PoC of a small site that had a really nice looking flash animation that "performed a virus scan" and after the "virus scan" was finished, the user was prompted for a "Download virus fix?" question. After that, of course, a file is sent to the user and he got infected with some malware. Right now I'm performing a penetration test, and I would like to target some of the users of the corporate LAN, so I think this approach is the best in order to penetrate to the LAN. I searched google but failed to find the URL, could someone send it to me ? Thanks! Cheers, -- Joshua Tagnore _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Flash that simulates virus scan Joshua Tagnore (Oct 31)
- Re: Flash that simulates virus scan reepex (Oct 31)
- Re: Flash that simulates virus scan Valdis . Kletnieks (Oct 31)
- Re: Flash that simulates virus scan Michael Neal Vasquez (Oct 31)
- Re: Flash that simulates virus scan jf (Oct 31)
- Re: Flash that simulates virus scan reepex (Oct 31)
- Re: Flash that simulates virus scan scott (Oct 31)
- Re: Flash that simulates virus scan Valdis . Kletnieks (Oct 31)
- Re: Flash that simulates virus scan reepex (Oct 31)
- Re: Flash that simulates virus scan Dude VanWinkle (Oct 31)
- Re: Flash that simulates virus scan Nick FitzGerald (Oct 31)