Full Disclosure mailing list archives

Re: Brute force attack - need your advice


From: "Peter Dawson" <slash.pd () gmail com>
Date: Mon, 11 Feb 2008 17:19:10 -0500

Ok yeah I hear u on the jump points vectors. Makes sense !

On Feb 11, 2008 5:10 PM, <Valdis.Kletnieks () vt edu> wrote:

On Mon, 11 Feb 2008 16:57:40 EST, Peter Dawson said:

WTF is worth the time/$$$  to intrude into abilashpraveen.com eh ??

If you're a black hat, it's often worth a *LOT* to see your actual
high-value
target say:

"WTF is abilashpraveen.com and how come they just hacked us?"

Remember - an uninteresting host has actual value to a black hat -
everything
from a throw-away jump point for launching an attack, to sending spam, to
hosting the websites the spam points back to, and other creative uses.
 And
the *more* uninteresting it is, the *more* likely that it's running on
autopilot
and the hacking won't be noticed....

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: