Full Disclosure mailing list archives
Re: What's going on about Pangolin
From: "zwell.nosec" <zwell.nosec () gmail com>
Date: Fri, 28 Mar 2008 10:17:50 +0100
I can not agree with you more ;) Now, I’m so repentant of this………………..aha _____ From: full-disclosure-bounces () lists grok org uk [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of cocoruder. Sent: Friday, March 28, 2008 10:09 AM To: zwell () sohu com; full-disclosure () lists grok org uk Subject: Re: [Full-disclosure] What's going on about Pangolin Hey man, I think if you do not use the chinese email address and do not let anyone know you are chinese, there will be not so many worries, you know, chinese guy can became untrust more easily because they even do say "do not free the Tibet", what a strange thing, especially you are sharing an executable file. OH, chinese man became more evil today. welcome to my blog: http://ruder.cdut.net _____ Date: Thu, 27 Mar 2008 04:20:53 +0800 From: zwell () sohu com To: full-disclosure () lists grok org uk; webappsec () securityfocus com Subject: [Full-disclosure] What's going on about Pangolin I've just read the discussion from here, seriously, I don't know what's going on. I've coded it since 2005 and never release it until this year. And I really do not know why it be treated as a backdoor. If you think it is a backdoor, so please do a reverse engineering on it. You can capture the network packet, you can list all the strings in it, even you can hook APIs in it. Do anything you like to make sure whether it's backdoor or not. BTW, I packeted it through UPX to reduce the size. And some people focused on "http://www.nosec.org/web/index.txt", which is used in ORACLE injection mode when the target database is in intranet so we can use some store-procs to make the target to visit our website then we can receive the internet address that is mapped to outside. Anybody who is good at oracle injection should know this. Really, I wanna know why!!! < div class="w134"> _____ 2008Äêнˮ·±¶¼¼ÇÉ <http://doc.go.sohu.com/200802/5e1b674ab8183f3db8baba8ee4c6dd53.php> *ÓÃËѹ·Æ´ÒôдÓʼþ£¬ÌåÑé¸üÁ÷³©µÄÖÐÎÄÊäÈë <http://goto.mail.sohu.com/goto.php3?code=mailadt-ta> >> _____ 轻松把Hotmail下载到本地,试试 Windows Live Mail。 <http://get.live.com/wl/all> 立即尝试!
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- What's going on about Pangolin zwell (Mar 28)
- Re: What's going on about Pangolin xor_ (Mar 28)
- Re: What's going on about Pangolin poo (Mar 29)
- Re: What's going on about Pangolin cocoruder . (Mar 28)
- Re: What's going on about Pangolin zwell.nosec (Mar 28)
- Re: What's going on about Pangolin Andreas Selvicki (Mar 28)
- Re: What's going on about Pangolin josh (Mar 28)
- Re: What's going on about Pangolin Tremaine Lea (Mar 28)
- Fwd: What's going on about Pangolin Nemes (Mar 28)
- Re: Fwd: What's going on about Pangolin zwell.nosec (Mar 29)
- Re: Fwd: What's going on about Pangolin Tim Kunschke (Mar 29)
- Re: Fwd: What's going on about Pangolin josh (Mar 29)
- Re: What's going on about Pangolin josh (Mar 28)
- Re: Fwd: What's going on about Pangolin Tremaine Lea (Mar 29)
- Re: What's going on about Pangolin xor_ (Mar 28)