Comments for Paralliverse http://log0.wordpress.com Tue, 01 Sep 2009 10:15:25 +0000 http://wordpress.com/ hourly 1 Comment on URL Bruteforce Discovery by log0 http://log0.wordpress.com/2008/09/02/url-bruteforce-discovery/#comment-274 log0 Tue, 01 Sep 2009 10:15:25 +0000 http://log0.wordpress.com/?p=28#comment-274 Hi Bd boy, Thanks for reading. This blog is past and I now write at http://onhacks.org , webappsec is kind of a little drifted interest. Answering your question, yes there were, in fact you get a lot of results by automating. You can find this implemented in tools like W3AF. =) Hi Bd boy,

Thanks for reading. This blog is past and I now write at http://onhacks.org , webappsec is kind of a little drifted interest.

Answering your question, yes there were, in fact you get a lot of results by automating. You can find this implemented in tools like W3AF. =)

]]> Comment on URL Bruteforce Discovery by Bd boy http://log0.wordpress.com/2008/09/02/url-bruteforce-discovery/#comment-273 Bd boy Tue, 01 Sep 2009 06:58:43 +0000 http://log0.wordpress.com/?p=28#comment-273 Hey , nice post . I didnt thought off that way ... But i would like to ask you that did u had any success till now in brute forcing secret files ?... Hey , nice post . I didnt thought off that way … But i would like to ask you that did u had any success till now in brute forcing secret files ?…

]]> Comment on URL Redirection Attack With Examples by Josh http://log0.wordpress.com/2008/06/23/url-redirection-attack-with-examples/#comment-268 Josh Sun, 11 Jan 2009 15:06:27 +0000 http://log0.wordpress.com/?p=19#comment-268 First of all congratulation for such a great site. I learned a lot reading here today. I will make sure i visit this site more often so I can learn more. <a href="http://yiyd.com" rel="nofollow">Make your long Urls shorter - Free Url redirection - Hide your affilate URLS</a> First of all congratulation for such a great site. I learned a lot reading here today. I will make sure i visit this site more often so I can learn more.

Make your long Urls shorter – Free Url redirection – Hide your affilate URLS

]]> Comment on First look on Cookies by log0 http://log0.wordpress.com/2008/12/08/first-look-on-cookies/#comment-266 log0 Tue, 09 Dec 2008 08:01:26 +0000 http://log0.wordpress.com/?p=160#comment-266 >>Kuza55 Thanks for the articles, really great stuffs. I will come and hook you guys up sometime. =) I'm looking forward to the posts, you can write really well, and I guess I have to digest a lot of articles again. hah. >>Kuza55

Thanks for the articles, really great stuffs. I will come and hook you guys up sometime. =)

I’m looking forward to the posts, you can write really well, and I guess I have to digest a lot of articles again. hah.

]]> Comment on China is a Good Place to Pen Test by log0 http://log0.wordpress.com/2008/09/29/pen-test-china/#comment-265 log0 Tue, 09 Dec 2008 07:43:27 +0000 http://log0.wordpress.com/?p=61#comment-265 >>Chris A simple research turns out some sites : http://www.nohack.cn/bugs/ http://www.sitedir.com.cn/index.htm ( This one is really like milworm ) http://www.xfocus.net/vuls/ ( This is very well known, Kuza55 went to gave a presentation there this year in Beijing, just the 22nd Nov last month .) >>Chris

A simple research turns out some sites :

http://www.nohack.cn/bugs/
http://www.sitedir.com.cn/index.htm ( This one is really like milworm )
http://www.xfocus.net/vuls/ ( This is very well known, Kuza55 went to gave a presentation there this year in Beijing, just the 22nd Nov last month .)

]]> Comment on China is a Good Place to Pen Test by log0 http://log0.wordpress.com/2008/09/29/pen-test-china/#comment-264 log0 Tue, 09 Dec 2008 07:38:59 +0000 http://log0.wordpress.com/?p=61#comment-264 >>Chris Yea. What are some precautions do you think we should take to disclose responsibly our findings? >>Chris

Yea. What are some precautions do you think we should take to disclose responsibly our findings?

]]> Comment on China is a Good Place to Pen Test by log0 http://log0.wordpress.com/2008/09/29/pen-test-china/#comment-263 log0 Tue, 09 Dec 2008 07:38:21 +0000 http://log0.wordpress.com/?p=61#comment-263 >>Chris You brought up a good point. I should find the local ones. However I just discovered one sooooooooooooooooooooooooooooooooo alike of milworm, you know... *sigh* it just hurts to see so many duplicates ( triplicates! in fact ) around. >>Chris

You brought up a good point. I should find the local ones. However I just discovered one sooooooooooooooooooooooooooooooooo alike of milworm, you know… *sigh* it just hurts to see so many duplicates ( triplicates! in fact ) around.

]]> Comment on First look on Cookies by kuza55 http://log0.wordpress.com/2008/12/08/first-look-on-cookies/#comment-262 kuza55 Tue, 09 Dec 2008 02:43:31 +0000 http://log0.wordpress.com/?p=160#comment-262 It could be because I was setting cookies with javaScript, rather than Set-Cookie headers. I just ran a test using some dodgy javascript: javascript:for (i=0;i<100;i++) {document.cookie = i+"=123";} alert(document.cookie); And it still seems to be 50 (cookies 50-99 remain) Sure, hit me up some time, me and some other smart people are usually on irc.irchighway.net #slackers, or just email me or whatever :) I'll post my slides from xcon soon as well... It could be because I was setting cookies with javaScript, rather than Set-Cookie headers.

I just ran a test using some dodgy javascript:
javascript:for (i=0;i<100;i++) {document.cookie = i+”=123″;} alert(document.cookie);
And it still seems to be 50 (cookies 50-99 remain)

Sure, hit me up some time, me and some other smart people are usually on irc.irchighway.net #slackers, or just email me or whatever :) I’ll post my slides from xcon soon as well…

]]> Comment on How to debug a Stack Overflow for beginners? by log0 http://log0.wordpress.com/2008/12/05/how-to-debug-a-stack-overflow-for-beginners/#comment-261 log0 Tue, 09 Dec 2008 01:58:39 +0000 http://log0.wordpress.com/?p=96#comment-261 >>Chris Yep. I know of the gflags. That was something I didn't use though, but I'll be testing another. Those are good things along with a lot of tools Microsoft develoeped. That is a DoS, by flooding the program with arbitrary client requests. Unfortunately, I haven't locate any user-input buffers ( well, I have the source code =) ) >>Chris

Yep. I know of the gflags. That was something I didn’t use though, but I’ll be testing another. Those are good things along with a lot of tools Microsoft develoeped.

That is a DoS, by flooding the program with arbitrary client requests. Unfortunately, I haven’t locate any user-input buffers ( well, I have the source code =) )

]]> Comment on How to debug a Stack Overflow for beginners? by Chris Weber http://log0.wordpress.com/2008/12/05/how-to-debug-a-stack-overflow-for-beginners/#comment-260 Chris Weber Tue, 09 Dec 2008 00:17:30 +0000 http://log0.wordpress.com/?p=96#comment-260 It's important to enable full pageheap checking with gflags too, so you can catch heap corruption issues. If you found a buffer overrun here, Windbg would have reported STATUS_STACK_BUFFER_OVERRUN too, but with the STACK_OVERRUN it looks like you have a DoS instead - or did you find a better exploit? It’s important to enable full pageheap checking with gflags too, so you can catch heap corruption issues. If you found a buffer overrun here, Windbg would have reported STATUS_STACK_BUFFER_OVERRUN too, but with the STACK_OVERRUN it looks like you have a DoS instead – or did you find a better exploit?

]]>