Welcome,
Guest
. Please
login
or
register
.
September 20, 2024, 07:28:28 AM
News:
tastyspleen.net has a new discord server:
http://discord.tastyspleen.net
Home
Forum
Help
TinyPortal
Search
Calendar
Login
Register
tastyspleen::quake 2 community
»
Forum
»
The Tech Junkie Boards
»
Tech Junkie Lounge
»
bad packets
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: bad packets (Read 1750 times)
reaper
Opulent Member
Posts: 2872
Nice night for a walk, eh? - Nice night for a walk
Rated:
bad packets
«
on:
April 26, 2008, 09:05:45 PM »
there were like 100,000 sites hacked from China recently using SQL injection, and it's sending user passwords to China.
I created a rule for the packet, and made the packet myself:
perl -e 'print "\x20\x20\x20\x20\x20\x00\x03\x00\x06\x00","\x01"x100;' | nc -nvvv x.x.x.x 2043
that's what a command and control packet looks like on their botnet system, now hopefully they don't change it
. but if they don't, people can now know their code needs to be fixed.
interesting stuff I think:
http://isc.sans.org/diary.html?storyid=4331&rss
people need to verify input by whitelising it, then we wouldn't have these problems.
edit:
btw that command opens a tcp connection with netcat, then data gets passed to it via the perl print function, which is just data that matches the botnet control system, shown as hex values. and netcat is awesome, you can do some really cool things with it, like get remote bash and cmd shells initiated from a system behind a firewall
«
Last Edit: April 26, 2008, 09:07:47 PM by reaper
»
Logged
VaeVictus "reaper is a lying sack of shit and ragequit then had, probably slugs, come alias and beat me, wasnt even the same person playing OBVIOUSLY, accuracies basicly doubled, and strategy
Print
Pages: [
1
]
Go Up
« previous
next »
tastyspleen::quake 2 community
»
Forum
»
The Tech Junkie Boards
»
Tech Junkie Lounge
»
bad packets
El Box de Shoutamente
Last 10 Shouts:
RyU
September 03, 2024, 05:15:49 PM
And wow Derrick is still playing lol
RyU
September 03, 2024, 05:15:15 PM
Just know yesterday is gone and soon tomorrow will be gone too
Lejionator
August 08, 2024, 07:28:01 PM
It's tiem to QuakeCon!!!
https://www.youtube.com/watch?v=ThQd_UJaTys
ImperiusDamian
July 26, 2024, 09:34:53 PM
In nomine Quake II et Id Software et Spiritus John Carmack, Amen.
QuakeDuke
July 26, 2024, 05:10:30 PM
Hey, shout, summertime blues
Jump up and down in you blue suede shoes
Hey, did you rock and roll? Rock on!! ...QD
Yotematoi
July 24, 2024, 01:31:20 PM
Ayer me mato 5 veces para robarme en la vida real hará lo mismo? [img]<iframe src="https://www.facebook.com/plugins/post.php?href=https%3A%2F%2Fwww.facebook.com%2Fzoloyoze.torito%2Fposts%2Fpfbid0wXU2VgS7atesBcSoMz5BWMJCJajeZFVT6GzSU6TtpJGddN9kLTvWNgcZaskkbKFQl&show_text=true&width=500
https://www.facebook.com/plugins/post.php?href=https%3A%2F%2Fwww.facebook.com%2Fzoloyoze.torito%2Fposts%2Fpfbid0wXU2VgS7atesBcSoMz5BWMJCJajeZFVT6GzSU6TtpJGddN9kLTvWNgcZaskkbKFQl&show_text=true&width=500
" width="500"
Yotematoi
July 24, 2024, 01:25:59 PM
hi ya está la basura de Martin, se cambió el nombre es un ladron estupido, asi llegó a 10000[img]<iframe src="https://www.facebook.com/plugins/post.php?href=https%3A%2F%2Fwww.facebook.com%2Fzoloyoze.torito%2Fposts%2Fpfbid03hZrkDUBJPZKCuFgy5hRUy831ekKJYVRzC7ajXaKQbJ6xcPgKftLukUDfovFyEq3l&show_text
https://www.facebook.com/plugins/post.php?href=https%3A%2F%2Fwww.facebook.com%2Fzoloyoze.torito%2Fposts%2Fpfbid03hZrkDUBJPZKCuFgy5hRUy831ekKJYVRzC7ajXaKQbJ6xcPgKftLukUDfovFyEq3l&show_text
Yotematoi
July 24, 2024, 01:25:59 PM
hi ya está la basura de Martin, se cambió el nombre es un ladron estupido, asi llegó a 10000[img]<iframe src="https://www.facebook.com/plugins/post.php?href=https%3A%2F%2Fwww.facebook.com%2Fzoloyoze.torito%2Fposts%2Fpfbid03hZrkDUBJPZKCuFgy5hRUy831ekKJYVRzC7ajXaKQbJ6xcPgKftLukUDfovFyEq3l&show_text
https://www.facebook.com/plugins/post.php?href=https%3A%2F%2Fwww.facebook.com%2Fzoloyoze.torito%2Fposts%2Fpfbid03hZrkDUBJPZKCuFgy5hRUy831ekKJYVRzC7ajXaKQbJ6xcPgKftLukUDfovFyEq3l&show_text
[BTF]Jehar
July 19, 2024, 04:28:08 PM
http://forum.tastyspleen.net/quake/index.php?topic=23579.msg238738#msg238738
ts500 comin!
-Unh0ly-
July 05, 2024, 05:20:36 AM
https://unh0lyquakeii.godaddysites.com/
[/i]
Show 50 latest
User
Welcome,
Guest
. Please
login
or
register
.
September 20, 2024, 07:28:28 AM
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
Search
Advanced search