Re: Dynamic DNS "Spoofing" & IRC

From: Thomas Wouters (meelingat_private)
Date: Fri May 02 2003 - 08:26:06 PDT

Next message: John Morris: "rwrite buffer overflow in hp-ux"

Previous message: Karl-Heinz Haag: "Re: OpenSSH/PAM timing attack allows remote users identification"
In reply to: Intel Nop: "Dynamic DNS "Spoofing" & IRC"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

this would mean if you get disconected from the irc server and reconed you
would not have any reverse at all, so the 'real' hack isn't there your just
'abuseing' the fact that ircd's dont lookup the hosts while your are
connected

like almoste every deamon does (like sshd/apache enz)

-- Thomas

----- Original Message -----
From: "Intel Nop" <0x90at_private>
To: <bugtraqat_private>
Sent: Thursday, May 01, 2003 11:47 PM
Subject: Dynamic DNS "Spoofing" & IRC



> Step 3) Run your dyndns script for zoneedit to assign your ip address as
> whatever ip you want (in this case I'll use 127.0.0.1), then wait about a
> minute before joining a channel.
>


--------
Thomas Wouters - xhoy
e-mail: Thomasat_private
IRC: IRCnet - #IceBox & #ne2000 | EFnet - #IceBox

* ne2000 -  Press Any Key To Continue | http://www.ne2000.nl *
* IceBox - SLUT partner | http://slut.icebox.nl *
--------

Next message: John Morris: "rwrite buffer overflow in hp-ux"
Previous message: Karl-Heinz Haag: "Re: OpenSSH/PAM timing attack allows remote users identification"
In reply to: Intel Nop: "Dynamic DNS "Spoofing" & IRC"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri May 02 2003 - 14:09:40 PDT