Re: [NEW] bugbear_b.nasl

From: Pavel Kankovsky (peakat_private)
Date: Tue Jun 10 2003 - 23:51:23 PDT

  • Next message: larosa, vjay: "RE: [NEW] bugbear_b.nasl"

    On Tue, 10 Jun 2003, Renaud Deraison wrote:
    
    > Connect to port 1080 and tell me if you see anything.
    > If not, what happens when you send the letter "p" ? What happens when
    > you send a cariage return ?
    
    argo:/home/peak $ echo p | ./nc INFECTED-HOST 1080 | od -t x1
    0000000 2e 19 98 24 2f c2 e2 32 71 44 4b f3 63 c5 97 53
    0000020 36 fe 62 c9 4a 44 6d b2 f3 9a d2 8c 3e 69 23 8d
    0000040 1b 5b 1b 6c 27 28 73 da 73 6a ee f7 a7 64 e3 4a
    0000060 96 59 d1 da 28 c0 2a 36 fe f1 24 4b 85 ca f4 f7
    0000100 79 5e ff 9c 3b 1d 41 e0 07 af a7 78 10 d2 47 5b
    0000120 b1 69 e6 5b 78 e7 5c bb 03 47 65 81 04 78 ac e5
    0000140 d8 73 4a ca 5f f1 b7 28 1b ff 81 1e 51 09 52 eb
    0000160 95 1a 57 0e 8c 89 db 75 6d c0 52 a6 02 7f d7 d6
    0000200 26 a6 5b 2e a2 a5 e7 ba b1 29 53 90 2c 60 27 e5
    0000220 8d e5 ea 9a e7 12 66 7e aa 36 2a 26 16 b4 57 d8
    0000240 1e de b0 ad 65 8c 41 19 c6 d0 82 4e b1 78 02 68
    0000260 46 fc af 0f 20 23 6e ba d6 4c 53 3b 4c 36 05 2a
    0000300 04 c0 f9 2d 05 4e a1 51 8b c8 b1 63 ac 79 47 db
    0000320 ae d0 a1 40 8c 6f 1e 13 89 32 74 c4 50 f1 15 6a
    0000340 19 05 88 69 89 55 c9 2a 4f 7a d0 94 19 ac 07 4d
    0000360 50 47 28 38 72 b6 4c 66 5f 86 62 49 86 09 d4 38
    0000400 de ed 10 1a ea a6 a5 fe c8 f9 df ab eb 53 bf 5a
    0000420 d3 1b 5f 03 9a 4f f9 58 7b 4a 7b 0f 7b d3 fc 3e
    
    No greeting when a connection is open. No reaction to a lone
    newline.
    
    --Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
    "Resistance is futile. Open your source code and prepare for assimilation."
    



    This archive was generated by hypermail 2b30 : Tue Jun 10 2003 - 23:52:16 PDT