???

Discuss anything related to AIM+.

Moderators: Big-O Ryan, Big-O Mark

User avatar
Nathan
Extreme Groupie
Extreme Groupie
Posts: 723
Joined: Fri Sep 12, 2003 9:41 pm
Location: CA
Contact:

Post by Nathan »

so back to the topic
phase wanna tell me how you did it???
huh huh?? :lol: :lol: :lol: :wink: :wink: :wink:
Bethany is cool
Plasma2002b wrote:ill open YOUR port.....!
User avatar
Nathan
Extreme Groupie
Extreme Groupie
Posts: 723
Joined: Fri Sep 12, 2003 9:41 pm
Location: CA
Contact:

Post by Nathan »

dont ignore the question phase
i wanna know
theres a few people i wanna try it on
lol :lol: :lol: :lol:
Bethany is cool
Plasma2002b wrote:ill open YOUR port.....!
User avatar
Robpol86
Veteran
Veteran
Posts: 475
Joined: Tue Dec 03, 2002 11:48 pm
Contact:

Post by Robpol86 »

quit double posting, and stop w/ the damned smileys

(i smell a person trying to get his postcount up)
User avatar
Plasma2002b
Extreme Groupie
Extreme Groupie
Posts: 976
Joined: Thu Jul 18, 2002 11:36 pm
Location: Riverside, Ca
Contact:

Post by Plasma2002b »

well since phase doesnt seem to be too eager to tell ya how its done, i guess i will......


Everybody knows that there are a few flaws in AIM. Its just common fact. One of these known holes can be exploited.

Using some common CGI knowledge, an attacker can use any Unix based host which s/he has shell access to, wether it be typing the commands in one by one, or simply loading them from a scripted list to be executed, the attacker can manipulate the Oscar server to redirect certain im messages back upon itself and then out after a givin callback time can spit the messages out to any other person with a valid SN.

Whats happening is that the messages get put in limbo for however long the attacker sees fit... looping the messages upon the Oscar's localhost gives the attacker one good thing..... multiplication. As soon as s/he wants to let the loop end and spread the messages back to whomever, the attackee, or victim, gets an insane amount of redundant and not so redundant messages.

A few simple pieces of coding can be stuck in to make it seem as if these messages are coming from thousands upon thousands of different people, or simply from one person.... or maybe possible a group of simmilar SN's.


The fact of the matter is this..... your connection, client software, memory, processor, or whatever just cant handle the sheer amount of rebounded information coming from one place all in that short period of time. Like it or not, its gonna take something down from your computer.
Image

its teh infamous life of brian gaut to teh max0r!
User avatar
Drkdth446
Newbie
Newbie
Posts: 10
Joined: Sun Nov 09, 2003 9:01 pm
Contact:

stfu

Post by Drkdth446 »

He most likely used either aim invader or cybermass to crash your computer rokbus
User avatar
Anthony
Moderator
Moderator
Posts: 1532
Joined: Thu Sep 12, 2002 5:10 am
Location: Rochester, New York
Contact:

Post by Anthony »

No, that's what you would use.
Image
PhaseDMA - Check it out
My AIM+ FAQ
User avatar
Nathan
Extreme Groupie
Extreme Groupie
Posts: 723
Joined: Fri Sep 12, 2003 9:41 pm
Location: CA
Contact:

Post by Nathan »

finaly phase speaks
what do you mean thats what i would use
what did you do, the thing plasma said :?:
Bethany is cool
Plasma2002b wrote:ill open YOUR port.....!
User avatar
Anthony
Moderator
Moderator
Posts: 1532
Joined: Thu Sep 12, 2002 5:10 am
Location: Rochester, New York
Contact:

Post by Anthony »

Ya... What Brian said...

... Actually I think I hacked into your computer, download your entire HD, and then logged you out from your own computer.
Image
PhaseDMA - Check it out
My AIM+ FAQ
User avatar
Nathan
Extreme Groupie
Extreme Groupie
Posts: 723
Joined: Fri Sep 12, 2003 9:41 pm
Location: CA
Contact:

Post by Nathan »

lol
ya only i wasnt logged out
i restarted
and that would take a hell of a long time to download my hd
Bethany is cool
Plasma2002b wrote:ill open YOUR port.....!
User avatar
Anthony
Moderator
Moderator
Posts: 1532
Joined: Thu Sep 12, 2002 5:10 am
Location: Rochester, New York
Contact:

Post by Anthony »

Not my my super 1337 C0pr35i0n 7001.
Image
PhaseDMA - Check it out
My AIM+ FAQ
User avatar
Master Jedi
Guru
Guru
Posts: 1161
Joined: Sat Jun 15, 2002 10:34 pm
Contact:

Post by Master Jedi »

Speaking of Anthony's ub3r 1337 C0mpr35i0n 7001...I used it to compress an entire season of the Simpsons...31 bytes :o
User avatar
Nathan
Extreme Groupie
Extreme Groupie
Posts: 723
Joined: Fri Sep 12, 2003 9:41 pm
Location: CA
Contact:

Post by Nathan »

thats disgusting
i cant afford something like that
:evil: im jealous
Bethany is cool
Plasma2002b wrote:ill open YOUR port.....!
User avatar
Anthony
Moderator
Moderator
Posts: 1532
Joined: Thu Sep 12, 2002 5:10 am
Location: Rochester, New York
Contact:

Post by Anthony »

What... Are you nuts? It took me 3 years of programming and I had to hire Bill Gates to do half the work.
Image
PhaseDMA - Check it out
My AIM+ FAQ
User avatar
Nathan
Extreme Groupie
Extreme Groupie
Posts: 723
Joined: Fri Sep 12, 2003 9:41 pm
Location: CA
Contact:

Post by Nathan »

how much did you pay billy
i could use a computer like that when i go after my career as a programmer
hey jedi are you programming as a job for a company, if so care to share with me how much this field of work pays? :D
Bethany is cool
Plasma2002b wrote:ill open YOUR port.....!
User avatar
Anthony
Moderator
Moderator
Posts: 1532
Joined: Thu Sep 12, 2002 5:10 am
Location: Rochester, New York
Contact:

Post by Anthony »

60,000 to 80,000
Image
PhaseDMA - Check it out
My AIM+ FAQ
Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests