About a month ago I wrote a post going over some code that I wrote that basically went out and grabbed email addresses after doing search queries. I’ve since updated the code and was asked to post it, so I decided to just recreate the entire post. Here’s the new code.
Archive for May, 2010
Enumerating email addresses using search engines (the return!)
Posted: 27th May 2010 by Matt in code, hacksTags: addresses, altavista, email, employees, enumerate, google, hack, harvest, harvest.pl, information, linkedin, owned, perl, security, yahoo
15
Invasion of Privacy. The Sequel.
Posted: 24th May 2010 by Matt in hacks, securityTags: administration, cam, facebook, identity, information, keylogger, myspace, personal, predator, remote, sex, stalking, theft, tool, web
As promised, I’m posting about another method to obtain private information about people and their personal lives. This one has darker implications, though, so I’m not going to be posting the real names of the people that I find, nor will I post private information. The people listed here simply made a mistake by not [...]
Firewall fun with Scapy
Posted: 21st May 2010 by Matt in hacks, securityTags: 3, bypass, firewall, forwarding, handshake, hops, internal, iptables, lan, scapy, way
I was asked.. “How would you find out if a firewall is forwarding a port to an internal machine or not?” I pondered for a minute, having read a lot about this but never really having much of a use for it.. but the answer is.. TTL. TTL, or “time to live”, determines how long [...]
UPDATED: Linux Vulnerability: sctp_process_unk_param & Scapy
Posted: 18th May 2010 by Matt in code, hacks, securityTags: advisory, crash, denial, denial of service, DoS, error, python, reboot, remote, scapy, SCTP, sctp_process_unk_param, service, vulnerability, vulnerable
I was going through my RSS updates and noticed this: http://www.securityfocus.com/bid/39794. Not good. Any time that there’s a remote DoS against a Linux box, it means bad things. I started digging, because I’m not terribly familiar with SCTP. First, I wanted to know more about the vulnerability itself. I found this: http://permalink.gmane.org/gmane.comp.security.oss.general/2859. Simply put, the [...]