[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-Disclosure] Best behavior to report the holes that i found in NSAS.GOV WEBSITE
- To: "Full-Disclosure" <full-disclosure@lists.netsys.com>
- Subject: [Full-Disclosure] Best behavior to report the holes that i found in NSAS.GOV WEBSITE
- From: "Lorenzo Hernandez Garcia-Hierro" <lorenzohgh@nsrg-security.com>
- Date: Wed, 15 Oct 2003 21:21:40 +0200
Hi friends,
I want to make question:
what's the best behavior to contact nasa.gov websites masters and report the
holes ?
This is due to my last mails about the holes i discovered.
( XSS and SQL Injections )
And it is not a honeypot of XSS ;-)
Best regards and please answer this question,
-------------------------------
0x00->Lorenzo Hernandez Garcia-Hierro
0x01->/* not csh but sh */
0x02->$ PATH=pretending!/usr/ucb/which sense
0x03-> no sense in pretending!
__________________________________
PGP: Keyfingerprint
4ACC D892 05F9 74F1 F453 7D62 6B4E B53E 9180 5F5B
ID: 0x91805F5B
**********************************
No Secure Root Group Security Research Team
http://www.nsrg-security.com
______________________
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html