 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 230
 Members: 0
 Total: 230
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Breaking of mail on Yahoo.com |
|
 Posted: Sat Feb 03, 2007 1:28 pm |
 |
|
| Xe0lInk |
| Beginner |
 |
|
| Joined: Feb 03, 2007 |
| Posts: 1 |
|
|
|
 |
|
 |
|
Breaking of mail on Yahoo.com
Breaking of mail on Yahoo.com All is very simple. To the address of repair_passwd@yahoo.com the mail-robot, which sits analyzes inquiries about restoration of the password and depending on it or specifies your data, or at once shlet the password.
On a site there is a form for filling with every possible parameters, which then shletsja to the robot with
special Subject. A chesspiece that if in sabzhekt to push not one, and two inquiries will be checked up
there will be last box, and the information will be sent for the second! So we cerebrate... Correctly!
We send two inquiries: in one it is informed infu on a box to a victim, in the second infu about the (about the that all of us it is known;))
So, we wish to break off pupkin@yahoo.com
Our box hacker@yahoo.com the password qwerty
We write the letter to the robot on repair_passwd@yahoo.com
Subject: login=pupkin*pass = and answer =; login=hacker*pass=qwerty*answer =
I.e. first time is inserted into a theme of the letter inquiry about a box-victim:
login=pupkin*pass = and answer =
And then, through a semicolon the second inquiry, with your data whom the robot will check up and will be convinced, that they correct!
login=hacker*pass=qwerty*answer =
Total: the theme of the message looks here so:
login=pupkin*pass = and answer =; login=hacker*pass=qwerty*answer =
Everything, wait pass on your soap!!! (Answer = the answer to a confidential question, but prokatyvaet and without it, inquiries
Are divided by a semicolon. Success ) |
|
|
|
|
|
|
|
|
| Posted: Sat Feb 03, 2007 4:33 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
What a lame social engineering attempt! It deserves place in recycle bin  |
|
|
|
|
www.waraxe.us Forum Index -> Removed messages
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
