[Full-Disclosure] [OMG] NSRG Security & Lorenzo Hernandez "SuckYouBeans" Garcia-Hierro

~~~~
 0D4Y-OMFG FACTOR 1 MILLIN 0D4Y-OMFG FACTOR 1 MILLIN 0D4Y-OMFG FACTOR 1 MILLIN
 0D4Y-OMFG FACTOR 1 MILLIN 0D4Y-OMFG FACTOR 1 MILLIN 0D4Y-OMFG FACTOR 1 MILLIN
 0D4Y-OMFG FACTOR 1 MILLIN 0D4Y-OMFG FACTOR 1 MILLIN 0D4Y-OMFG FACTOR 1 MILLIN
 
O132J0R2800D4Y0D4Y-OMFG FACTOR 1 MILLIN O132J0R2800D4Y0D4Y-
OMFG FACTOR 1 MILLIN O132J0R2800D4Y0D4Y-OMFG FACTOR 1 MILLIN O132J0R2800D4Y0D4Y-
OMFG FACTOR 1 MILLIN O132J0R2800D4Y0D4Y-OMFG FACTOR 1 MILLIN O132J0R2800D4Y0D4Y-
OMFG FACTOR 1 MILLIN O132J0R2800D4Y0D4Y-OMFG FACTOR 1 MILLIN O132J0R2800D4Y
~~~~~~~~

          [ Playing with stolen relabeled code by NSRG-Security ]

           \=1`\ Brought to you by the fine folks at \`=1\
            \=1`\ Stupidity In the World Industries \`=1\
             \=1`\ The Re-Resurrection \`=1\

sites: nsrg-security.com
       w3.nsrg-security.com
       http://news.nsrg-security.com
       test-zone.nsrg-security.com
       advisories.nsrg-security.com

Look through web sites and learn about horatio.

>>>>>>>>>>>>>>>>>>>>>>>> Quote from "Lorenzo Hernandez Garcia-Hierro" to "gazpa"

haha i no script kiddie i call u mother and ask about you scanning
for rpc all night hahaofihohashahomfgroflmfaowssd

~ OH WAIT! the only linux exploit i have on my worthless nsrg-security site
~ is for windows rpc, DOH! I look like such an idiot

>>>>>>>>>>>>>>>>>>>>>>>> End Quote

==========================================================

               ==Advisory #8131==
        ==Giving you 10 years of XSS!!==

                 NSRG SECURITY
         "Almost as lame as morning_wood"

=============================================================

http://www.nsrg-security.com/forum/viewtopic.php?forum=2&showtopic=1 having 1=1--
             "An SQL error has occured. Please see error.log for details."
              
http://www.nsrg-security.com/stuff/trans.php?lang=sagsdg
              Stupid programming
              
[blah]
http://www.nsrg-security.com/stuff/
 HEXCODES.TXT 25-Oct-2003 23:21 1k
 check_sys.php 21-Nov-2003 16:43 2k
 irc.php 22-Nov-2003 00:06 4k
 news-cert.php 21-Nov-2003 18:18 1k
 news-kernel-traffic.php 21-Nov-2003 18:18 1k
 news-securityfocus.php 21-Nov-2003 18:18 1k
 news-slashdot.php 21-Nov-2003 18:18 1k
 news.php 21-Nov-2003 19:03 3k
 trans.php 21-Nov-2003 17:40 3k
 voyeur-system.php 21-Nov-2003 16:50 3k
 vulns-securityfocus.php 21-Nov-2003 18:18 1k

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Quote from site:
       =
                        NSRG
       "One of the best security resources around"
       =

"XSS" in: http://w3.nsrg-security.com/search/index.php

<script>alert(window.cookie)</script>

http://w3.nsrg-security.com/search/index.php?weblog=&keywords=%3Cscript%3Ealert%28window.cookie%29%3C%2Fscript%3E

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

testzone.nsrg-security.com

"XSS" in Referer log at:
 
      http://test-zone.nsrg-security.com/xss/
      

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

news.nsrg-security.com

"XSS" in Email variable at:
 
      http://news.nsrg-security.com/register.php
      

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

misc:

XSS kiddie advisories:

      http://advisories.nsrg-security.com/
      http://advisories.nsrg-security.com/FileDonkey.com-XSS/exploit.html
 

Another kiddie running nessus on everything he finds:

      http://advisories.nsrg-security.com/Nasa.gov-MV/nasa.gov-audit-by-robot.php

Hiding his MS browser:

      http://advisories.nsrg-security.com/Nasa.gov-MV/screenshots/SQL-3.gif
      
==================================================

Greets;

MOOT INDUSTRIES, moot bailey, elite nsrg-security xss h4x0rs-they dont know SQL but they know
how to type '` when they see "id=###", the cisco kyd, welcome to the doghouse

_______________________________________

I will be out of the office till January 1'st, you
may contact me throught be following means:

Address:

Donnie W.
5685 Eagle Pky #2
Ferndale, Wa 98248

Phone Number: 360-312-8011

-- 
_______________________________________________
Get your free email from http://www.singapore.net
Get US $10 Now: http://www.resource-a-day.com/members2/rsathyamurthy
Powered by Outblaze
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html