Real Name | Pedram Amini |
---|---|
Email address | private |
Website | pedram.openrce.org |
First Active | 2002-05-10 |
Last Active | 2011-05-07 |
iDEFENSE Security Advisory 10.01.2002 - It is possible for an attacker to bypass the restrictions imposed by The Sendmail Consortium's Restricted Shell (SMRSH) and execute a binary of his choosing by inserting a special character sequence into his .forward file. Two attack methods both of which are detailed. Patch available here.
e1968987be598ce21fb8b01554f9dd70ecddae77782675c6591f723f39c2dab1
Dnshijacker v1.2 is a libnet/libpcap based packet sniffer & dns spoofer. A versatile tool, dnshijacker supports tcpdump style filters that allow you to specifically target victims. Dns answers are forged based on entries in a "fabrication table" or by simply forging one answer to all requests. A print only mode is also supported, allowing one to simply monitor dns traffic. Archived prank: alex on slashdot. Requires libnet and libpcap.
98a5bf780f9e88276cb7aa18e20a49c331bdb12ed9ebf60bea2a425b8b7f9e9d
Dirwatch is a (/tmp) directory watcher written to to aid in the discovery of race conditions. Dirwatch has multiple speed settings, the fastest of which can even catch a successive link() unlink(). Dirwatch also has the ability to filter files based on user, group, suid bit, and wildcard (*?) file names.
5cdc8fea6ea4919bd2106e78c2892ae715e43baa15d23ca4eec2a512646b6089
Confuse Router v1.0 is an arp cache poisoner which allows you to see traffic in a switched environment such as a cable modem network. Requires libnet.
3f39d0ee3be48ebe6c2f78d8012c01677c3f389706c1f2b080b773de1fd86e82