Re: [Full-disclosure] No one else seeing the new MS05-039 worm yet?

From: Morning Wood (se_cur_ity_at_hotmail.com)
Date: 08/30/05

  • Next message: Willem Koenings: "Re: [Full-disclosure] No one else seeing the new MS05-039 worm yet?" 
    To: "Something Anonymous" <something.anonymous@gmail.com>, <full-disclosure@lists.grok.org.uk>
Date: Tue, 30 Aug 2005 07:16:43 -0700

    >does is listen on port5000 to? 2 attempts we seen come from machines
    >nmap'd below - wonder if its what you talking about - we think they
    >being used as proxy to jump from

    port 5000 is open on only XP w/pnp enabled, however this helps identify XP
    from 2k and allows a good guess as to which OS is running. ( for proper
    targeting )

    cheers,
    mw
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.grok.org.uk/full-disclosure-charter.html
    Hosted and sponsored by Secunia - http://secunia.com/

  • Next message: Willem Koenings: "Re: [Full-disclosure] No one else seeing the new MS05-039 worm yet?"

    Relevant Pages

    • Re: Transparent proxy failing
      ... machine A as the gateway on the network, and A takes requests to port ... The squid machine, A, doesn't handle HTTPS blocking. ... up a website, it goes right to the website, no filtering. ... IE on the client to specifically use the proxy setting of B's ip ...
      (Ubuntu)
    • Re: SSH Tunneling, view web site as though I am in the USA
      ... $ ssh -D 1080 me@us_server ... And then set your local web browser to proxy using socks 4 to server ... HTTP Proxy: localhost Port: 1080 ... Not http proxy, SOCKS 4 proxy. ...
      (comp.security.ssh)
    • Re: Fehlercode 502
      ... Wenn ich den Proxy umgehe, ... In der ISA Server Hilfe habe ich leider keine Infos gefunden, ... Gruß Detlef ... >> Port 8443). ...
      (microsoft.public.de.german.isaserver)
    • Re: Webproxy Konfiguration auf einem ISA 2006 Standard
      ... dann ist der Client noch SecureNAT Client?! ... Dann geht es auch ohne Proxy ... Hierbei habe ich die einzelne IP als Quelle angegeben und den ISA ... Freigegeben sind Port 80/443/8080. ...
      (microsoft.public.de.german.isaserver)
    • Re: bypassing employers proxy to surf anonymously
      ... When using SSH through the local proxy, it might be an idea to run the ... port 443, so it's harder to distinguish from an https server. ... Also, in case you're not aware, a proxy server on the other side ... Another method of tunneling would be through DNS. ...
      (Pen-Test)