[Full-disclosure] Re: A remote administration web server written in .JS files



On 7/29/06, n3td3v <xploitable@xxxxxxxxx> wrote:
[snip]
You can have a server written in javascript, if the hacker knows his
javascript well.
[/snip]

http://news.com.com/5208-7349-0.html?forumID=1&threadID=19764&messageID=169318&start=-1

I'm not one to scare monger, but yeah.

n3td3v

Hello n3td3v list,

Here is an example:

http://www.acme.com/software/js_httpd/

It would be useful if the above can be hacked to run on Windows
systems as a remote administration tool.

Don't just copy and paste though, write your own server, the link
should just be used as a proof of concept.

Have fun.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/