Re: [Full-disclosure] .NET REMOTING on port 31337

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

was this thread billable time to your customer? i hope they use
the internet to research you and your inability to deduce this port
three one three three seven nonsense and your associates talk of
his *** stained penis

On Fri, 28 Sep 2007 15:40:26 -0400 Simon Smith <simon@xxxxxxxxxxx>
wrote:
Sorry,
Bad Troll... no more food...

full-disclosure@xxxxxxxxxxxx wrote:
fascinating tell me more

On Fri, 28 Sep 2007 15:36:07 -0400 Simon Smith
<simon@xxxxxxxxxxx>
wrote:
I don't have any techniques...

full-disclosure@xxxxxxxxxxxx wrote:
educate me dude i bet i'll win this one.

are your techniques more advanced than the anvil ids suite?

On Fri, 28 Sep 2007 15:22:23 -0400 Simon Smith
<simon@xxxxxxxxxxx>
wrote:
I do... but I don't have time to explain it to you... its
complicated...
post-nmap stuff...
full-disclosure@xxxxxxxxxxxx wrote:
dunno how do you plan on figuring out what is running there

On Fri, 28 Sep 2007 15:07:34 -0400 Simon Smith
<simon@xxxxxxxxxxx>
wrote:
Phew... thought you were serious for a moment...
I mean... what more could there be aside from nmap. ;]
full-disclosure@xxxxxxxxxxxx wrote:
No just kidding lol a lot of people here seem to make
money
in
this
business.

On Fri, 28 Sep 2007 15:01:01 -0400 Simon Smith
<simon@xxxxxxxxxxx>
wrote:
No way...
are you serious?
;P
full-disclosure@xxxxxxxxxxxx wrote:
Sounds like you will need to learn how to use debugging
and
other
reverse engineering tools dude. Security gets a little
more
complicated post-nmap.



On Fri, 28 Sep 2007 14:21:52 -0400 Simon Smith
<simon@xxxxxxxxxxx>
wrote:
Got output... and it was... no idea what it was...
can't
paste
it
due to
confidentiality though.
Fabrizio wrote:
.NET Remoting is "a generic system for different
applications
to
use to
communicate with one another." It's part of the .NET
framework,
obviously. (not trying to be a smart ass)

I'm gonna take a wild guess and say it's not a good
thing......
Connect to it, and see if you get any output, if you
haven't
already
done so.

Fabrizio



On 9/28/07, * Simon Smith* <simon@xxxxxxxxxxx
<mailto:simon@xxxxxxxxxxx>> wrote:


Has anyone ever heard of .NET REMOTING running on port
31337?
If
so,
have you ever seen it "legitimate"?


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-
charter.html
<http://lists.grok.org.uk/full-disclosure-charter.html>
Hosted and sponsored by Secunia - http://secunia.com/
-------------------------------------------------------
--
--
--
--
--
-------
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-
charter.html
Hosted and sponsored by Secunia - http://secunia.com/
--
- simon
----------------------
http://www.snosoft.com
--
Click here to find great prices on contact lenses. Save
now.

http://tagline.hushmail.com/fc/Ioyw6h4ea3DsXjSV0BsP1YTozy3Px8JSHxZE


v9UYiKIbvmBMS8cN5D/

--
- simon
----------------------
http://www.snosoft.com
--
Click here for free information on exciting leadership
programs.


http://tagline.hushmail.com/fc/Ioyw6h4dDEsHl9DycYqbZ3GrueBGQ2n3jOJL


u8VBwDe3bXvscFUYtv/


--
- simon
----------------------
http://www.snosoft.com
--
Click for free information on accounting careers, $150 hour
potential.


http://tagline.hushmail.com/fc/Ioyw6h4dCaQzqlFuxiHhBM76jQM7p3uFLDVT


jtv7Yywb9ixgu0UUOR/



--
- simon
----------------------
http://www.snosoft.com
--

- simon

----------------------
http://www.snosoft.com

--
Click here to double your salary by becoming a medical
transcriber.
http://tagline.hushmail.com/fc/Ioyw6h4eKoYonp8l5phlPjo68YSllQcgUuXL
Y6l8zog39ob29d9DHf/




--

- simon

----------------------
http://www.snosoft.com
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Charset: UTF8
Version: Hush 2.5

wpwEAQECAAYFAkb9WYAACgkQ+dWaEhErNvR9wAP/fzWWeqUWZIlCmCII/ao+jRmNB8mg
Vy7zbRHhAKR32RKOX2HbwX8pOYWHhcKFdKaUHaCQR+0iPK9oAhTFU/DKnQxun9+1Zp34
K1pLXK2YF9iTFH2fEO6tg0OIv9aBc13vJ2t19bbHGVOM1NVfE10UNeNruye7ZT9gvn6r
anxcN6g=
=Z4Pd
-----END PGP SIGNATURE-----

--
Click here for free info on Graduate Degrees.
http://tagline.hushmail.com/fc/Ioyw6h4eSpm5T7TwWBKPDoR1vOQ2jvT3wTyVrJq5gQasyeZuLUDiW0/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/