Sammy!
So I got off a little early today because my parents are coming into town to see the baby. I logged onto myspace real quick cause my buddy mentioned a message he sent. and I noticed an “update” from Tom
ShmooCon
y0 reffered me over to the smoocon presentations from last year. Not sure when they were released on the site. I don’t really follow that con. Anyway the only one I checked out was Matt fishers from SPIdynamics.
Idq / Code Red wierdness
On a recent pen test I encountered a wierd thing. I discovered a code red vulnerability on a web server using a custom scanner that I modified from source. The check for code red sends the GET /x.ida (220 A’s) =x HTTP/1.0\r\n\r\n and checks for the string “c0000005″ in the return.
So, my app shows: