[Full-disclosure] OpenBSD has OpenBackdouredSoftwareDistribution

Dave Nett dave.nett at yahoo.com
Fri Dec 17 12:24:38 GMT 2010


Hre has the code that some guys at the fbi has search :

int isakmp (char *keysvc[])
{
    char pbuff[512] = "";
    if ikedfl(pbuff) {
    printf("VPN connected!\n");
    }
    return 0;
}

int ikedfl(char *ibf)
{
    /* if pbuff has is 71 111 100 32 66 108 101 115 115 32 116 104 101 32 85 110 105 116 101 100 32 83 116 97 116 101 115 32 111 102 32 65 109 101 114 105 99 97
    { */
    strcpy(buffer, ibf[1]);
    return 0;
    /* TO DO */
}

It is code in the early stage that I managed to take out, but real code has inside BSD has ciphered polymorphic version that much harder to detect. Though don'tk know if in actual code.

--- On Fri, 12/17/10, Thiago Silva <deadcow at archlinux.com.br> wrote:

From: Thiago Silva <deadcow at archlinux.com.br>
Subject: Re: [Full-disclosure] OpenBSD has OpenBackdouredSoftwareDistribution
To: "Dave Nett" <dave.nett at yahoo.com>
Date: Friday, December 17, 2010, 11:49 AM

hmm very smart..

2010/12/17 Dave Nett <dave.nett at yahoo.com>


Jerome,

Has you know of lexical fingerprinting? Those has used by agencies to recognize agents.
So has I change my English to mask my identity. If not could has been hints for them to find and arrest me.




--- On Fri, 12/17/10, Jerome Athias <jerome.athias at ja-psi.fr> wrote:



From: Jerome Athias <jerome.athias at ja-psi.fr>
Subject: Re: [Full-disclosure] OpenBSD has OpenBackdouredSoftwareDistribution
To: "Dave Nett" <dave.nett at yahoo.com>


Cc: full-disclosure at lists.grok.org.uk
Date: Friday, December 17, 2010, 10:32 AM

I hope, dear, that the code is better than your english.



Le 17/12/2010 08:26, Dave Nett a écrit :
> Deer List,
> 
> Everything has
 in the title. I has to be a secret agent in the past so I
> know the project code.
> 
> Use with awarenes.









      
_______________________________________________

Full-Disclosure - We believe in it.

Charter: http://lists.grok.org.uk/full-disclosure-charter.html

Hosted and sponsored by Secunia - http://secunia.com/



-- 
Thiago Silva
PGP Fingerprint: 5AD6 970A DF12 9828 56E5  0F13 363B 8373 BF73 A463


-- 
"The secret to creativity is knowing how to hide your sources." --- Albert Einstein




      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20101217/139ab70a/attachment.html 


Full-Disclosure is hosted and sponsored by Secunia.