so you can .. read login details to databases, login to them, steal their records, and then send them out? .. thanks for this ... groundbreaking research <br><br>we hope that your next pdf will contain how to sniff telnet sessions and then "automatically hack" something something something
<br><br>anyway um .. great job<br><br><div class="gmail_quote">On Nov 22, 2007 5:57 AM, Cesar <<a href="mailto:cesarc56@yahoo.com">cesarc56@yahoo.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hey, I'm releasing this new paper, not big deal but<br>interesting.<br><a href="http://www.argeniss.com/research/Data0.pdf" target="_blank">http://www.argeniss.com/research/Data0.pdf</a><br><br>Abstract:<br>This paper it's about Data0, a fictitious (or not)
<br>simple PoC of new malware that after it's<br>deployed on a computer in an internal network it will<br>automatically hack database servers and<br>steal their data. Several techniques used by Data0<br>will be detailed. Data0 will be targeting
<br>Microsoft SQL Server and Oracle Database Server two of<br>the most used database servers.<br>While Data0 could be used by the bad guys for evil<br>purposes, it could also be used by security<br>professionals and organizations to determine how
<br>strong networks, workstations, database<br>servers, etc. are against this kind of attack.<br>This paper is not intended to be a cook book for cyber<br>criminals, it's intended to show people<br>that by implementing simple techniques malware can
<br>become "smarter" and cause a lot more<br>damage in a very near future.<br><br><br>Cesar.<br><br><br> ____________________________________________________________________________________<br>Get easy, one-click access to your favorites.
<br>Make Yahoo! your homepage.<br><a href="http://www.yahoo.com/r/hs" target="_blank">http://www.yahoo.com/r/hs</a><br><br>_______________________________________________<br>Full-Disclosure - We believe in it.<br>Charter:
<a href="http://lists.grok.org.uk/full-disclosure-charter.html" target="_blank">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>Hosted and sponsored by Secunia - <a href="http://secunia.com/" target="_blank">
http://secunia.com/</a><br></blockquote></div><br>