Hacking with Kazaa

[Juridian]

I see no problems with publishing how they did it. It's not the flaws you share, but what you do with that knowledge.

While posting a patch along with the problem would be nice, not everyone has the skills or the ability to create a patch for the problem.

[Tedob1]

This is nothing new and you really are displaying your ignorance by posting this.

It has been argued here on a few occasions if this is hacking or illegal and the concensus was it is not. The reason...Its nothing you couldn't get by using Kazaa itself only going threw more trouble to get it. Your only viewing what the user intends for you to see and the user name is given with each file kazaa finds.

Your use of NetCat shows a lack of knowledge in using it. Your using -t to make it emulate telnet when its not necessary and the entire process should be automated.

Because its not hacking or illegal ill show you.

you can either use a scanner that can output to a file or cut and past the results. heres the output from a simple scanner outputing to a file named c:\kazaa.txt.

Port# 80 on host xxx.149.251.12 is active
Port# 80 on host xxx.149.251.88 is active
Port# 80 on host xxx.149.251.85 is active
Port# 80 on host xxx.149.251.70 is active
Port# 80 on host xxx.149.251.94 is active
Port# 80 on host xxx.149.251.102 is active
Port# 80 on host xxx.149.251.26 is active
Port# 80 on host xxx.149.251.54 is active

or 1214 or both if you so desire

now open a command prompt. type the statement below all on one line and enter:

FOR /F "tokens=5" %X in (c:\kazaa.txt) DO echo GET /http1.0 \n\n |nc -vv %X 80 |more |find "Kazaa-IP" >>newport.txt

"tokens=5" says only use the fifth element in this line, and store it in %X


the output in newport.txt will look something like this

X-Kazaa-IP: xxx.149.251.71:2156
X-Kazaa-IP: xxx.175.243.233:2625
X-Kazaa-IP: xxx.149.251.88:3702
X-Kazaa-IP: xxx.149.251.12:1117
X-Kazaa-IP: xxx.143.174.72:2387
X-Kazaa-IP: xxx.149.251.146:3071

(remember the super node is still only just a user)

If you dont have a port scanner simply select an address range, say.. 202.11.21.0-202.11.21.255. now open a command prompt and type:

FOR /L %X in (2,1,254) DO echo GET /http1.0 \n\n |nc -vv 202.11.21.%X 80 |more |find "Kazaa-IP" >>newport.txt

this way will try to connect to every address in the range at port 80 and take much longer...but it works.

now you can have an entire list of address and ports you can waste your time looking for things that you could find much easier by using Kazaa itself.

oh by the way the above method requires an NT based system. if your using *nix you shouldn't have to be shown.

[er0k]

/me sniffs... well said tedob...

[Sabro]

We've found tons of Kazaa clients not even using these ports, buttttttttttt we won't even
get in to subject of playing with portscanning We'll continue to gain access you continue to surf.80 ..nuff said, sorry for the rest of ya =)

[cyclops07]

different ppl with different oppinions.. i am with instronics, coz now alot of ppl know that their kazaa isn't that safe.. but still, sabro should do something about how he/she present it in ao.

cheers again

[geepod]

i would just like to say that it seems there are varying oppinions on this matter, i would like to apologise to sabro for the way i jumped on him. in retrospect it was a bit harsh.

the information itself was useful and of course that is why we are all here, it was just the way it was interpreted that initially made me flame ! alot of these forum do spend too much time just dissing others instead of focusing on the information we are all after.

I for one am now going to make a concerted efoort to concentrate more on the content than the intent and give people a little more leeway, of course i dont want to see the usual crap about "how do you hack this etc" but will not be so quick to jump in future.

Again i apologise sabro and thanks for the info just present it a little differently next time.

live well and love life to all.

[Tedob1]

Oh contraire:

These are the IPs and ports from which the html listing of files that are shared can be viewed if the user is sharing any :

X-Kazaa-IP: xxx.149.251.71:2156
X-Kazaa-IP: xxx.175.243.233:2625
X-Kazaa-IP: xxx.149.251.88:3702
X-Kazaa-IP: xxx.149.251.12:1117
X-Kazaa-IP: xxx.143.174.72:2387
X-Kazaa-IP: xxx.149.251.146:3071

Hardly port 80. But on ports 80 or 1214 are kept the records as to which port a request must be made to.

I do agree with you that a list of kazaa user can be used for further exploitation. These are usually the most fool-hearted. Some using the same user name for everything.

[maxmouse999]

Kazaa Lite is a sweet hacked version of Kazaa!

[er0k]

oooookkkk.....

[zigzag_8336]

Are we so bored that all we have to talk about is how to "hack" Kazaa? I mean get a life people and start posting about important stuff!