Morphues Exploit Question Answered
I keep hearing of people asking the question "whats with the morphues/kazaa exploit; it's not really hacking?" Heres where their wrong. A person can leech exe, zip, doc, wrd, txt, etc... files from the victims computer. It's a hacking exploit because the victim only intended to share their mp3 files, not there exe. files. You can get full version software and private texts from someone this way.
Please help me out if you like this article and give me points, thx.
Just Thought I'd Give An Heads-Up
Brethren!
If you go to today's edition of www.msn.com, I believe you may find something rather interesting, to say the least, concerning file sharing programs...a rather eye-opening article for computer neophytes..."Online Spies"....
Re: Morphues Exploit Question Answered
Quote:
Originally posted by warp82
I keep hearing of people asking the question "whats with the morphues/kazaa exploit; it's not really hacking?" Heres where their wrong.
You call this HACKING???....so called exploit cut and pasted stra8 from the source:
The Problem:
------------
Morpheus/KaZaA lets its users share their entire hard drive with the world. Letting you
have access to there M$ money files, cookies that have passwords in them ect...
Exploiting the flaw:
You can simply connect to someone in Morpheus or Kazaa and begin downloading a file (I
suggest searching for “.sys” or “.pwl” to get only ppl with all files shared). Then go to DOS
and run netstat (newbies type "netstat -n") There IP address will be connecting from port 1214
so it'll be like this "x.x.x.x:1214". Now, go to http://x.x.x.x:1214 to see a complete
downloadable list of the files you can download.
Exploiting the flaw (a harder way, the 1st seems to easy):
Open your favorite IP scanner (I use SuperScan get it at http://www.foundstone.com) set
it to all ports from 1214 to 1215 chances are anyone with port 1214 open will be sharing on the
Morpheus/KaZaA system...
Closing:
--------
This is a good tool to get the IP # of a person sharing child porn also, do with them
what you will (nuke, nuke, nuke!)... You can contact me on AIM as 'Guerrilla Se7en' or by
email at [email protected] : 1st posted at http://www.angelfire.com/linux/antiwindows/
Re: Re: Re: Re: grrr........
Quote:
Originally posted by Tortured Spirit
...take advantage of a bug or security hole that should not exist in the first place.
...
it shouldn't allow you to share the holde hard drive/nor let it list *.pwl/.passwd files
that's a security hole that shouldn't exist....