KazaaLite/Kazaa Backdoor

Printable View

September 6th, 2003, 04:19 PM
Szafran

KazaaLite/Kazaa Backdoor

http://www.kazaa.com/us/images/h_logo.gif
Now ive heard about a backdoor in kazaa lite and/or all other [gloworange]KAZAA[/gloworange] products. What it is suppost to do is allow a user to connect to a [gloworange]Kazaa/Kazzalite[/gloworange] User's [glowpurple]"My Shared Folder"[/glowpurple] simply by using thier IP in and addressbar. Then a belive a backbutton or something is displayed and a user caan click back to move back a folder frm the [glowpurple]MY Shared Folder[/glowpurple] . This backdoor is suppost to allow all user on [gloworange]kazaa[/gloworange] to access the entire C Drive of another User. I would Like To know If This is true and/or if there is a way to protect yourself w/ a firewall. PLEASE HELP
September 6th, 2003, 04:31 PM
goozle

never heard of it.

you used to be able to browse users shared folders by typing they ip addy and port in the address bar,but nothing else,never access they C drive unless they have it shared.lol
September 6th, 2003, 04:48 PM
Drunk On Duvel

Yup, it worked. If I share just a folder, you see the contents of the folder.

If you share "c:\" you get the contents of "c:\" but are unable to browse subdirectories.

Here is a screenie:
September 6th, 2003, 07:21 PM
Szafran

IS the page that is displayed when you put in their IP a page generated by Kazaa?
September 6th, 2003, 07:36 PM
Drunk On Duvel

Quote:

IS the page that is displayed when you put in their IP a page generated by Kazaa?

Yes, KaZaA is a server and client software, so yes, the page is displayed from the KaZaA server and everything is indexed that you specified to share. Kinda like an index page that is returned to a browser when browsing FTP or a web site directory. If you type

http://123.456.789:kazaaport then you will see the contents of what you shared. I am sure if there is a way to share your files then there can be ways to explore the rest of sombody's computer if smart and crafty enough, but too bad I am not crafty or smart.

As for KaZaA being a "backdoor" I have not seen anything can can be construed as a backdoor, but if somebody were to decompile the software and add extra code to add some kind of extra "functionality" would not be extremely difficult to an experinced programmer or reverse engineer.
September 6th, 2003, 07:41 PM
Szafran

would this be like what music cpmpanys use to messup your songs and/or view your songs?
September 6th, 2003, 07:46 PM
Drunk On Duvel

heh, I din't know. I can think of several ways. Simply download some songs, grab the IP and send the IP to be subpenaed. As for messing songs up, it would be easy to simply create a bogus file and share it. As for messing up "your songs" directly, I do not know if you can remotely alter files.
September 7th, 2003, 01:19 AM
Szafran

i would like to know if the page that is diaplayed when you visit the users IP can be alterend? Like maybe it is located in a DLL or something on my computer.
September 7th, 2003, 01:26 AM
Drunk On Duvel

I do not know. Open a debugger and find out.
September 7th, 2003, 02:47 AM
Drunk On Duvel

goozle, whatever you say.
September 7th, 2003, 10:53 AM
Nokia

Maybe music companys could do this to look in your shared folder, see that you have downloaded music , next thing you know your hauled up for illegaly downloading music?
September 7th, 2003, 11:16 AM
TELNET_OBSESSED

Ok after reading this information, were is this kazaa site? what's the addresse?

and secondly i would like to say that the banning of <n.3.c>[i] was in my point of oppinion was uncalled for.
He was provoked, but i ain't gonna go into those details, as i do not wish to be subjected to that sort of abuse..........

And thirdly the person or persons involved in hacking he's computer and crashing it, your details were written down, and she is currently in the process of seekin revenge.

and fourthly, thumbs up to ANTIONLINE for this killer place.
September 7th, 2003, 04:33 PM
Drunk On Duvel

TELNET_OBSESSED: I did a test from my own box. I shared the entire C:\ drive to see what it would do. Then instead of using the Kazaa client I used a web browser which returned an index. Nobody was exploited or harmed in this experiment.

I also tried an FTP and Telnet client with no success, but I assume smarter people can figure that out. One more thing, what was that you were talking about someone getting banned and you are seeking revenge etc.?
September 7th, 2003, 05:26 PM
TELNET_OBSESSED

NO I ARN'T SEEKING REVENGE, THE PERSON WHO IS SEEKING REVENGE........<N.3.C>[I] IS THE PERSON SEEKING REVENGE.
IM NOT HERE TO CAUSE TROUBLE OR TO GET INTO TROUBLE, IM HERE TO LEARN AND LEARN I AM DOING.....
SO DON;T SHOOT THE MESSENGER, I WAS ONLY EXPRESSING MY OPINION ON THAT SUBJECT, AND IF THAT'S A CRIME THEN LOCK ME AWAY.
aNYHOW I WOULD LIKE TO KNOW WERE THIS KAZAA SITE IS???
AS I HAVE HEARD AND READ SOM MUCH ABOUT IT, BUT I HAVE NO IDEA ON WERE TO FIND THIS SITE?????
September 7th, 2003, 05:42 PM
Drunk On Duvel

ugh.... you misunderstood everything. Gawd some people....
September 8th, 2003, 04:40 PM
Szafran

Would anyone have any idea of where in my computer is the page that is displayed in a web browser when someone visits my IP in a web browser?
September 8th, 2003, 04:50 PM
fl34bit3

For someone to just type in your ip addy and for them to get something you would need to be running a webserver on your computer if im not mistaken.

PeacE
-BoB
September 8th, 2003, 04:52 PM
Drunk On Duvel

Quote:

Would anyone have any idea of where in my computer is the page that is displayed in a web browser when someone visits my IP in a web browser?

It's KaZaA. It's a server. When you share files, you open it up to the public. It's not an exploit, and does not take a rocket scientist to see what you have. If you do not want the RIAA or big brother to see what you have, do not use that program.

I do not know how else to explain it to you. In fact, I am done. Somebody else take over.
September 8th, 2003, 06:21 PM
quizz

telnet_obssesed:
1) Download AO newsletter #8 (I think it's 8)and read why Caps are really annoying
2) Use http://google.ca and do a quick search on kazaa or kazaalite
3) Don't forget to pick up a copy of AO newsletter #9 :P
September 8th, 2003, 06:40 PM
CXGJarrod

Quote:

Originally posted here by Drunk On Duvel
Yup, it worked. If I share just a folder, you see the contents of the folder.

If you share "c:\" you get the contents of "c:\" but are unable to browse subdirectories.

Here is a screenie:

Have you tryed this on an external IP address? I am just wondering if this is something that you can only see if you have local permissions. Like that webpage script that showed the contents of your C: drive. The person who owned the webpage could not seee your c drive, but you could (because you have permissions to it) see the contents of your c drive. (It freaked people out)

Edit: I could not get this to work over the internet.