OpenSSH Exploit Out?

[MrLinus]

A couple of thoughts:

If you typo a thread, just send a quick note to a moderator (negative, myself, ennis) and explain what the thread title should be and a link to where the thread can be found. We'll be more than glad to fix it.

Exploits can be found at a variety of places:

http://www.packetstormsecurity.com
http://www.netsys.com
http://www.k-otik.com

I also subscribe to BugTraq and Full Disclosure as methods of finding "exploits" as well as visit as a guest http://www.zone-h.org and poke around the 0-day forum for the occassional "slip". White hats rarely get 0-days unless they run an active honeypot in my experience. You'll have to go somewhat into the edges of the blackhat community to find these things.

Lastly, (and this point is for everyone), we know each other based on the handles we present and how we present ourselves. Many of us are by nature paranoid about the info we give and who we give it out to. We don't know if we are being socially engineer'd by someone if they ask for an exploit, ask for help in solving hack on system at ip x.y.z.a, or maybe they are just an admin trying to do wargames on their play boxes at home to figure something out. Perhaps people should keep this in mind on both sides.

[souleman]

One other point... don't bitch about reds.. you could have sent him a pm and not called him out like that... its just annoying

[S3cur|ty4ng31]

Originally posted here by S3cur|ty4ng31
If anyone wants to neg me that is fine but there is nor reason you cant leave an remark as to why without trying to treat someone as a child.
.

If you read the entire thread you would see Im not bitching about a red. And you could have done the same.

Also I started this thread, I think I have learned enough from what people care about here and I will tailor my topics to that level. I think its a shame but.... my point is this thread is not very constructive anymore and I hope no one was offended but I feel the thread should die.

[souleman]

I agree with your thread and have no problem with it. I didn't agree with your second post.