Printable View
Go download some more software(shortcuts to existing features) if it pleases you. I'll stick to a common sense approach.
All these things are only doing what they've been designed and configured to do and if you'd rather patch and worry, you go ahead. :)
Simulating an out going attack.... yeah, OK :lol:
You're soooo confused.
I havnt read all the threads, but i agree with (balamm)
the point is any half decent programmer can write a program
to get around any firewall anti-virus etc ....that is one of the reasons they have "updates"
EDIT: So your saying the firewalls that didnt pass will never be updated to pass such a test?
go download the updates then...then get back to us... :D
"edit" if your talking about Sygate updates, dont worry, they have none and got raped in the test...
Thats why Balaam is so wound up...lol, his personal fav got raped and OWNED
this is just a simulation type scenario,i just imagine if this was the real thing..You wouldnt know what hit ya
Quote:
Originally posted by balamm+--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (balamm)</td></tr><tr><td id='QUOTE'>Go download some more software(shortcuts to existing features) if it pleases you. I'll stick to a common sense approach.
All these things are only doing what they've been designed and configured to do [/b]
:lol: :lol: :lol:
You dont even understand what DLL hijacking is do you?
This thing can use any application thats allowed to access the net to do its job. It loads the DLL into the target application and hijacks it.
Notepad, your AV software, whatever. If the target application has been allowed access to the net it can use it. Is capturing screenshots an existing featiure of notepad, how about wordpad? I think not.
btw that big list of DLL's you posted? Only one of them is a threat, can you tell us which one it is? Which one you'd block and which ones you'd leave?
<!--QuoteBegin-balamm
So I sat and watched this program for some time to test your theory that it could do something on it's own, that a .dll would magically take the initiative.
Nope, nothing. [/quote]
:rolleyes:
You dont understand any of this do you?
This tester has been coded to require you to press buttons etc. It could have been coded to run without a window, without any buttons, without you knowing about it.
As your sitting here reading this, DLL's are being unloaded and loaded without you doing a thing. Its how windows works.
Do I have to explain this concept a 3rd time or have you grasped it now?
Stick to you 1337 h4x0r SMB over TCP/IP cracking and flaming people on forums. This stuff is waaay over your head.
edited cause balaam backed his shit up where it was needed..
(in the antivirus thread..)
ok people things may have got a bit outa hand here, so lets put it down to a learning experience for everyone..
Thank u all for participating, and i hope youll all participate in my Windows& office exploits. look forward to ya comments and theorys :)
Try to be just a little bit truthfull.Quote:
Originally posted by DVD PIRATE III@10 January 2004 - 20:21
I remember he banned me back in july of last year when he was a mod, cause i didnt agree with him on something and he packed a sad :lol:
You were foul. You were a troll. You had how many logins? And they were all the same, banned for being extremely ignorant and rude. No one enjoyed your act and we had many complaints about you being abusive.
I see you're starting that again ;)
I think you should try to read a little slower. You're missing a lot here.Quote:
Is capturing screenshots an existing featiure of notepad
I'll leave the personal shit to you and the DVD PIRATE. Maybe we can discuss this again when you mature a bit. Probably not though :)
If your memorys so good what was my name back then off the top of your head?
And this was probably one of the logins so give me the name of the original name i had..i bet ya cant remember
anyway why arent you a mod any more?,,i heard but id like to hear your side ...lol
Quote:
Originally posted by balamm+--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (balamm)</td></tr><tr><td id='QUOTE'>I think you should try to read a little slower. You're missing a lot here. [/b]
Such as....?
<!--QuoteBegin-Balamm
Maybe we can discuss this again when you mature a bit. [/quote]
Says the guy who burst onto the thread with this venomous piece of shit post.
If thats what you mean by maturity you can shove it up your arse with the rest of your 'knowledge'!! :lol: :lol: :lol:Quote:
:lol: :lol: :lol: :lol: :lol: :lol:
NOOBS!!
Trojans don't ask you to click buttons so they can take a screen shot while connected to a trusted zone and send it back to a trusted site. No they don't!
Just because it said "next" doesn't mean it's not an "OK" button.
You failed the test, not your firewall.
Hijacked? Hijacked what?
Hijacked your brains....
Or stay stupid and run off and look for some other software to make up for the damage caused by your abuse of illegal substances
PS
Strange how this thread was quite good until you turned up eh? Your a typical internet hard ass balamm. In a real life situation you wouldnt say shit if you had a mouth full of it, but once your behind a computer screen.. my my just looks at your balls grow! :lol: :lol: :lol:
I cant wait till the school holidays are over and all the idiots go back to preschool..
How many trojans out there that use this exploit and how easy would it be for someone to get it onto your system (is it the case that a small file off the net which returns nothing from a virus scan could do such a thing).
If it is as serious as people are making out will the firewall companies that have failed here release patches and / or info on how to configure your firewall to stop this?
Firewall companies patch there products, then the script kiddies patch theres.. B)
The point of this exercise was to show people the possibilities that are out there.
Imagine that this firewall tester I posted here was a key gen that youd been given to use for some software or game etc...you click on the key gen to generate a key, and presto you just got OWNED
Its a very viable possibility..
Out of all the people that tested here only one person kicked up a fuss over it, but dont worry about him hes been demodded cause of a personality disorder(ie, hes never wrong, no matter what)
you can be your own judge on the possibilities and realities
But is switching firewalls, like some suggested they might do, a good thing? Some firewalls performed better at responding to this threat but no doubt some of the ones that failed may be better at responding to other threats and indeed the next threat that appears.
Thats entirely your choice....I cant recommend the perfect firewall to you, only you know what youll feel comfortable with..
Tomorrow it'll be a different virus,exploit, trojan or whatever.The script kiddies/hackers etc keep the firewall creators in a full time job, but at the end of the day theres no absolute safety in a firewall.your firewall might be secure today but by tomorrow morning some one may have written a script that renders your firewall useless and that is a big part of reality in this day and age..
Dont stress too much about this little script I posted mate... :)
I would advise switching whenever the need arises. Attacks keep on getting more sophisticated and this one is definitely one of the more insidous I've come across. Afaik all firewalls have covered the same bases with regards to previous threats.Quote:
Originally posted by sek612
But is switching firewalls, like some suggested they might do, a good thing? Some firewalls performed better at responding to this threat but no doubt some of the ones that failed may be better at responding to other threats and indeed the next threat that appears.
Imho its the ability to deal with this new one that sets firewalls apart at the moment.
The rest of them will catch up in time and then a new attack will appear and we'll all have to switch to the first firewall that can deal with it. Its a bit like an arms race, you have to keep up to date with the latest attack otherwise theres not much point in having a firewall at all.
all this thing is a trojan...
I take it youve just joined the ranks of FAILEDIts designed to test the outbound security of firewalls..As you can see from the thread over 90% of the forum members that participated failed.So dont feel too bad cause your not alone... :P
All..?Quote:
Originally posted by TheFilePirater
all this thing is a trojan...
There was a case in the UK recently where a guy got accused of downloading kiddy pron. When they examined his computer they found that it was infected with a trojan and that someone had uploaded it onto his PC.
He lost his job and his family. I can provide you with a link to the news story if you like.
Apart from that theres more 'normal' stuff. All your passwords and maybe your credit card info as well if anyone in your house uses the PC for internet shopping.
Security is important :)
well, theres no such thing as security on the internet, as long as your pluged in theres always a threat, no matter how many firewalls and anti-virus you run...its always possible
theres only one way to be completey secure, that is to disconnect completey from the internet
You really should check your HOST file to see what it's blocking.Quote:
Originally posted by 99shassan@10 January 2004 - 17:27
Should I get Zonealarm Pro from Kazaa and what is the latest version? I can't get on their website. Same reason as I posted before about being unable to go on the symantec website.
In your address bar enter 206.204.52.5 for symantec
and 208.185.174.44 for zone labs
That is true but..Quote:
Originally posted by TheFilePirater
well, theres no such thing as security on the internet, as long as your pluged in theres always a threat, no matter how many firewalls and anti-virus you run...its always possible
theres only one way to be completey secure, that is to disconnect completey from the internet
It doesnt mean you should leave yourself wide open to any script kiddie who can copy and paste DLL hijacking code into a compiler.
DVD pirate has alot of good points. he is just trying to offer a "possibility", which is the cool part of belonging to this forum. How many other peeps who just download shit with no thought of viruses or trojans, get ahold of info like this? thats why they get owned and we DON'T! we have mass ability to exploit flaws, viruses, etc.... which helps us all in the long run. the same way we seem to stay ahead of RIAA and the like......just my opinion, don't take it personal. :)
:rolleyes:Quote:
Originally posted by leftism+11 January 2004 - 02:05--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (leftism @ 11 January 2004 - 02:05)</td></tr><tr><td id='QUOTE'>:lol: :lol: :lol:Quote:
Originally posted by balamm@
Go download some more software(shortcuts to existing features) if it pleases you. I'll stick to a common sense approach.
All these things are only doing what they've been designed and configured to do
You dont even understand what DLL hijacking is do you?
This thing can use any application thats allowed to access the net to do its job. It loads the DLL into the target application and hijacks it.
Notepad, your AV software, whatever. If the target application has been allowed access to the net it can use it. Is capturing screenshots an existing featiure of notepad, how about wordpad? I think not.
btw that big list of DLL's you posted? Only one of them is a threat, can you tell us which one it is? Which one you'd block and which ones you'd leave?
<!--QuoteBegin-balamm
So I sat and watched this program for some time to test your theory that it could do something on it's own, that a .dll would magically take the initiative.
Nope, nothing.
You dont understand any of this do you?
This tester has been coded to require you to press buttons etc. It could have been coded to run without a window, without any buttons, without you knowing about it.
As your sitting here reading this, DLL's are being unloaded and loaded without you doing a thing. Its how windows works.
Do I have to explain this concept a 3rd time or have you grasped it now?
Stick to you 1337 h4x0r SMB over TCP/IP cracking and flaming people on forums. This stuff is waaay over your head.[/b][/quote]
Mate what are you on about.
A trojan,dll has to be executed/loaded somewhere along the line mate & if your system & firewall are setup properly when it happens you stop it if the trojan or its actions havnt already been stoped throught another kind of monitor for changes to your system.As balamms saying also as you've proven with the same firewalls failing then passing after a few changes in the settings. :)
Well, I installed the firewall yesterday, but I still failed. What settings should I enter?
@ Ck-Uk
Balaam is well known in this forum as someone who can never admit hes wrong..Hence the reason hes no longer a mod(Attitude ajustment is needed)..he came into this thread and immediately abused everyone by calling everyone a noob, then he went into the antivirus test thread and did exactly the same thing.
he basically said the virus thing didnt work yet when i asked him to start executing the viruses and tell me what happened, he dropped his nuts :P .
This test was designed to simulate a outgoing transmission and he choked when he failed the test.Reason he choked is he likes everyone to think hes a "master" authority on every subject known to man...there isnt room in this forum for every member and balaams ego.
His wall failed and he got dirty on it..Outsmarted by something so simple that he couldnt handle it(or his ego couldnt)
As for the matter of Dll's, the test works like this, if theres a browser window open then the process will attemt to piggy back on that to access the internet,if youve ticked the box that says "Always allow Internet Explorer to access the net" then it has nothing to stop it from accessing the net.If by some chance your firewall stops the process from using IE, then it will attempt to piggyback on any process you have running on your computer.and if any of those processes have Internet privlages then itll use them to access the net.OWNED
Nobody posted that there antivirus/antitrojan programs picked this up when they downloaded the test on to there computer right?ok
The point of this exercise was to show people the possibilities that are out there.
Imagine that this firewall tester I posted here was a key gen that youd been given to use for some software or game etc...you click on the key gen to generate a key, and presto you just got OWNED..Why cant people see that you ask? because there ego's are blocking there vision
98% of the forum got OWNED hardcore by this simulation and unfortunately there were a few sore losers that couldnt deal with it..A very clever script kiddie could have made this simulation so that you dont need to execute it ..itll execute itself or by some other means.And people refuse to see it like that..
I feel sorry for people that have ego problems cause they could have so much more to offer if they just let themselves, be themselves
Thats true mate, So obviously 98% of the forum havent got there firewalls configured or whatever..In the real world theres no second chances..if that was a real trojan do you think its gonna stop so you can change your settings?ROFLMAO!!!! :lol: :lol: :lol:Quote:
Originally posted by ck-uk@11 January 2004 - 21:59
A trojan,dll has to be executed/loaded somewhere along the line mate & if your system & firewall are setup properly when it happens you stop it if the trojan or its actions havnt already been stoped throught another kind of monitor for changes to your system.
As balamms saying also as you've proven with the same firewalls failing then passing after a few changes in the settings. :)
I highly doubt it.. B)
Anyway all I know is that I bought a test simulation here for enlightning everyone to what is avalable and I ended up OWNING
this test raped just about everyone because people dont know how to configure there firewalls etc
same with the virus tester
Quote:
Originally posted by ck-uk
A trojan,dll has to be executed/loaded somewhere along the line mate & if your system & firewall are setup properly when it happens you stop it if the trojan or its actions havnt already been stoped throught another kind of monitor for changes to your system.As balamms saying also as you've proven with the same firewalls failing then passing after a few changes in the settings
All trojans have to be executed once.What he was saying is that once its executed you then need to start pressing buttons to get the DLL's to load/unload.
Whilst you've been browsing this forum IE has been loading and unloading DLL's but you havent explicitly told it to have you?
Most firewalls dont even provide DLL authentication, so it doesnt matter how you configure them, they simply dont have that functionality.
So generally I uninstalled Norton Personal Firewall for Zonealarm for no reason? Thats so fucking annoying :angry:
No offense but Nortons Internet Security is gay...you did ya self a favour
I wish someone can conenct to my ip :lol:
As I said before you ignorant arrogant little fuck :angry: , it got out because I allowed it out. :angry:
You don't even know how this shit works. You've flipped flopped back and forth between it is a trojan, it isn't a trojan, it is a trojan.. Make up your mind.
If you payed for this, you got screwed. The program they use and call their own is free from MS and I have it installed. You want it? Figure it out your self dick.
Shove this squarely up your abused ass
http://members.shaw.ca/fourum/fuckyou.jpg
Anyone with sygate should get the same results. Just say NO.
Oh and to answer to your fucked up little name game, I have the entire database from that time. every PM, every post. Your point? :angry:
Well early tests show that blackice has failed :(
Now for the holy grail: Kappersky anit hack
Could you pm me the key pleaseQuote:
Zone Alarm Pro 4.5.538 with Web Filtering is the latest..download the trial and ill pm u a key if ya want
Thanx
Pm sent mate
Balaam , your behaviour is totally unacceptable..this forum is not the place to vent your frustrations..i suggest you sort your attitude out,because no one wants to see your bad temperedness..
You used to be a mod, so you should be setting an example instead of carrying on in this childish manner.And if your not a mod now , youve just shown the whole forum why...
what an embarassment.... :01:
I never tested BlackIce on this test as ive heard a few bad reviews concerning there outbound protectionQuote:
Originally posted by Neo 721@12 January 2004 - 02:51
Well early tests show that blackice has failed :(
Now for the holy grail: Kappersky anit hack
You can read about it here---------> http://grc.com/lt/leaktest.htm
And your existence is unacceptable :angry: What forum threw you out this time? That's why you're back here again isn't it? <_<
Your attitude swings like a woman with PMS. You'd say or do anything for a little sympathy though I'm sure. Just manipulate your way out of another problem you've caused, shit you've said. Well, f**k U! I don't forget. You said crap so here we are. Let's dance f**ker.
Address the facts. You've been shown to be full of shit on this one.
New excuse is? :angry: Back up your mouth idiot.
:'( :'( peace??
u both acting like kids what example is that to kids who use this forum, for god sake grow up.
if black ice failed aint that what the government use or is it something else?
Look at your 1st post in this thread balamm. The only person spoiling for a fight or causing problems is you.Quote:
Originally posted by balamm
Just manipulate your way out of another problem you've caused, shit you've said. Well, f**k U! I don't forget. You said crap so here we are. Let's dance f**ker.
This thread was pretty relaxed before you showed up <_<
Well for one I dont use keygens or exe from anywhere other than ShareReactor. Untill someone can truly make something hostile and shove it into a media file then I havn't got much to worry about. Though I no longer use any MS media software any longer generally. Secondly I have NO personal information on my computer, its on one that has NO internet. Thirdly I am glad to see Zone Alarm did well since that is what I use it for, outbound protection since being behind a router is the best inbound protection I can imagine.
Blackice is meant to be used by a lot of big corporations etc..I know my ISP uses it ..but check out the link i posted to grc.com and see blackices lame excuse concerning its outbound protection
heres the link to the lame excuse they gave anyways http://grc.com/lt/leaktest.htm
Edit..oh I see Balaams had a few too many drinks.. go to bed , cause no one wants to hear from you..youve got nothing positive to contribute to this thread so go to bed or something..your just making a bigger idiot of yourself
ps you couldnt fight your way out of a paperbag in the state your in