#RefRef executed in Perl - Anonymous

AnonOps
AnonHispano
AnonSpain
AnonWiki

• Category

  News & Politics

[Max Govanni]

Ahm... no i know much more vulnerabilitys but RefRef just works with SQLi... i thought if you talk about taking down FB under RefRef you want to use RefRef for it ;-)

[Lester Pollack]

lol... only vuln you know??? hahahaha. SQL = Skilless Quality LameAssAttack

[Lester Pollack]

LoL. You can't argue code with a script kiddie. He doesn't know what it's doing. He can't mod it. He can't make his own. He can just run a perl app from a terminal and type perl vuln.pl -whatevervaribleallowedforthes­cript whatheveraddy enter. And than go to IRC and be like I ma 1337. and 99.9% of the time they don't even know -whatevervaribleallowed so they just run some shitty scripts they don't know how to use. Next time he needs to you 127.0.0.1 . as well as type del *.*

[Nathan Palmer]

I don't need to believe you, I already know how it works. You didn't have to reply to me explaining what it is. That is like if you were gardening and I just started explaining how plants grown and then acted like you would've never known. lol. Telling me what I already know. Re-read what I said because I never said it wasn't an exploit.

P.S. I'm 110% sure it is a JS/SQL vulnerability. I have a copy of #RefRef for studying purposes and I just looked it up to re-check what I already know.

[Max Govanni]

The vulr in Java has not been closed yet. Its a single code making the server crashing itself by opening to many processes. The EXPLOIT is done by a SQL-Vulr using a single packet. Thats it, believe me or not

[Nathan Palmer]

I know that using one single packet won't overload the server, and it's actually a JavaScript vulnerability... A vulnerability which causes excessive bandwidth load and temporarily downs the server. Confusing Java and JS and you're calling me a "n00b"?? Hahaha..

My comment was more or less out there for the people who for downloading programs like this and LOIC and then call themselves hackers. RefRef also doesn't work on most sites anymore if I'm not mistaken.

[Max Govanni]

??????? It depends on website u attack man -_-' some r low secured, some r well secured... ;-)

[Hubarzus]

And let me guess: It's fixed since years.

[Max Govanni]

This is true man. But your target needs to have a SQL-Vulr for this to work.

[Max Govanni]

-_- Refref can't be reason for a bandwitch overload, because all you do is sending a SINGLE packet!! The rest happens on the server, its a vulr. in Java, exploited at the targets server using SQLi. u r the n00b man ;-)