![Waraxe IT Security Portal](themes/Helius/images/logo.jpg) |
|
![](themes/Helius/images/7px.gif) |
![](themes/Helius/forums/images/top_left.gif) |
Menu |
![](themes/Helius/forums/images/top_right.gif) |
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
![](themes/Helius/forums/images/top_left.gif) |
User Info |
![](themes/Helius/forums/images/top_right.gif) |
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 92
Members: 0
Total: 92
|
|
|
|
|
![](themes/Helius/forums/images/top_left.gif) |
Full disclosure |
![](themes/Helius/forums/images/top_right.gif) |
|
|
![](themes/Helius/images/top_left.gif) |
|
![](themes/Helius/images/top_right.gif) |
![](themes/Helius/forums/images/logo1.gif) |
|
![](themes/Helius/forums/images/logo2.gif) |
IT Security and Insecurity Portal |
|
![](themes/Helius/forums/images/top_left.gif) |
WTF is "Return Flushing" or "RE eploit" |
![](themes/Helius/forums/images/top_right.gif) |
Posted: Sat Jun 03, 2006 6:02 pm |
|
|
waraxe |
Site admin |
![Site admin Site admin](modules/Forums/images/ranks/rangad.gif)
![](modules/Forums/images/avatars/gallery/091.gif) |
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
So i stumbled to this info page @ wikipedia:
http://en.wikipedia.org/wiki/Directory_traversal
Code: |
Current Method Also Known As (Return Flushing, RE Exploit) Due to most vulnerabilities being recently patched as such sites as http://milw0rm.com have been released publically, most attackers have been forced to develop exploits of their own. One such method is return flushing, or re'ing. This attempt consist of a parallel paradox. On the attackers computer, the request points to a file that does exist in the directory specified. Usually the attacker specially configures his or her own directories so they are unique and are rarely affiliated with the server's directories. The file usually included in the get request is cmd.exe, or other shell applications. The failed get request results in a resolvement, bypassing the typical 404 error and/or 403 error pages, and resolves the request to the base of the domain/server, revealing all the content resideing within the domain/server. No matter what utility/environment is being utilized the domain/server. This accounts for several environments such as Apache.
|
Can someone explain me details, so I can understand? ![Rolling Eyes](modules/Forums/images/smiles/icon_rolleyes.gif) |
|
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/top_left.gif) |
|
![](themes/Helius/forums/images/top_right.gif) |
Posted: Sun Jun 04, 2006 8:56 am |
|
|
y3dips |
Valuable expert |
![Valuable expert Valuable expert](modules/Forums/images/ranks/rang5.gif)
![](modules/Forums/images/avatars/8036231014492b12c4336d.jpg) |
|
Joined: Feb 25, 2005 |
Posts: 281 |
Location: Indonesia |
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
dont know who wroet that..
i think in wiki u can edited it...
same like you, could anyone tell me about Return Flushing, RE Exploit ..
![Smile](modules/Forums/images/smiles/icon_smile.gif) |
|
_________________ IO::y3dips->new(http://clog.ammar.web.id); |
|
|
|
Posted: Fri Jun 16, 2006 7:58 am |
|
|
shai-tan |
Valuable expert |
![Valuable expert Valuable expert](modules/Forums/images/ranks/rang5.gif)
![](https://www.waraxe.us/images/blank.gif) |
|
Joined: Feb 22, 2005 |
Posts: 477 |
|
|
|
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/spacer.gif) |
![](themes/Helius/forums/images/post_corner.gif) |
|
lol You should have seen the Wikipedia entry for Hurd and Ututo.... Fixed now thankfully. |
|
_________________ Shai-tan
?In short: just say NO TO DRUGS, and maybe you won?t end up like the Hurd people.? -- Linus Torvalds |
|
|
|
www.waraxe.us Forum Index -> All other security holes
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|