MemeStreams | MemeStreams Discussion

Create an Account

This page contains all of the posts and discussion on MemeStreams referencing the following web page: On the DoSing and exploiting of Memestreams. You can find discussions on MemeStreams as you surf the web, even if you aren't a MemeStreams member, using the Threads Bookmarklet.

On the DoSing and exploiting of Memestreams
by Acidus at 2:39 pm EST, Nov 20, 2006

Sorry for taking down Memestreams this afternoon. According to Rattle, my pen test sent the load to 80 on the box.

There are some vulns in Memestreams. You should look for more and tell Tom (tom@memestreams.net) or Rattle (rattle@memestreams.net). Industrial Memetics should give out shirts to those who find new ones.

So far we've found:

-Some XSS/XSRF attacks
-HTTP response splitting on a few pages
-Some directory listings
-Some default directories that shouldn't still be there
-Some cryptographic issues