http://blog.grospolina.net/ Katsumi's weblog en Serendipity 1.6-alpha1 - http://www.s9y.org/ Fri, 27 Jun 2008 21:52:47 GMT http://blog.grospolina.net/templates/default/img/s9y_banner_small.png http://blog.grospolina.net/ 100 21 http://blog.grospolina.net/archives/19-sandbox-Fehler-in-der-CWSandbox-bereinigt.html sandbox http://blog.grospolina.net/archives/19-sandbox-Fehler-in-der-CWSandbox-bereinigt.html#comments http://blog.grospolina.net/wfwcomment.php?cid=19 1 http://blog.grospolina.net/rss.php?version=2.0&type=comments&cid=19 nospam@example.com (katsumi) Der Fehler auf einem oder mehreren Servern der CWSandbox, <br /> die eine mail mit dem falschen domain name verschickten,<br /> wurde nun behoben.<br /> Die links verwiesen auf <i>yourwebinterface.com</i> anstatt auf <i>cwsandbox.org</i>.<br /> <br /> Mein besonderer Dank geht an:<br /> Bryan Feeney (safescan.com), <br /> Alberto Moro (blindsec.com),<br /> Chris Lockery (cigna.com) (sehr freundlicher Kontakt),<br /> Masanori Obara (jp.ibm.com/Internet Security Systems KK),<br /> die bereit waren die Situation aus ihrer Sicht zu schildern,<br /> und natürlich <br /> Carsten Willems (cwse.de),<br /> der, obwohl er eigentlich mit dem webinterface nichts zu tun hat,<br /> sich der Sache angenommen hat.<br /> Fri, 27 Jun 2008 23:26:26 +0200 http://blog.grospolina.net/archives/19-guid.html http://blog.grospolina.net/archives/16-sandboxCWSandbox-aktuelle-Liste.html honeyd honeypot malware sandbox http://blog.grospolina.net/archives/16-sandboxCWSandbox-aktuelle-Liste.html#comments http://blog.grospolina.net/wfwcomment.php?cid=16 1 http://blog.grospolina.net/rss.php?version=2.0&type=comments&cid=16 nospam@example.com (katsumi) Die aktuelle Liste der Anfragen, die durch einen fehlerhaften link in den CWSandbox emails an mich gestellt wurden,<br /> könnt ihr ab sofort hier finden:<br /> <a href="http://blog.grospolina.net/exit.php?url=aHR0cDovL2Jsb2cuZ3Jvc3BvbGluYS5uZXQvY3dzL2luZGV4Lmh0bWw=&amp;entry_id=16" onmouseover="window.status='http://blog.grospolina.net/cws/index.html';return true;" onmouseout="window.status='';return true;" title="CWSandbox Liste" target="_blank">CWSandbox Liste</a><br /> <br /> Die Liste enthält alle Anfragen mit korrigierten URLs. Sat, 14 Jun 2008 20:49:08 +0200 http://blog.grospolina.net/archives/16-guid.html http://blog.grospolina.net/archives/15-sandboxCWS-linkliste.html honeyd honeypot sandbox http://blog.grospolina.net/archives/15-sandboxCWS-linkliste.html#comments http://blog.grospolina.net/wfwcomment.php?cid=15 0 http://blog.grospolina.net/rss.php?version=2.0&type=comments&cid=15 nospam@example.com (katsumi) dank honeyd, <a href="http://blog.grospolina.net/exit.php?url=aHR0cDovL2Jsb2cuZ3Jvc3BvbGluYS5uZXQvYXJjaGl2ZXMvMTQtc2FuZGJveC1DV1MteW91cndlYmludGVyZmFjZS5jb20uaHRtbA==&amp;entry_id=15" onmouseover="window.status='http://blog.grospolina.net/archives/14-sandbox-CWS-yourwebinterface.com.html';return true;" onmouseout="window.status='';return true;" title="Artikel auf den sich dieser bezieht ;)">yourwebinterface.com</a>y,grep und awk habe ich eine liste mit den links erstellt,<br /> die bisher bei mir eingeschlagen sind.<br /> <PRE> http://cwsandbox.org/?page=samdet&id=175933&password=zzdwm http://cwsandbox.org/?page=samdet&id=175933&password=zzdwm http://cwsandbox.org/?page=samdet&id=175972&password=ekect http://cwsandbox.org/?page=samdet&id=175972&password=ekect http://cwsandbox.org/?page=samdet&id=176052&password=kdors http://cwsandbox.org/?page=samdet&id=176089&password=pfxcq http://cwsandbox.org/?page=samdet&id=176995&password=pqboe http://cwsandbox.org/?page=samdet&id=177228&password=mjouj http://cwsandbox.org/?page=samdet&id=177228&password=mjouj http://cwsandbox.org/?page=samdet&id=176473&password=zrwiz http://cwsandbox.org/?page=samdet&id=174432&password=exehr http://cwsandbox.org/?page=samdet&id=176947&password=zfcfl http://cwsandbox.org/?page=samdet&id=176947&password=zfcfl http://cwsandbox.org/?page=samdet&id=177367&password=ssiwk http://cwsandbox.org/?page=samdet&id=177071&password=deuyg http://cwsandbox.org/?page=samdet&id=176965&password=bkqfa http://cwsandbox.org/?page=samdet&id=177541&password=wkfhe http://cwsandbox.org/?page=samdet&id=176908&password=rkbdi http://cwsandbox.org/?page=samdet&id=176908&password=rkbdi http://cwsandbox.org/?page=samdet&id=177158&password=kulfn http://cwsandbox.org/?page=samdet&id=176995&password=pqboe http://cwsandbox.org/?page=samdet&id=177665&password=ecwnw http://cwsandbox.org/?page=samdet&id=177564&password=aoytr http://cwsandbox.org/?page=samdet&id=177564&password=aoytr http://cwsandbox.org/?page=samdet&id=177835&password=ucalk http://cwsandbox.org/?page=samdet&id=177829&password=uhxea http://cwsandbox.org/?page=samdet&id=177748&password=jotnx http://cwsandbox.org/?page=samdet&id=177907&password=admlf http://cwsandbox.org/?page=samdet&id=177866&password=seiid http://cwsandbox.org/?page=samdet&id=177925&password=ohjnr http://cwsandbox.org/?page=samdet&id=178078&password=ksfne http://cwsandbox.org/?page=samdet&id=178078&password=ksfne http://cwsandbox.org/?page=samdet&id=174413&password=iemhx http://cwsandbox.org/?page=samdet&id=176858&password=bmvjo http://cwsandbox.org/?page=samdet&id=178160&password=hejah http://cwsandbox.org/?page=samdet&id=178246&password=eixcf http://cwsandbox.org/?page=samdet&id=177877&password=zpazz http://cwsandbox.org/?page=samdet&id=177877&password=zpazz http://cwsandbox.org/?page=samdet&id=177858&password=gufsf http://cwsandbox.org/?page=samdet&id=176858&password=bmvjo http://cwsandbox.org/?page=samdet&id=178304&password=bafcp http://cwsandbox.org/?page=samdet&id=175277&password=fgbjk http://cwsandbox.org/?page=samdet&id=178304&password=bafcp http://cwsandbox.org/?page=samdet&id=178052&password=fnqgq http://cwsandbox.org/?page=samdet&id=177877&password=zpazz http://cwsandbox.org/?page=samdet&id=177877&password=zpazz http://cwsandbox.org/?page=samdet&id=177877&password=zpazz http://cwsandbox.org/?page=samdet&id=177877&password=zpazz http://cwsandbox.org/?page=samdet&id=177858&password=gufsf http://cwsandbox.org/?page=samdet&id=177858&password=gufsf http://cwsandbox.org/?page=samdet&id=177877&password=zpazz http://cwsandbox.org/?page=samdet&id=177764&password=obcet http://cwsandbox.org/?page=samdet&id=177558&password=cioox http://cwsandbox.org/?page=samdet&id=177558&password=cioox http://cwsandbox.org/?page=samdet&id=175276&password=eycku http://cwsandbox.org/?page=samdet&id=177042&password=fqnff http://cwsandbox.org/?page=samdet&id=176205&password=jacga http://cwsandbox.org/?page=samdet&id=177321&password=trgqc http://cwsandbox.org/?page=samdet&id=177507&password=ttnrj http://cwsandbox.org/?page=samdet&id=174363&password=zksal http://cwsandbox.org/?page=samdet&id=174709&password=szubj http://cwsandbox.org/?page=samdet&id=177055&password=cfwta http://cwsandbox.org/?page=samdet&id=169979&password=nnqis http://cwsandbox.org/?page=samdet&id=169979&password=nnqis http://cwsandbox.org/?page=samdet&id=108640&password=edjgq http://cwsandbox.org/?page=samdet&id=108640&password=edjgq http://cwsandbox.org/?page=samdet&id=118355&password=obeqs http://cwsandbox.org/?page=samdet&id=118355&password=obeqs http://cwsandbox.org/?page=samdet&id=118355&password=obeqs http://cwsandbox.org/?page=samdet&id=137678&password=rqqgz http://cwsandbox.org/?page=samdet&id=122380&password=xzxom http://cwsandbox.org/?page=samdet&id=127219&password=fduxz http://cwsandbox.org/?page=samdet&id=137678&password=rqqgz http://cwsandbox.org/?page=samdet&id=157645&password=qtyax http://cwsandbox.org/?page=samdet&id=157645&password=qtyax http://cwsandbox.org/?page=samdet&id=150896&password=engsr http://cwsandbox.org/?page=samdet&id=173136&password=xffyi http://cwsandbox.org/?page=samdet&id=167703&password=oinjc http://cwsandbox.org/?page=samdet&id=169979&password=nnqis http://cwsandbox.org/?page=samdet&id=169979&password=nnqis http://cwsandbox.org/?page=samdet&id=169979&password=nnqis http://cwsandbox.org/?page=samdet&id=178433&password=foout http://cwsandbox.org/?page=samdet&id=178433&password=foout http://cwsandbox.org/?page=samdet&id=178433&password=foout http://cwsandbox.org/?page=samdet&id=178767&password=mwmgb http://cwsandbox.org/?page=samdet&id=178990&password=klhcm http://cwsandbox.org/?page=samdet&id=178990&password=klhcm http://cwsandbox.org/?page=samdet&id=167531&password=yeeuc http://cwsandbox.org/?page=samdet&id=178466&password=jkbhm http://cwsandbox.org/?page=samdet&id=178466&password=jkbhm http://cwsandbox.org/?page=samdet&id=179012&password=lqizd http://cwsandbox.org/?page=samdet&id=179012&password=lqizd http://cwsandbox.org/?page=samdet&id=179012&password=lqizd http://cwsandbox.org/?page=samdet&id=179012&password=lqizd http://cwsandbox.org/?page=samdet&id=178466&password=jkbhm http://cwsandbox.org/?page=samdet&id=179019&password=zkmel http://cwsandbox.org/?page=samdet&id=179019&password=zkmel http://cwsandbox.org/?page=samdet&id=79285&password=bvuea http://cwsandbox.org/?page=samdet&id=79285&password=bvuea http://cwsandbox.org/?page=samdet&id=179069&password=nlkxj http://cwsandbox.org/?page=samdet&id=178506&password=clobf http://cwsandbox.org/?page=samdet&id=178506&password=clobf http://cwsandbox.org/?page=samdet&id=178466&password=jkbhm http://cwsandbox.org/?page=samdet&id=174129&password=baffn http://cwsandbox.org/?page=samdet&id=174129&password=baffn http://cwsandbox.org/?page=samdet&id=179414&password=kmxau http://cwsandbox.org/?page=samdet&id=179416&password=wttwn http://cwsandbox.org/?page=samdet&id=108640&password=edjgq http://cwsandbox.org/?page=samdet&id=89923&password=qgydv http://cwsandbox.org/?page=samdet&id=89923&password=qgydv http://cwsandbox.org/?page=samdet&id=179184&password=etgpp http://cwsandbox.org/?page=samdet&id=179184&password=etgpp http://cwsandbox.org/?page=samdet&id=179184&password=etgpp http://cwsandbox.org/?page=samdet&id=179184&password=etgpp http://cwsandbox.org/?page=samdet&id=179594&password=smycp http://cwsandbox.org/?page=samdet&id=179594&password=smycp http://cwsandbox.org/?page=samdet&id=79377&password=wpzyr http://cwsandbox.org/?page=samdet&id=79377&password=wpzyr </PRE> Sun, 08 Jun 2008 17:40:15 +0200 http://blog.grospolina.net/archives/15-guid.html http://blog.grospolina.net/archives/14-sandbox-CWS-yourwebinterface.com.html sandbox wirres http://blog.grospolina.net/archives/14-sandbox-CWS-yourwebinterface.com.html#comments http://blog.grospolina.net/wfwcomment.php?cid=14 1 http://blog.grospolina.net/rss.php?version=2.0&type=comments&cid=14 nospam@example.com (katsumi) mal vorab: glückwunsch nachträglich an Carsten Willems zum Dipl. Ing.<br /> und ebenfalls gratulation zur geschäftsführung der CWSE GmbH<br /> --------------<br /> <br /> Meine töpfe senden ihre samples auch an die <a href="http://blog.grospolina.net/exit.php?url=aHR0cDovL2N3c2FuZGJveC5vcmc=&amp;entry_id=14" onmouseover="window.status='http://cwsandbox.org';return true;" onmouseout="window.status='';return true;" title="CWSandbox">CWSandbox</a><br /> Wie schon einmal bekam ich eine email, die anstatt des links auf die cwsandbox.org seite<br /> einen auf <i>http://yourwebinterface.com/</i> enthielt.<br /> <PRE> Submitted file: grospolinae5e3e547f9b38c9c1702070c8626e421 Analysis ID: 306955 Sample ID: 175893 Submission ID: 148674 Your comment: Analysis result: Processed Your submitted sample has been successfully analyzed. You can find the report at http://yourwebinterface.com/?page=samdet&id=175893&password=bnzcu. ---------- This analysis was created by CWSandbox (c) CWSE GmbH / Sunbelt Software </PRE> Ich dachte so bei mir,: "na , den fehler hatten wir doch schonmal"<br /> und dann: "hmm, ob die wohl registriert ist?"<br /> <br /> <br /><a href="http://blog.grospolina.net/archives/14-sandbox-CWS-yourwebinterface.com.html#extended">Continue reading "[sandbox] CWS - yourwebinterface.com"</a> Mon, 02 Jun 2008 23:14:10 +0200 http://blog.grospolina.net/archives/14-guid.html http://blog.grospolina.net/archives/13-sandbox-Anubis-wieder-funktionsfaehig.html sandbox http://blog.grospolina.net/archives/13-sandbox-Anubis-wieder-funktionsfaehig.html#comments http://blog.grospolina.net/wfwcomment.php?cid=13 0 http://blog.grospolina.net/rss.php?version=2.0&type=comments&cid=13 nospam@example.com (katsumi) Die Anubis Sandbox ist wieder funktionsfähig.<br /> Leider wurde auf der <a href="http://blog.grospolina.net/exit.php?url=aHR0cDovL2FudWJpcy5pc2VjbGFiLm9yZy9uZXdzLnBocA==&amp;entry_id=13" onmouseover="window.status='http://anubis.iseclab.org/news.php';return true;" onmouseout="window.status='';return true;" title="anubis news page">anubis news page</a> nichts über die Fehlfunktion und die Datenbankprobleme berichtet. Fri, 23 May 2008 02:48:00 +0200 http://blog.grospolina.net/archives/13-guid.html http://blog.grospolina.net/archives/8-sandbox-Probleme-mit-anubis.html sandbox http://blog.grospolina.net/archives/8-sandbox-Probleme-mit-anubis.html#comments http://blog.grospolina.net/wfwcomment.php?cid=8 0 http://blog.grospolina.net/rss.php?version=2.0&type=comments&cid=8 nospam@example.com (katsumi) leider scheint es nach der <a href="http://blog.grospolina.net/exit.php?url=aHR0cDovL2FudWJpcy5pc2VjbGFiLm9yZy9uZXdzLnBocA==&amp;entry_id=8" onmouseover="window.status='http://anubis.iseclab.org/news.php';return true;" onmouseout="window.status='';return true;" title="anubis news" target="_blank">downtime</a> probleme zu geben.<br /> alle eingeschickten binaries werden so beantwortet:<br /> <PRE> The analysis of your file is finished. Unfortunately there was an error while trying to analyze your file. We are sorry for this inconvience. We wish you a nice day, The Anubis-Team </PRE> <br /> das aufrufen bereits erfolgter analysen hat dieses <a href="http://blog.grospolina.net/exit.php?url=aHR0cDovL2FuYWx5c2lzLnNlY2xhYi50dXdpZW4uYWMuYXQvcmVzdWx0LnBocD90YXNraWQ9NDU3OWQwYjE0OWM0OTdjNGIxZTczYzA5YmEwMjBlN2Y=&amp;entry_id=8" onmouseover="window.status='http://analysis.seclab.tuwien.ac.at/result.php?taskid=4579d0b149c497c4b1e73c09ba020e7f';return true;" onmouseout="window.status='';return true;" title="beispiel einer analyse">ergebnis</a>:<br /> <PRE> Report stylesheet not found for version 1.1. </PRE> hmmm... und einen neuen domain name gibts auch... Sun, 11 May 2008 12:16:59 +0200 http://blog.grospolina.net/archives/8-guid.html