40 likes | 222 Views
Myspace Account Enumeration. Tod Beardsley. AHA 0-Day Carnival #0x0000 August 30, 2006. MySpaceIM Authentication -. An invalid account. Server: lc1challengeARMJUUTIPM<br>cIwp3z886PsAZeITl/+ooWkObO5rQ2VV0x8MfFQNPamm5qu4nWwr/jMPbzbjMno7yFfSKvE4KGfVA29oC851INg== id1final Client:
E N D
Myspace Account Enumeration Tod Beardsley AHA 0-Day Carnival #0x0000 August 30, 2006
MySpaceIM Authentication - An invalid account Server: \lc\1\challenge\ARMJUUTIPM\nc\Iwp3z886PsAZeITl/+ooWkObO5rQ2VV0x8MfFQNPamm5qu4nWwr/jMPbzbjMno7yFfSKvE4KGfVA29oC851INg== \id\1\final\ Client: \login2\196609\username\hdm@metasploit.com\response\j+2dqxeWsKHfgCDqMh4a8bRQkjRUUrI8xFC4uag2a7EnqK8bm6VUsqCMoIovpiU5D+tA \keylen\128\clientver\404\status\100\id\1\final\ Server: \error\\err\259\fatal\\errmsg\The supplied email address is invalid \id\1\final\
MySpaceIM Authentication + A valid account Server: \lc\1\challenge\NVTZMRYLIP\nc\eembUpw2+aqcjPXmk2FQde6ZrL6dcevCRfD8tCucQXbs8QeEodakSyy2h+7Gt6DjXc1jY/kxBMA+5wuaCu+0TA==\id\1\final\ Client: \login2\196609\username\druid@caughq.org\response\pAkvIFuP6Nz9oQbDvh13Rg6okZJ4rtUYukbZrrkn9Vtn6Py8HyjJM4M8k4lfjfYLBQ==\keylen\128\clientver\404\status\100\id\1\final\ Server: \error\\err\260\fatal\\errmsg\The password provided is incorrect. \id\1\final\
mimenum.py MySpace IM Enumerator Available at: http://www.planb-security.net/aha/mimenum.py