ajaypal.com - Exposed

Online Ticket Booking vs Fun with Mozilla Firefox

Fri, 15 Sep 2006 12:52:43 -0500

The fun of online ticket booking. No going to agents and listening to their non-sense, no asking questions, just sit in front of your dear computer fire the browser, select Destination, make payment using the Credit Card and lo and behold you have the tickets.

Well not that simple, specially when you are using a computer based on free software (free as in freedom). I use GNU/ Linux, Mozilla Firefox, I dont trust Windows for online transactions [*].

PTU Jalandhar Website XSS Vulnerability

Mon, 29 May 2006 00:01:51 -0500

These days Full Disclosure mailing list is being dominated by XSS vulnerabilities. It is time I should put up my contribution too, for an XSS vulnerability I have known for around 7-8 months.
The site in question ptu.ac.in is of Punjab Technical University, Jalandhar. The URL http://ptujal.org used to refers to the same site.

A Legitimate? way to SPAM using yahoogroups.com

Sat, 18 Mar 2006 08:32:38 -0600

SPAM, I sort of dislike it and prefer my mail box to be free of SPAM. Spam filters like spamassin are very much effective against it. But for around past three-four months I have been receiving a new form of SPAM, in the form of yahoo groups invitations. All sort of marriage alliance invitations, hey I am happily married, please stay away. If I block one another one pops out, even I am helpless.

Script Kidding for the Blind

Tue, 07 Mar 2006 02:39:39 -0600

This is the error log of httpd (apache) on one of the server machines that is about to be replaced very soon, interesting thing is to see how the script kiddy goes about locating vulnerable web applications:

Here is Another Crack Attempt

Sun, 06 Nov 2005 14:32:14 -0600

Now this is something annoying (not interesting) some script kiddy, who may have either compromised 207.157.58.25 or maybe is some silly script kiddie student of http://www.wallace.edu attempted a PHP injection attack on this server.

The kid came from 207.157.58.25 and the kiddo has the scripts stored here. The store house of kiddo seems to be some server of ipower web inc a web hosting company. He has a load of cracking tools stored on the server. I will try to report this to ipower people. Hope they will listen.

One more thing, this service is an almost a regular, you will see this in your logs just before the attack is about to begin. Almost all kiddos use this before they start their dirty work.