security issue

[5RC5TC]

I was on another forum and came across this post. Who's hard drive is this?
When I look at the post I see my own hard drive. At first i though I'd been hacked but then I realized that everyone sees their own hd... not mine. My question is... how did he do it? And is my/your data safe? I have a Linksys router and I'm using the firewall that comes with XP

 

[Woodie]

OK, you made me do it. My HD shows up also...at least I get a popup when I double-click on a folder.

I'm at work, behind a commercial-grade FW...

--Woodie

 

[5RC5TC]

at least I can't access the admin files/folders. but how the hell did this guy do this? It's really bothering me!

 

[gogeeta13]

edit: It's all done with smoke and mirrors. Guess what this is

 

[ktwebb]

My guess would be that the guy just embedded viewing of the local machine that hits the page. Browsers can be used to view HDD contents as I am sure everyone knows but the fact that it came up so fast (instantly in my case) leads me to believe that it is just code posting local contents through on the page using IE or nutscrape.

 

[5RC5TC]

did you view the code? I did but couldn't find the line pertaining to the embedding. If you see it can you post it?

 

[gogeeta13]

<iframe src="c:\"width="100%" height="90%" >

 

[n0cmonkey]

I didnt see the code there, but thats some nasty html. This is an old trick. Not really a big deal. It may have something to do with the file:// type thing at the beginning of the address line when you browse your local drive.

 

[gogeeta13]

<< I didnt see the code there, but thats some nasty html. This is an old trick. Not really a big deal. It may have something to do with the file:// type thing at the beginning of the address line when you browse your local drive. >>



Read my post, it is right above yours. That is what he uses.

Also, try my link i made. If you are running 98 or XP, you will see your windows directory at the top. If you run NT or 2k, you will see your windows at the bottom.

This trick is as old as time itself. The funny thing is, the rich BMW owners probably all just took their PCs to bestbuy and compusa to get virus software installed. LOL

 

[n0cmonkey]

<<

<< I didnt see the code there, but thats some nasty html. This is an old trick. Not really a big deal. It may have something to do with the file:// type thing at the beginning of the address line when you browse your local drive. >>



Read my post, it is right above yours. That is what he uses.

Also, try my link i made. If you are running 98 or XP, you will see your windows directory at the top. If you run NT or 2k, you will see your windows at the bottom.

This trick is as old as time itself. The funny thing is, the rich BMW owners probably all just took their PCs to bestbuy and compusa to get virus software installed. LOL >>



You posted while I was typing, thats why I missed it

I saw that trick (never looked for the code though) a few years ago when I first got on the net. It helped me get into parts of the hard drives in the computer labs that I wasnt supposed to be able to see

 

[gogeeta13]

<<

<<

<< I didnt see the code there, but thats some nasty html. This is an old trick. Not really a big deal. It may have something to do with the file:// type thing at the beginning of the address line when you browse your local drive. >>



Read my post, it is right above yours. That is what he uses.

Also, try my link i made. If you are running 98 or XP, you will see your windows directory at the top. If you run NT or 2k, you will see your windows at the bottom.

This trick is as old as time itself. The funny thing is, the rich BMW owners probably all just took their PCs to bestbuy and compusa to get virus software installed. LOL >>



You posted while I was typing, thats why I missed it

I saw that trick (never looked for the code though) a few years ago when I first got on the net. It helped me get into parts of the hard drives in the computer labs that I wasnt supposed to be able to see >>



LOL, good idea. I never thought of that one. Personally, why mess with web interfaces when you can just l0ft the .sam files and login as admin. But hey, maybe that's just me

 

[n0cmonkey]

<<

<<

<<

<< I didnt see the code there, but thats some nasty html. This is an old trick. Not really a big deal. It may have something to do with the file:// type thing at the beginning of the address line when you browse your local drive. >>



Read my post, it is right above yours. That is what he uses.

Also, try my link i made. If you are running 98 or XP, you will see your windows directory at the top. If you run NT or 2k, you will see your windows at the bottom.

This trick is as old as time itself. The funny thing is, the rich BMW owners probably all just took their PCs to bestbuy and compusa to get virus software installed. LOL >>



You posted while I was typing, thats why I missed it

I saw that trick (never looked for the code though) a few years ago when I first got on the net. It helped me get into parts of the hard drives in the computer labs that I wasnt supposed to be able to see >>



LOL, good idea. I never thought of that one. Personally, why mess with web interfaces when you can just l0ft the .sam files and login as admin. But hey, maybe that's just me >>



I didnt know that much then. Hadnt touched NT. Plus, installing l0ft, getting the permissions to get it to run and everything else would have been too much work for a lazy college student, not to mention beyond my skills

 

[gogeeta13]

<<

<<

<<

<<

<< I didnt see the code there, but thats some nasty html. This is an old trick. Not really a big deal. It may have something to do with the file:// type thing at the beginning of the address line when you browse your local drive. >>



Read my post, it is right above yours. That is what he uses.

Also, try my link i made. If you are running 98 or XP, you will see your windows directory at the top. If you run NT or 2k, you will see your windows at the bottom.

This trick is as old as time itself. The funny thing is, the rich BMW owners probably all just took their PCs to bestbuy and compusa to get virus software installed. LOL >>



You posted while I was typing, thats why I missed it

I saw that trick (never looked for the code though) a few years ago when I first got on the net. It helped me get into parts of the hard drives in the computer labs that I wasnt supposed to be able to see >>



LOL, good idea. I never thought of that one. Personally, why mess with web interfaces when you can just l0ft the .sam files and login as admin. But hey, maybe that's just me >>



I didnt know that much then. Hadnt touched NT. Plus, installing l0ft, getting the permissions to get it to run and everything else would have been too much work for a lazy college student, not to mention beyond my skills >>



Nah, I would just copy the .SAMs out of the backup folders, and l0ft back at home

hmm, I think I will stop talking about this now, it will give the script kiddies too many ideas

Good day