Author Topic: Change the number change the rogue malware page  (Read 4699 times)

0 Members and 1 Guest are viewing this topic.

January 13, 2008, 04:16:30 am
Read 4699 times

Edgar Bangkok

  • Special Members
  • Full Member

  • Offline
  • *

  • 61
    • Edgar Internet Tools
The site scanner.malwarealarms.com is hosted same domain spyshredderscanner.com

When site load in browser url change follow this rule
Quote
hxxp://scanner.malwarealarm.com/  key number
  /   

If you change the key number  whit 3 4 5 6  8 ........ 10 .... 13 you load different rogue application pages some with malware also.

Example:
Quote
hXXp://scanner.malwarealarm.com/8/
  or
Quote
hXXp://scanner.malwarealarm.com/5/
  or ........

I used Dirbuster software for find different key number sites and this is report:

DirBuster 0.9.9 - Report
http://www.sittinglittleduck.com
Report produced on Sun Jan 13 10:58:02 ICT 2008
--------------------------------

Quote
hXXp://scanner.malwarealarm.com:80
--------------------------------
Directories found during testing:

Dirs found with a 302 response:

/
/3/
/4/
/8/

Dirs found with a 200 response:

/5/
/9/
/10/
/11/
/12/
/13/


Edgar    ;)

http://edetools.blogspot.com/

January 13, 2008, 02:04:35 pm
Reply #1

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
Thanks for the hint at finding new malware. :)