EvilZone

Hacking and Security => Hacking and Security => Topic started by: Tsar on May 28, 2011, 06:51:41 AM

Title: Omegle Vulnerability
Post by: Tsar on May 28, 2011, 06:51:41 AM

A freind of mine was saying there is a program out that allows you to intervene in an omegele conversation and act as one of the people talking, take over their camera, and even disconnect them. Makes for some good trolling I guess.

Seems like a pretty big security flaw (although it seems like they have no security to begin with) just thought I'd share. Thoughts?

Title: Re: Omegle Vulnerability
Post by: iMorg on May 28, 2011, 07:48:33 AM

PoC source?

Title: Re: Omegle Vulnerability
Post by: Tsar on May 28, 2011, 08:48:20 AM

Waiting for my friend to come online again to post more info

Title: Re: Omegle Vulnerability
Post by: puddi on May 28, 2011, 12:31:22 PM

 :)

Title: Re: Omegle Vulnerability
Post by: ande on May 28, 2011, 03:29:42 PM

Quote from: PUDDI on May 28, 2011, 12:31:22 PM

:)

Doesn't work

Title: Re: Omegle Vulnerability
Post by: puddi on May 28, 2011, 04:23:10 PM

Quote from: ande on May 28, 2011, 03:29:42 PM

Doesn't work

last time i checked was atleast 6 months ago i think and even then it was barely working. was mostly disconnecting. but i've tried it and it was pretty cool to control ppl.

Title: Re: Omegle Vulnerability
Post by: Tsar on May 28, 2011, 10:23:53 PM

Quote from: PUDDI on May 28, 2011, 04:23:10 PM

last time i checked was atleast 6 months ago i think and even then it was barely working. was mostly disconnecting. but i've tried it and it was pretty cool to control ppl.

Maybe there is an updated version out, my friend showed me a chat log he had from yesterday

Title: Re: Omegle Vulnerability
Post by: FuyuKitsune on May 29, 2011, 10:24:10 PM

Omegle Spy was a MitM. It connected to two people and then passed the messages. It didn't work too well because of the latency involved in 2 connections. Omegle now kicks for having multiple conversations acting simultaneously.

Title: Re: Omegle Vulnerability
Post by: 67pc on June 16, 2011, 07:04:33 PM

http://unauthorizedaccess.wordpress.com/2010/02/12/omegle-man-in-middle-ataque/ (http://unauthorizedaccess.wordpress.com/2010/02/12/omegle-man-in-middle-ataque/)
There is, an tutorial, in portuguese, but google translate do a good work with that.