[Owasp-Mumbai] TCS.com -- something wrong.

Soi, Dhruv dhruv.soi at owasp.org
Sun Feb 7 07:11:15 EST 2010


Here is the sequence that I observed:

 

1.     www.tcs.com and tcs.com were found to be pointing to different IPs.
www.tcs.com was working properly with
http://www.tcs.com/homepage/Pages/default.aspx as default home page and
tcs.com was available for sale. 

2.     After a while, Rakshit pointed that both the domains had same IP
address but tcs.com was still "available for sale" while www.tcs.com was
working. Till this time, it appeared to be some configuration error.

3.     Waited for some more time, both the domains were available for sale.
With all the files deleted from the web root of www.tcs.com. I tried
http://www.tcs.com/homepage/Pages/default.aspx  and
http://www.tcs.com/careers to get runtime error and page not found error
respectively. Couple of their other portals like nextstep etc. were throwing
error to the browser while accepting ssl certificates. Not sure, if it is
usual or appeared today only.

 

The domain sale page had a contact listed abed_uk at hotmail.com. I googled
this email account to find it listed as technical contact for many domains
with a similarity that all those domains were registered at Network
Solutions and obviously had same "available for sales" page set as home
page. Seems that their server(s) was compromised for few hours today.

 

 

 

From: owasp-mumbai-bounces at lists.owasp.org
[mailto:owasp-mumbai-bounces at lists.owasp.org] On Behalf Of Ajay k
Sent: 07 February 2010 16:53
To: Raxit Sheth; BarcampAhmedabad; owasp-bangalore at lists.owasp.org;
owasp-delhi at lists.owasp.org; bangalore_barcamp at yahoogroups.com;
BarCampMumbai2; owasp-mumbai at lists.owasp.org
Subject: Re: [Owasp-Mumbai] TCS.com -- something wrong.

 

Tcs.com is back!!!!  ,Did anybody figure out what was wrong ?

On Sun, Feb 7, 2010 at 12:37 PM, Soi, Dhruv <dhruv.soi at owasp.org> wrote:

Strange. It was different when I last did. Could be under maintenance or
misconfiguration, doesn't seem to be defacement though! Rest TCS folks on
the lists can confirm.

 

From: Raxit Sheth [mailto:raxitsheth2000 at gmail.com] 
Sent: 07 February 2010 12:09
To: dhruv.soi at owasp.org
Cc: owasp-mumbai at lists.owasp.org; owasp-bangalore at lists.owasp.org;
BarCampMumbai2; BarcampAhmedabad; bangalore_barcamp at yahoogroups.com;
owasp-delhi at lists.owasp.org
Subject: Re: [Owasp-Mumbai] TCS.com -- something wrong.

 

Dhruv

both are same, dig shows both resolve to same ip. 

raxit

On Sun, Feb 7, 2010 at 11:52 AM, Soi, Dhruv <dhruv.soi at owasp.org> wrote:

Seems some DNS issue with different records. www.tcs.com works but tcs.com
is pointed to some other IP. IP looks to be of the same range as NS for
tcs.com so hopefully all is well. Sysadmin might not find good appraisal
this season!

 

From: owasp-mumbai-bounces at lists.owasp.org
[mailto:owasp-mumbai-bounces at lists.owasp.org] On Behalf Of Raxit Sheth
Sent: 07 February 2010 11:31
To: owasp-mumbai at lists.owasp.org; owasp-bangalore at lists.owasp.org;
BarCampMumbai2; BarcampAhmedabad; bangalore_barcamp at yahoogroups.com
Subject: [Owasp-Mumbai] TCS.com -- something wrong.

 

Hi

Just came to know from few frnds, something wrong with TCS.com

Any thoughts ?

We love Mumbai
Raxit Sheth
www.m4mum.com -Mumbai city bus on Mobile, without sms/gprs

 


_______________________________________________
OWASP-Mumbai mailing list
OWASP-Mumbai at lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-mumbai




-- 
Ajay K

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-mumbai/attachments/20100207/aad2f946/attachment.html 


More information about the OWASP-Mumbai mailing list