Full Disclosure: Re: SSL Capable NetCat and more

[Fyodor <fyodor () insecure org>]

On Sat, Mar 26, 2011 at 09:17:22PM +0100, GomoR wrote:
> On Sat, Mar 26, 2011 at 08:10:47PM +0200, Anton Ziukin wrote:
>
> > What can your tool do that Ncat (http://nmap.org/ncat/guide/index.html)
> > can't?
> interestingly, I published version 1.00 of scnc in April 2008, 
> the 27th (and it wasn't the first version to be released):
> http://www.securiteam.com/tools/5RP0O20O0U.html
>
> And more interestingly, ncat has been integrated in nmap SVN
> in May 2008, the 6th:
You seem to be implying that you released scnc 1.00 in April 2008 and
then we copied it a month later with our Ncat.  But the svn log you
referenced was just us moving Ncat between code repositories.  Chris
Gibson and I wrote Ncat years earlier.  Our first public release
(which did include SSL support) was in 2005:

http://seclists.org/nmap-dev/2005/q3/112

Our Ncat certainly wasn't the first reimplementation of Netcat, and it
wasn't even the first to support SSL.  It was just the first to have
all of the features *I* wanted--proxy support (client or server), SSL,
IPv6, connection redirection, connection brokering, portability
(Linux, Windows, Mac, etc.), and more.  See http://nmap.org/ncat/.

> Considering this timeline, pardon me if I fix bugs found in my
> softwares, even when some other tools give the same features.
I think you write some great tools and produce interesting research.
So if you want to write and maintain a Perl implementation of Netcat,
more power to you!  I'm only sending this email to correct the
mistaken timeline.

Cheers,
Fyodor

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/