Welcome to ASP`s Morpheus


Release 0.1

have you heard of Morpheus?

Morpheus is a napsterlike software used on Windows. It shares files via webpages! As a webserver mostly on port 1214:

if someone connects like this:

24.08.01 18:04:02 Access from host 217.82.x.x to port tcp/1214 allowed/rejected.
24.08.01 18:04:04 Access from host 217.82.x.x to port tcp/1214 allowed/rejected.

you get files like this

Green Day - Hitchin' a ride.mp32757667
Metalica - I Disappear- Mission Impossible 2 .mp33044180
My Music - greenday, time of your life.mp32476191
b hse onkelz - der nette mann.mp32813829
GreenDay - Nimrod - 01 - Nice Guys Finish Last.mp32031096
Böhse Onkelz - Bomberpilot (1).mp33147778

here a line form the musiccity webpage

  • Fully encrypted to protect privacy, transmissions and unauthorized intrusions

A joke! :-)

14.Work-II:A/SYS/Demos> tcpscanner -p 1214 217.82.x.x
TCPScanner 0.42 by Cyborg © 2001 of host: xxxxxxx.dip.t-dialin.net
TCPScan starts
[TCP] Port 1214 open 
TCPScan ends
tcpscanner quits.
14.Work-II:A/SYS/Demos> netcat 217.82.x.x 1214
PASWD
HTTP/1.0 501 Not Implemented
X-Kazaa-Username: xxxxxxxx
X-Kazaa-Network: MusicCity
X-Kazaa-IP: 217.82.x.x:1214
X-Kazaa-SupernodeIP: 144.141.42.x:1214

14.Work-II:A/SYS/Demos> nslookup  144.141.42.x
Server:  rzfs2.rz.tu-bs.de
Address:  134.169.10.20

Name:    xxxxxx.pacsw.navy.mil
Address:  144.141.42.x

Yes , the real US Navy :-)
a SupernodeIP is a server for great traffic , or massiv connections. You don`t need to send a HTTP request to the host to get these informations. I wouldn`t call that SECURE. But thats of course a good thing for us to check if the Musiccity Morpheus is really secure or not. With my next connection from a morpheus client i will check if i can access any files on the clienthost which he does not share!

Access to the shared files is possible With ANY normal WebBrowser, just enter : http://217.82.x.x:1214

Have fun!

Send Mail to Cyborg