[LACNIC/Seguridad] Ejemplo de ataque a un registro "Whois"? (el registro de microsoft.com)

[Alonso Caballero Quezada / ReYDeS]

Saludos:

> Estimados,
>
> Buscando el registro de microsoft.com en la base whois, desde un cliente
> whois de Ubuntu, obtenemos la sigueinte respuesta... a ver que les parece?
>
> root en nyquist:~# whois microsoft.com
>

 Lo ideal sería lo siguiente:

# whois microsoft.com -h whois.melbourneit.com

Domain Name.......... microsoft.com
  Creation Date........ 1991-05-02
  Registration Date.... 2009-10-06
  Expiry Date.......... 2015-05-04
  Organisation Name.... Microsoft Corporation
  Organisation Address. One Microsoft Way
  Organisation Address.
  Organisation Address. Redmond
  Organisation Address. 98052
  Organisation Address. WA
  Organisation Address. UNITED STATES

Admin Name........... Administrator .
  Admin Address........ One Microsoft Way
  Admin Address........
  Admin Address........ Redmond
  Admin Address........ 98052
  Admin Address........ WA
  Admin Address........ UNITED STATES
  Admin Email.......... domains en microsoft.com
  Admin Phone.......... +1.4258828080
  Admin Fax............

Tech Name............ Hostmaster .
  Tech Address......... One Microsoft Way
  Tech Address.........
  Tech Address......... Redmond
  Tech Address......... 98052
  Tech Address......... WA
  Tech Address......... UNITED STATES
  Tech Email........... msnhst en microsoft.com
  Tech Phone........... +1.4258828080
  Tech Fax.............
  Name Server.......... NS2.MSFT.NET
  Name Server.......... NS4.MSFT.NET
  Name Server.......... NS1.MSFT.NET
  Name Server.......... NS5.MSFT.NET
  Name Server.......... NS3.MSFT.NET


 Atte:

-- 
Alonso Eduardo Caballero Quezada aka ReYDeS - ReYDeS en gmail.com
OWASP Member / Brainbench Certified Computer Forensics (US) / SSP-CNSA
www.iDev.pe /  www.ReYDeS.com / www.npros.com.pe / LRU #307242