<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	
	>
<channel>
	<title>Comments on: COFEE Forensic Tool Leaks To What.cd, Admins Ban It</title>
	<atom:link href="http://torrentfreak.com/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/feed/" rel="self" type="application/rss+xml" />
	<link>http://torrentfreak.com/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/</link>
	<description>Breaking File-sharing, Copyright and Privacy News</description>
	<lastBuildDate>Tue, 28 Oct 2014 22:56:13 +0000</lastBuildDate>
		<sy:updatePeriod>hourly</sy:updatePeriod>
		<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.9.2</generator>
	<item>
		<title>By: blahrg</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-617688</link>
		<dc:creator><![CDATA[blahrg]]></dc:creator>
		<pubDate>Fri, 20 Nov 2009 16:15:22 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-617688</guid>
		<description><![CDATA[I hope they ban you, you faggot.]]></description>
		<content:encoded><![CDATA[<p>I hope they ban you, you faggot.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Starbucks</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-617601</link>
		<dc:creator><![CDATA[Starbucks]]></dc:creator>
		<pubDate>Fri, 20 Nov 2009 10:47:47 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-617601</guid>
		<description><![CDATA[Why are people freaking out about cofee being used on them by cops?  It could be a good thing for criminals.  Decaf?, I prefer the name &quot;Cofee Creamer&quot;.  Break down the code, write a program to detect cofee attempting to be ran.  Cofee creamer blocks cofee and brings up a fake cofee interface and shows the 20 minute data copy dump.  While cofee creamer is faking the stuff, it&#039;s instead shredding files in the background.  20 minutes later, &quot;thanks for destroying all the incriminating evidence for me&quot;.]]></description>
		<content:encoded><![CDATA[<p>Why are people freaking out about cofee being used on them by cops?  It could be a good thing for criminals.  Decaf?, I prefer the name &#8220;Cofee Creamer&#8221;.  Break down the code, write a program to detect cofee attempting to be ran.  Cofee creamer blocks cofee and brings up a fake cofee interface and shows the 20 minute data copy dump.  While cofee creamer is faking the stuff, it&#8217;s instead shredding files in the background.  20 minutes later, &#8220;thanks for destroying all the incriminating evidence for me&#8221;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Hot Penny Stocks Otc Stock Picks &#187; Blog Archive &#187; Brief: Point-and-click forensics tool leaks to Net</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-616237</link>
		<dc:creator><![CDATA[Hot Penny Stocks Otc Stock Picks &#187; Blog Archive &#187; Brief: Point-and-click forensics tool leaks to Net]]></dc:creator>
		<pubDate>Mon, 16 Nov 2009 22:20:48 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-616237</guid>
		<description><![CDATA[[...] Several security researchers reported that they had been able to download a program from sources on the Internet that claimed to be the forensics software. The program first appeared on what.cd, according to news reports. [...]]]></description>
		<content:encoded><![CDATA[<p>[...] Several security researchers reported that they had been able to download a program from sources on the Internet that claimed to be the forensics software. The program first appeared on what.cd, according to news reports. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Russ, wait here! I&#8217;ll get help! &#187; Blog Archive &#187; COFFEE leaked</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-616221</link>
		<dc:creator><![CDATA[Russ, wait here! I&#8217;ll get help! &#187; Blog Archive &#187; COFFEE leaked]]></dc:creator>
		<pubDate>Mon, 16 Nov 2009 21:26:02 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-616221</guid>
		<description><![CDATA[[...] http://torrentfreak.com/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/ http://www.geek.com/articles/news/mysterious-forensics-software-designed-by-microsoft-for-law-officers-hits-bittorrent-sites-20091114/ [...]]]></description>
		<content:encoded><![CDATA[<p>[...] <a href="http://torrentfreak.com/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/" rel="nofollow">http://torrentfreak.com/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/</a> <a href="http://www.geek.com/articles/news/mysterious-forensics-software-designed-by-microsoft-for-law-officers-hits-bittorrent-sites-20091114/" rel="nofollow">http://www.geek.com/articles/news/mysterious-forensics-software-designed-by-microsoft-for-law-officers-hits-bittorrent-sites-20091114/</a> [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: bullsballs</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-615292</link>
		<dc:creator><![CDATA[bullsballs]]></dc:creator>
		<pubDate>Thu, 12 Nov 2009 23:17:41 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-615292</guid>
		<description><![CDATA[With Linux, I can work cross OS without any need for passwords, as passwords usually are not used with encryption of data on an average users drive.
I just add the suspect drive and read it as standard data. What is funny, I can&#039;t do that with windows trying to read a Linux drive, but Linux reads windows, no added software needed!
I have saved much data on a drive that the windows OS has failed by doing this! Also found some fun stuff too! Makes people pay for my services quicker!
Encryption usually falls fast using a dictionary password generator... Especially using a vulgar words first!]]></description>
		<content:encoded><![CDATA[<p>With Linux, I can work cross OS without any need for passwords, as passwords usually are not used with encryption of data on an average users drive.<br />
I just add the suspect drive and read it as standard data. What is funny, I can&#8217;t do that with windows trying to read a Linux drive, but Linux reads windows, no added software needed!<br />
I have saved much data on a drive that the windows OS has failed by doing this! Also found some fun stuff too! Makes people pay for my services quicker!<br />
Encryption usually falls fast using a dictionary password generator&#8230; Especially using a vulgar words first!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dummy Cakes</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-615075</link>
		<dc:creator><![CDATA[Dummy Cakes]]></dc:creator>
		<pubDate>Thu, 12 Nov 2009 04:23:23 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-615075</guid>
		<description><![CDATA[@TimeLord

FTK doesn&#039;t do anything more than the Sysinternals suite of applications does, + Sysinternals is free.]]></description>
		<content:encoded><![CDATA[<p>@TimeLord</p>
<p>FTK doesn&#8217;t do anything more than the Sysinternals suite of applications does, + Sysinternals is free.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Wayne</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-615003</link>
		<dc:creator><![CDATA[Wayne]]></dc:creator>
		<pubDate>Thu, 12 Nov 2009 00:11:03 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-615003</guid>
		<description><![CDATA[This is hilarious. It only is of danger to those poor bastards running Windows. Once again, Microsoft screws their customers.]]></description>
		<content:encoded><![CDATA[<p>This is hilarious. It only is of danger to those poor bastards running Windows. Once again, Microsoft screws their customers.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Impersonation</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-614971</link>
		<dc:creator><![CDATA[Impersonation]]></dc:creator>
		<pubDate>Wed, 11 Nov 2009 22:31:04 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-614971</guid>
		<description><![CDATA[This http://torrentfreak.com/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-614187 person is not n3td3v, its someone using n3td3v&#039;s name. I want the moderator to remove the person using n3td3v&#039;s name to post comments on this blog.]]></description>
		<content:encoded><![CDATA[<p>This <a href="http://torrentfreak.com/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-614187" rel="nofollow">http://torrentfreak.com/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-614187</a> person is not n3td3v, its someone using n3td3v&#8217;s name. I want the moderator to remove the person using n3td3v&#8217;s name to post comments on this blog.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Chris S.</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-614790</link>
		<dc:creator><![CDATA[Chris S.]]></dc:creator>
		<pubDate>Wed, 11 Nov 2009 15:05:49 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-614790</guid>
		<description><![CDATA[Doesn&#039;t What.CD have rules against uploading random apps that have nothing to do with anything? They&#039;re pretty strict about what can and can&#039;t be uploaded, it&#039;s not surprising they took this down. The same thing would happen if you uploaded a movie.]]></description>
		<content:encoded><![CDATA[<p>Doesn&#8217;t What.CD have rules against uploading random apps that have nothing to do with anything? They&#8217;re pretty strict about what can and can&#8217;t be uploaded, it&#8217;s not surprising they took this down. The same thing would happen if you uploaded a movie.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>/cofee-forensic-tool-leaks-to-what-cd-admins-ban-it-091108/#comment-614726</link>
		<dc:creator><![CDATA[Anonymous]]></dc:creator>
		<pubDate>Wed, 11 Nov 2009 04:45:12 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/?p=18711#comment-614726</guid>
		<description><![CDATA[Here&#039;s what COFEE does by default in case anyone is interested. Very underwhelming to say the least. Interesting that this version only performs around 45 operations...the full version was reputed to have 150+ tools. I smell a planned leak of a crippled tool. I&#039;ll bet the real one can exploit the vulnerabilities that M$ obviously left in Windows.

Here goes:

arp.exe ?a  
at.exe    
autorunsc.exe    
getmac.exe    
handle.exe ?a  
hostname.exe    
ipconfig.exe  /all  
msinfo32.exe  /report %OUTFILE%  
nbtstat.exe ?n  
nbtstat.exe ?A 127.0.0.1  
nbtstat.exe ?S  
nbtstat.exe ?c  
net.exe  share  
net.exe  use  
net.exe  file  
net.exe  user  
net.exe  accounts
net.exe  view  
net.exe  start  
net.exe  Session  
net.exe  localgroup administrators /domain  
net.exe  localgroup  
net.exe  localgroup administrators  
net.exe  group  
netdom.exe  query DC  
netstat.exe ?ao  
netstat.exe ?no  
openfiles.exe  /query/v  
psfile.exe    
pslist.exe    
pslist.exe ?t  
psloggedon.exe    
psservice.exe    
pstat.exe    
psuptime.exe    
quser.exe    
route.exe  print  
sc.exe  query  
sc.exe  queryex  
sclist.exe    
showgrps.exe    
srvcheck  \127.0.0.1  
tasklist.exe  /svc  
whoami.exe]]></description>
		<content:encoded><![CDATA[<p>Here&#8217;s what COFEE does by default in case anyone is interested. Very underwhelming to say the least. Interesting that this version only performs around 45 operations&#8230;the full version was reputed to have 150+ tools. I smell a planned leak of a crippled tool. I&#8217;ll bet the real one can exploit the vulnerabilities that M$ obviously left in Windows.</p>
<p>Here goes:</p>
<p>arp.exe ?a<br />
at.exe<br />
autorunsc.exe<br />
getmac.exe<br />
handle.exe ?a<br />
hostname.exe<br />
ipconfig.exe  /all<br />
msinfo32.exe  /report %OUTFILE%<br />
nbtstat.exe ?n<br />
nbtstat.exe ?A 127.0.0.1<br />
nbtstat.exe ?S<br />
nbtstat.exe ?c<br />
net.exe  share<br />
net.exe  use<br />
net.exe  file<br />
net.exe  user<br />
net.exe  accounts<br />
net.exe  view<br />
net.exe  start<br />
net.exe  Session<br />
net.exe  localgroup administrators /domain<br />
net.exe  localgroup<br />
net.exe  localgroup administrators<br />
net.exe  group<br />
netdom.exe  query DC<br />
netstat.exe ?ao<br />
netstat.exe ?no<br />
openfiles.exe  /query/v<br />
psfile.exe<br />
pslist.exe<br />
pslist.exe ?t<br />
psloggedon.exe<br />
psservice.exe<br />
pstat.exe<br />
psuptime.exe<br />
quser.exe<br />
route.exe  print<br />
sc.exe  query<br />
sc.exe  queryex<br />
sclist.exe<br />
showgrps.exe<br />
srvcheck  \127.0.0.1<br />
tasklist.exe  /svc<br />
whoami.exe</p>
]]></content:encoded>
	</item>
</channel>
</rss>
