(no subject)

From: blooven (blooven@blooven.edu)
Date: 08/15/02 

From: blooven <blooven@blooven.edu>
Date: Thu, 15 Aug 2002 19:51:23 GMT

he is just going to say it was a honeytrap - if it wasn't a honeytrap

Killingtime wrote:
>
> On 14 Aug 2002 20:28:18 GMT, Steve Riess <sriess@virtuallyhired.com>
> wrote:
>
> >
> >Spend your day hacking and get paid for it!
> >
> >I'm recruiting for a very large corporation in the Chicago area who is
> >looking to add two key players to their informtation security team.
> [snip]
>
> Steve, I honestly didn't know whether to post my reply here or just
> cat it directly to /var/spool/mail/sreiss.
>
> Interesting ports on (198.65.128.203):
> (The 1512 ports scanned but not shown below are in state: closed)
> Port State Service
> 21/tcp open ftp
> 22/tcp open ssh
> 23/tcp open telnet
> 25/tcp open smtp
> 80/tcp open http
> 110/tcp open pop-3
> 111/tcp open sunrpc
> 443/tcp open https
> 3306/tcp open mysql
> 4045/tcp open lockd
> 32771/tcp open sometimes-rpc5
>
> [snip]
>
> [root@ns hlib]#mysql -u***** -hvirtuallyhired.com -p < mysql_sploit
>
> Enter password:
> Welcome to the MySQL monitor. Commands end with ; or \g.
> Your MySQL connection id is 342 to server version: 3.**.**
>
> Type 'help;' or '\h' for help. Type '\c' to clear the buffer
>
> mysql>SHOW DATABASES;
> [snip]
>
> Wow. Boy, are you in trouble with your sysadmin for posting here. Do
> you want to tell him, or shall I ? Mind you, anyone running an
> unpatched MySQL is probably too lame to be worth bothering about.
> Anyway, excuse me but I need to see your competitors about something.
>
> *GIGGLE*
>
> --Kt

Quantcast