Re: SSH exploit
From: Nico Kadel-Garcia (nkadel_at_comcast.net)
Date: 12/22/03
- Next message: Nico Kadel-Garcia: "Re: Status of pam-1@ssh.com authentication in OpenSSH?"
- Previous message: Thomas Binder: "Re: Failed Password Error"
- In reply to: Paul J. Richardson: "SSH exploit"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 22 Dec 2003 09:12:05 -0500
"Paul J. Richardson" <paul.j.richardson@earthlink.net> wrote in message
news:FpsFb.8554$wL6.7086@newsread1.news.atl.earthlink.net...
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
>
> My professor (NCSU) wants me to hack his honeynet box (it's on the
> internet, but I can't give anyone the IP), but I'm somewhat new to
> Linux, and barely read uncompiled script. My only hope (if even
> relevant?), is I know a bit about TCP/IP and crypto. He flat told me
> SSH was my best hope of getting in.
>
> A peripheral issue is that (except for one tool at
> packetstormsecurity.nl), I can't find the tools/scripts described at
> places such as
> http://www.totse.com/en/hack/hack_attack/162684.html
Is this a school assignment, in which case we might let you do your own
work? And can you use any of the easier social-exploit based attacks, such
as shoulder surfing him?
Yeah, getting up-to-date cracking tools is tough: many security people don't
like to post them publicly, not since the days of the "8lgm" or
"eight-legged-groove-machine", who got so tired of Sun ignoring their bug
reports they started posting exploit scripts. Sun would patch to block the
exploit script but wouldn't actually fix the flaw, so they'd just post the
next one: it was fun to watch for a while.
You also might look into the logs of alt.2600, if you can stomach the spam
and cracker-wanna-be's, for references to the tools.
- Next message: Nico Kadel-Garcia: "Re: Status of pam-1@ssh.com authentication in OpenSSH?"
- Previous message: Thomas Binder: "Re: Failed Password Error"
- In reply to: Paul J. Richardson: "SSH exploit"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
