Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-Disclosure] Automated SSH login attempts?

Subject: Re: [Full-Disclosure] Automated SSH login attempts?
Date: Fri, 30 Jul 2004 14:39:40 -0400
On Fri, 30 Jul 2004 09:39:55 EDT, "Neal O'Creat" said:
Could it be possible that there are different versions of this, one 
making noise and one much rarer one with an exploit?

It's more likely that there's one version, making noise and very rarely finding
a box with stupid passwords.  It's possible there's another rare version that
tries several stupid passwords and a few old SSH vulnerabilities.  Is there
*any* reliable evidence (even a single box) that appears to have been nailed by
a new exploit?

I'll gladly change my mind, but it will take somebody actually finding a
box running a *recent* SSH and had guest/test/and_so_on properly secured,
and the attack *still* got in....

Attachment: pgpbGEi3QM4XY.pgp
Description: PGP signature

<Prev in Thread] Current Thread [Next in Thread>