Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Incidents
[Top] [All Lists]

Re: SSH bruteforce on its way...

Subject: Re: SSH bruteforce on its way...
Date: 25 Oct 2005 07:29:26 -0000
Hi Volker,

ive started a honey Machine for your answer on, what are they doing with 
captured machines ...

just after some hours the Machine was up the first attempts where made, probing 
for useable machines, only one attempt was a *human* login with interaction. 
I've used sudosh for logging the bash session and first assumption is that the 
person which was using the shell didnt know to much about Unix as log cleaning 
was made with scripts downloaded from geocities and the bash_history was  
forgotten.
I've put the session data on a website 
(http://www.jackal-net.at/tiki-read_article.php?articleId=20)  where you can 
see what i've setup and what the guys where doing. (currently only one session 
is online but i'm sure, others will follow :) ... )

Kind regards 
Michael Lang

<Prev in Thread] Current Thread [Next in Thread>