Re: brute force

[fitz () draco mv com (Tom Fitzgerald)]

> Here are several services we bruteforce attack:
>
> telnetd
> rexecd
> ftpd
> rshd
> pop3
> filesharing

I'm surprised you don't list uucpd, that's always been my favorite target
for a password bruteforce (rexecd is easier, but it's disabled on more
platforms than uucpd).

As for the individual who claimed that 99% of sites let you ftp the
/etc/passwd file, yes that's true but the passwd file is much more often a
dummy.  Either the passwords are *'d out (if the target is one of those
checklist-following places) or the encrypted password is bogus (if the
target is sneaky).

--
Tom Fitzgerald    fitz () draco mv com