Full Disclosure mailing list archives

Re: Re: Automated SSH login attempts?


From: Jan Muenther <jan.muenther () nruns com>
Date: Fri, 30 Jul 2004 09:35:58 +0200

Howdy,

Highly doubtful.  It's easy enough to test though - just use the tool
to poke another machine under your control, and use tcpdump or ethereal
to capture all the traffic (don't forget '-s 1500' or similar for tcpdump
to get the *whole* packet).

Sidenote - '-s 0' always adjusts capture length to the MTU, allowing for a full
capture of the entire payload. 

If the binary's made available, I'll throw it into IDA and see what it does. 

Cheers, J.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: