Security Incidents mailing list archives

RE: Re: SSH bruteforce on its way...


From: "Daryl Davis" <daryl () ultbingo com>
Date: Thu, 3 Nov 2005 10:29:21 -0800

I am still learning the "remote exploit auditor" but it does have a ssh
bruteforce on it.

Daryl R Davis
Digital Game Media, Inc.

-----Original Message-----
From: amunchet () gmail com [mailto:amunchet () gmail com] 
Sent: Thursday, November 03, 2005 5:08 AM
To: incidents () securityfocus com
Subject: Re: Re: SSH bruteforce on its way...


A while back, there was a very popular ssh brute forcing 
script floating around that used the tcl expect interpreter 
to impliment the brute forcing of the ssh client.  This is 
probably a modified script that uses it over a variety of 
hosts and on success sends the necessary back door files.  
Also, someone probably has written a basic brute force 
generator for it, so dictionary only attacks will probably 
not succeed.  

Attachment: Daryl R Davis (daryl@ultbingo.com).vcf
Description:


Current thread: