OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Re: SSH bruteforce on its way...

From: Daryl Davis (darylultbingo.com)
Date: Thu Nov 03 2005 - 12:29:21 CST


I am still learning the "remote exploit auditor" but it does have a ssh
bruteforce on it.

Daryl R Davis
Digital Game Media, Inc.

> -----Original Message-----
> From: amunchetgmail.com [mailto:amunchetgmail.com]
> Sent: Thursday, November 03, 2005 5:08 AM
> To: incidentssecurityfocus.com
> Subject: Re: Re: SSH bruteforce on its way...
>
>
> A while back, there was a very popular ssh brute forcing
> script floating around that used the tcl expect interpreter
> to impliment the brute forcing of the ssh client. This is
> probably a modified script that uses it over a variety of
> hosts and on success sends the necessary back door files.
> Also, someone probably has written a basic brute force
> generator for it, so dictionary only attacks will probably
> not succeed.
>