[plug] Tonights meeting

Leon Brooks leon at brooks.fdns.net
Mon Jun 24 11:27:42 WST 2002


On Mon, 24 Jun 2002 10:50, Peter Wright wrote:
> PS. In case you're wondering exactly why I thought the script kiddie in
> question was so brainless, it's because his tracks were - well - not
> exactly subtle. A collection of system utilities (find, ifconfig,
> netstat, ps, login) very obviously replaced (owned by the nonexistent
> user.group 500.500 instead of root.root), the root password changed...
> and, well, a bunch of other things. I managed to grab a couple of IP
> addresses he was connecting from, as well - though odds are they're
> just other cracked machines in his stable. I suspect he was either
> (a) stupid, (b) lazy, (c) didn't really care if he was spotted, or
> (d) all of the above.

(e) automated

Cheers; Leon



More information about the plug mailing list