Hacked!!

[Code]

Well, ok not really.

I have a honeynet (like a honey pot but emulates a network) that someone put an ASSLOAD of root kits on.

Some punk-ass chinese skript kiddie. None of them worked. But it was cool to see the honeynet doing it's job.

 

[OMGWTFBBQ]

Chinks love honey.

 

[jnuts]

Ah....

One of the things I want to do. Did you set yours up inside of Vmware so you can do a little forensics on it?

 

[OMGWTFBBQ]

At work we have a similar thing - we have over 20 Windows machines connected to the net.

 

[Code]

Nope even better:
It's a solaris box, that has a linux kernel running off a PCI board (Sun makes PCI cards that run windows/linux).

The linux "box" is running Rsynch (binary renamed to fingerd). And a cron job that calls dumps logs to the solaris box. So the logs get dumped to two different areas, just in case.


It emulates a small financial/HR subnet.

The kicker is, skrpit kiddies load rootkits onto what they think is a true linux box. I tweaked the common user adding scripts to give them what they "think" is root. It copies a nice dir structure for them to fuck with, doesn't let them out of their dir structure except to the internet.....

Anyone want this hacker's username/password for his FTP account??

Ah....

One of the things I want to do. Did you set yours up inside of Vmware so you can do a little forensics on it?

 

[OMGWTFBBQ]

LOL

I'll bet its IP - he gets bored when the mixing is done.

 

[jnuts]

Anyone want this hacker's username/password for his FTP account??

Let me guess... China? Those clowns have been doing a lot of probing in my neck of the woods.

 

[Code]

Yeah, he/she was trying to use us to vhost using cynetworks.org's service.

Dumb-ass kept coming in, using all sorts of usernames/password from all his accounts.

Quite funny to think how pissed he's gonna be when he finds all his skripts have "minor" tweaks to them.... if he ever catches on.

Let me guess... China? Those clowns have been doing a lot of probing in my neck of the woods.

 

[jnuts]

Do you ever fight back?

 

[Code]

Do you ever fight back?

Naw, but I hacked his code on his FTP sites and shell accounts. Made them mostly useless.

 

[HumorMe]

Somebody move this to the Chinese speaking forum.