Please Scroll Down to See Forums Below
napsgear
genezapharmateuticals
domestic-supply
puritysourcelabs
UGL OZ
UGFREAK
napsgeargenezapharmateuticals domestic-supplypuritysourcelabsUGL OZUGFREAK

Hacked!!

  • Thread starter Thread starter Code
  • Start date Start date
C

Code

Guest
Well, ok not really.

I have a honeynet (like a honey pot but emulates a network) that someone put an ASSLOAD of root kits on.

Some punk-ass chinese skript kiddie. None of them worked. But it was cool to see the honeynet doing it's job.
 
Ah....

One of the things I want to do. Did you set yours up inside of Vmware so you can do a little forensics on it?
 
Nope even better:
It's a solaris box, that has a linux kernel running off a PCI board (Sun makes PCI cards that run windows/linux).

The linux "box" is running Rsynch (binary renamed to fingerd). And a cron job that calls dumps logs to the solaris box. So the logs get dumped to two different areas, just in case.


It emulates a small financial/HR subnet.

The kicker is, skrpit kiddies load rootkits onto what they think is a true linux box. I tweaked the common user adding scripts to give them what they "think" is root. It copies a nice dir structure for them to fuck with, doesn't let them out of their dir structure except to the internet.....

Anyone want this hacker's username/password for his FTP account?? :D

jnuts said:
Ah....

One of the things I want to do. Did you set yours up inside of Vmware so you can do a little forensics on it?
 
Code said:


Anyone want this hacker's username/password for his FTP account?? :D


Let me guess... China? Those clowns have been doing a lot of probing in my neck of the woods.
 
Yeah, he/she was trying to use us to vhost using cynetworks.org's service.

Dumb-ass kept coming in, using all sorts of usernames/password from all his accounts.

Quite funny to think how pissed he's gonna be when he finds all his skripts have "minor" tweaks to them.... if he ever catches on.



jnuts said:


Let me guess... China? Those clowns have been doing a lot of probing in my neck of the woods.
 
Top Bottom