Educause Security Discussion mailing list archives

Re: IRC, IM Proxy Implementations


From: Eric Pancer <epancer () SECURITY DEPAUL EDU>
Date: Wed, 8 Sep 2004 12:38:52 -0500

Justin Azoff wrote on Wed, 2004-09-08 at 13:10:15 -0400...

no... -V tries to figure out what service is running on the port, in
this case it will just print "ident?" since the bots don't actualy
implement a full ident server.

Don't you mean a "-sV" ?

On a side note, I strongly encourage everyone to submit service
fingerprints when finding a backdoor or other odd listener. It helps
quite a bit to be able to see the actual version of the bot, etc.

--
Eric Pancer :.: Computer Security Response Team :.: DePaul University
http://security.depaul.edu/ .:`:.:':.:`:. epancer () security depaul edu
pgp: 1024D/7ACBCFF3 C022 4991 41E5 51E7 683C F765 62F7 7F8E 7ACB CFF3

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: