Re: New port 901 scans?

["morning_wood" <se_cur_ity () hotmail com>]

this is a fxing joke "http://isc.sans.org/diary.html?date=2003-06-04";

netdevil is authored by nilez, and is not "new" by any means.
the standard packer is "upx" and no updates are planned
why cant they get thier info straight *sigh*

if any one wants a uncompressed server or a totaly undetected version of the
server for testing i may be willing to provide info for forensics.
features are notification by cgi, mail and ICQ ( broke )
includes offline keylogging and webcam features.

Donnie Werner
CTO e2-labs.com



----- Original Message -----
From: "John Pavlakis" <john () pavlakis net>
To: "J. Race" <caferace () well com>
Cc: <full-disclosure () lists netsys com>
Sent: Friday, September 19, 2003 9:44 PM
Subject: Re: [Full-disclosure] New port 901 scans?


> http://isc.sans.org/diary.html?date=2003-06-04
>
>
>
> > I'm seeing an increase in port 901 scans this morning starting a little
> > over 3 hours ago, all from individual IP's outside my netblock
> > originating from random ports.

>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html