Full Disclosure mailing list archives
Just another *nix server botnet
From: Dmitri Gribenko <gribozavr () gmail com>
Date: Sat, 19 Aug 2006 03:21:46 +0300
Hello, My server was recently hacked through a vulnerable web application. What I found was a perl IRC bot. It was downloaded from http://72.20.41.7/~krang/join.txt It connects to 66.152.173.198 port 6698, joins #join You should use nickname "krang", "sky" or "chip" for the bots to accept commands. Send commands just like /msg botnick uname -a What is the purose of this posting? I just want this network to disappear. Cheers, Dmitri -- main(i,j){for(i=2;;i++){for(j=2;j<i;j++){if(!(i%j)){j=0;break;}}if (j){printf("%d\n",i);}}} /*Dmitri Gribenko <gribozavr () gmail com>*/
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Just another *nix server botnet Dmitri Gribenko (Aug 18)