Full Disclosure mailing list archives
Re: SSHatter 0.6
From: Anders B Jansson <hdw () kallisti se>
Date: Mon, 08 Oct 2007 00:50:16 +0200
phioust wrote:
Who does a tool like this help? I would hope that the professionals on this list would not rely on weak password combinations for access into systems.
Several of those professionals have to administer or otherwise deal with systems, admins and users who are not as enlighted. There are better tools, but don't dismiss tools based on the assumption that people are to 'smart to fall for that'. One of the biggest problems is that the generic admin/user isn't.
That leads me to believe that this will only help script kiddies and flood my ssh logs with more root:root and mysql:mysql failed ssh attempts.
There are several good tools to get rid of that. Just drop unwanted bruteforce scans in a nice 'block drop' hole. You'll never see them again. -- // hdw _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- SSHatter 0.6 Tim Brown (Oct 06)
- <Possible follow-ups>
- Re: SSHatter 0.6 full-disclosure (Oct 07)
- Re: SSHatter 0.6 phioust (Oct 07)
- Re: SSHatter 0.6 ghost (Oct 07)
- Re: SSHatter 0.6 Anders B Jansson (Oct 07)