linux hack

From: Corch (corchat_private)
Date: Wed May 09 2001 - 15:34:07 PDT

Next message: Martin Markgraf: "Re: httpd and sunrpc probes from 'sunos 5.6' machines"

Previous message: jamie rishaw: "Re: Another unicode hacked box"
Next in thread: H D Moore: "Re: linux hack"
Reply: H D Moore: "Re: linux hack"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I was recently called out to a site run by an aquaintence of mine to have
a look at some machines that were causing some problems. On rebooting one
of the machines I saw the following messages

INIT: entering run level 3
/bin/nice ./scan.sh not found
/bin/nice ./hack.sh not found


I'm almost certain the box has been rootkit'd, im just not sure which one,
anyone able to give me some clues?

Corch

Next message: Martin Markgraf: "Re: httpd and sunrpc probes from 'sunos 5.6' machines"
Previous message: jamie rishaw: "Re: Another unicode hacked box"
Next in thread: H D Moore: "Re: linux hack"
Reply: H D Moore: "Re: linux hack"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu May 10 2001 - 20:17:35 PDT