full-disclosure - Devil Linux 1.2.10 has an IRC bot onboard

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 19 Oct 2006 15:13:46 +0600
From: Victor Grishchenko <gritzko@...tinka.ru>
To: full-disclosure@...ts.grok.org.uk
Subject: Devil Linux 1.2.10 has an IRC bot onboard

Hi!

While building and testing a customized version of DevilLinux router 
distro I found an IRC bot onboard. As far as I understood, it was 
EnergyMech compiled from source right there plus some executable named 
"TODO" (for camouflage purposes). The stuff unfolds at /shm/sshd/ and 
runs somehow. Sadly, I had no time for detailed investigation. It leaves 
an overall impression of script kiddie's work.
Last days DevilLinux website seems to be dead.

                      Victor Grishchenko
                      Digital Channels Network
                      Yekaterinburg, Russia

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/