full-disclosure - Re: SSH scans, i caught one

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 19 Nov 2010 13:35:51 -0000 (UTC)
From: "Julien Reveret" <shaddai@...8.org>
To: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: SSH scans, i caught one

> On 11/19/2010 12:34 PM, Alan Buxey wrote:
>> Hi,
>>
>>>     So I downloaded all his files from the /pwn/ directory. The funny
>>> part is,
>>>     most of them are MIPS files(?).
>>
>> interesting...going for a particular target/platform I'd suggest - like
>> some small
>> home routers...OpenWRT box type devices....why target the PC to get
>> interesting
>> information like passwords when you can exploit their little home router
>> and
>> listen in on everything with no AV software on the PC ever picking you
>> up.......
>>
>> alan
>>
>
> I wonder if there are ARM versions around too, or are they only
> interested in MIPS systems?
>

Maybe it's a fork from this old botnet: http://dronebl.org/blog/8  ?
I haven't seen much routers with ARM CPUs whereas the number of SOHO
routers based on MIPS architecture seems to be high.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/