full-disclosure - Re: Romanian hacker unknown string

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 17 Jan 2014 17:31:01 +0530
From: Asheesh Tripathi <informationhacker08@...il.com>
To: James Condron <james@...o-internet.org.uk>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Romanian hacker unknown string

yes chances are their , if we search last 8 alphabet in search engine the
result will come as "*szrtech1* is a Registered user in the Romanian
Security Team" , it might be a coincidence


On Fri, Jan 17, 2014 at 5:19 PM, James Condron
<james@...o-internet.org.uk>wrote:

> How are you capturing this password? Chances are its just a random string
> they're using
>
>
> On Fri, Jan 17, 2014 at 11:37 AM, Asheesh Tripathi <
> informationhacker08@...il.com> wrote:
>
>> Yes Tried to reset password of one user account with this string
>>
>>
>> On Fri, Jan 17, 2014 at 4:57 PM, James Condron <
>> james@...o-internet.org.uk> wrote:
>>
>>> Okay, thats fair enough but where was that string? What makes you think
>>> it means anything? You said something about it being a password, did you
>>> not?
>>>
>>>
>>> On Fri, Jan 17, 2014 at 11:21 AM, Asheesh Tripathi <
>>> informationhacker08@...il.com> wrote:
>>>
>>>> There was many scripts in which it contains an URL to a Romanian
>>>> hacking forum
>>>> printf "for any info vizit http://hacking.3xforum.ro/ \n";
>>>> printf "daca nu pica in 10 min dai pe alt port \n";
>>>>
>>>> I am looking for  what does this string mean
>>>> "rt3y(iii#$%)yhyuhub3p3scpb3ll3muuulttreb265199403199403reb265tgzszrtech1"
>>>>
>>>>
>>>>
>>>>
>>>> On Fri, Jan 17, 2014 at 4:08 PM, James Condron <
>>>> james@...o-internet.org.uk> wrote:
>>>>
>>>>> Where was it? And how do you know 'Romanian hackers' have been near
>>>>> your server?
>>>>>
>>>>> -James
>>>>>
>>>>>
>>>>> On Fri, Jan 17, 2014 at 10:19 AM, Asheesh Tripathi <
>>>>> informationhacker08@...il.com> wrote:
>>>>>
>>>>>>
>>>>>> Hi All
>>>>>>
>>>>>> During log analysis of Linux server we have found a  strings
>>>>>> passwd
>>>>>>
>>>>>> rt3y(iii#$%)yhyuhub3p3scpb3ll3muuulttreb265199403199403reb265tgzszrtech1
>>>>>>
>>>>>> Can anybody help me out in understanding  above string we have
>>>>>> already found some traces of  Romanian hackers
>>>>>>
>>>>>> Thanks
>>>>>> Anaconda
>>>>>>
>>>>>> _______________________________________________
>>>>>> Full-Disclosure - We believe in it.
>>>>>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>>>>>> Hosted and sponsored by Secunia - http://secunia.com/
>>>>>>
>>>>>
>>>>>
>>>>
>>>
>>
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/