🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: aus.computers.linux
Article #54055

Re: help....plzz

#54055
From: Wayne
Date: Mon, 01 Dec 1997 00:00
20 lines
1349 bytes
The only thing I can think of is a deamon file that allows him regardless or
what root's password is to access the system.

One I have found creates a fake login then mail the username and passwd to
whoever wants it.

For instance, he logs in under his name and starts the process.  It captures
all keystrokes (note there is a really good app under SCO that does this
even better called spy) and echo's them to a file.

Wayne
da daf wrote in message <347fa93e.12098153@news.ioc.net>...
>Hi,
>
> a person whom i had give telnet access on my linux 2.0.30
>server hacked root and then left a backdoor before i could get rid of
>him. i got rid of his bdoor and all the lkr3 files that he had hidden
>in my /tmp dir. he said i could close his back door by editing one
>file. anyone know anything about it??
Technical Details
Message-ID: <880975352.511178@sun.brisnet.org.au>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <347fa93e.12098153@news.ioc.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 102983,b1c2e7a4b0753c5b
X-Google-Attributes: gid102983,public
From: "Wayne" <wjackson@powerup.com.au>
Subject: Re: help....plzz
Date: 1997/12/01
Message-ID: <880975352.511178@sun.brisnet.org.au>
X-Deja-AN: 294167705
References: <347fa93e.12098153@news.ioc.net>
Cache-Post-Path: sun.brisnet.org.au!unknown@e020-234.st.net.au
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.1712.3
Organization: Soft-Tech Information Services
Newsgroups: aus.computers.linux