Article View: comp.security.misc
Article #257Re: Beta testers needed for security tool
From: Rich Holland
Date: Sun, 06 Sep 1992 23:52
Date: Sun, 06 Sep 1992 23:52
17 lines
1317 bytes
1317 bytes
sims@drake.mitre.org (Jim Sims) writes:
> If I was gonna hack some system, I'd be sure the first thing I'd do to is
>find the root's version of tripwire and change it to *always* spit out the
>"don' worry, be happy message"....
...but it may not be '/etc/tripwire' or something so obvious. What if
the admin put it in '/var/spool/mail/some-user' and changed the perms
so that it's not executable (harder to find). You gonna poke through
EVERY file on the system lookin' for it? What're the chances you'll be
detected before you do? :-)
--
Rich Holland | INTERNET: holland@matt.ksu.ksu.edu
100 Jardine Terr, Apt A7 | BITNET : holland@ksuvm
Manhattan, KS 66502-3357 | UUCP : ...!rutgers!matt.ksu.ksu.edu!holland
char*p="char*p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Technical Details
Message-ID:
<18e5kgINNkpf@matt.ksu.ksu.edu>Path:
arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!moe.ksu.ksu.edu!matt.ksu.ksu.edu!newsReferences:
<sims.715743134@starbase>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!moe.ksu.ksu.edu!matt.ksu.ksu.edu!news From: holland@matt.ksu.ksu.edu (Rich Holland) Newsgroups: comp.security.misc,alt.security,alt.sources.d,comp.sources.testers,comp.unix.admin Subject: Re: Beta testers needed for security tool Date: 6 Sep 1992 18:52:48 -0500 Organization: Kansas State University Lines: 17 Message-ID: <18e5kgINNkpf@matt.ksu.ksu.edu> References: <sims.715743134@starbase> NNTP-Posting-Host: matt.ksu.ksu.edu