Results 1 to 3 of 3

Thread: w00tw00t.at.ISC.SANS.DFind

  1. 10-02-2007, 10:02 PM #1
    imported_wyze
    imported_wyze is offline
    Jenkem Addict imported_wyze's Avatar
    Join Date
    Jul 2007
    Posts
    1,543

    Default w00tw00t.at.ISC.SANS.DFind

    Saw this entry in our server logs this morning... has anyone else seen this before? Can't really find anything definitive on this via google, but apparently is some kind of 'exploit' / hack attempt... anyone have any 411 on this?
    dd if=/dev/swc666 of=/dev/wyze
  2. 10-02-2007, 10:06 PM #2
    elazar
    elazar is offline
    Member elazar's Avatar
    Join Date
    Sep 2007
    Posts
    217

    Default

    http://isc.sans.org/diary.html?storyid=900
  3. 10-02-2007, 10:08 PM #3
    imported_wyze
    imported_wyze is offline
    Jenkem Addict imported_wyze's Avatar
    Join Date
    Jul 2007
    Posts
    1,543

    Default

    Ahhhh....

    "The security scanner that leave this signature is DFind." ............ (had a typo in my google)
    dd if=/dev/swc666 of=/dev/wyze
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules