[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Re: Automated SSH login attempts?

Howdy,

> Highly doubtful.  It's easy enough to test though - just use the tool
> to poke another machine under your control, and use tcpdump or ethereal
> to capture all the traffic (don't forget '-s 1500' or similar for tcpdump
> to get the *whole* packet).

Sidenote - '-s 0' always adjusts capture length to the MTU, allowing for a full
capture of the entire payload. 

If the binary's made available, I'll throw it into IDA and see what it does. 

Cheers, J.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html