Full Disclosure: Re: SSHatter 0.6

[Anders B Jansson <hdw () kallisti se>]

phioust wrote:
> Who does a tool like this help?
>
> I would hope that the professionals on this list would not rely on weak
> password combinations for access into systems.
Several of those professionals have to administer or otherwise deal with
systems, admins and users who are not as enlighted.

There are better tools, but don't dismiss tools based on the assumption
that people are to 'smart to fall for that'.

One of the biggest problems is that the generic admin/user isn't.

> That leads me to believe that this will only help script kiddies and
> flood my ssh logs with more root:root and mysql:mysql failed ssh attempts.
There are several good tools to get rid of that.

Just drop unwanted bruteforce scans in a nice 'block drop' hole.
You'll never see them again.
-- 
// hdw

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/