Full Disclosure mailing list archives

Re: Romanian hacker unknown string


From: James Condron <james () zero-internet org uk>
Date: Fri, 17 Jan 2014 12:20:47 +0000

It could mean anything. I'm just asking how you got that string. Hell, the
string of numbers '199403' could be there because in the 1994 world cup
Romania got to the 3rd to last game from the World Cup Final. Given enough
random chars in a random file you could probably get lots of allusions to
Romania. Given a string in a passwd file somewhere it could be less likely
to be a coincidence.


On Fri, Jan 17, 2014 at 12:01 PM, Asheesh Tripathi <
informationhacker08 () gmail com> wrote:

yes chances are their , if we search last 8 alphabet in search engine the
result will come as "*szrtech1* is a Registered user in the Romanian
Security Team" , it might be a coincidence


On Fri, Jan 17, 2014 at 5:19 PM, James Condron <james () zero-internet org uk
wrote:

How are you capturing this password? Chances are its just a random string
they're using


On Fri, Jan 17, 2014 at 11:37 AM, Asheesh Tripathi <
informationhacker08 () gmail com> wrote:

Yes Tried to reset password of one user account with this string


On Fri, Jan 17, 2014 at 4:57 PM, James Condron <
james () zero-internet org uk> wrote:

Okay, thats fair enough but where was that string? What makes you think
it means anything? You said something about it being a password, did you
not?


On Fri, Jan 17, 2014 at 11:21 AM, Asheesh Tripathi <
informationhacker08 () gmail com> wrote:

There was many scripts in which it contains an URL to a Romanian
hacking forum
printf "for any info vizit http://hacking.3xforum.ro/ \n";
printf "daca nu pica in 10 min dai pe alt port \n";

I am looking for  what does this string mean
"rt3y(iii#$%)yhyuhub3p3scpb3ll3muuulttreb265199403199403reb265tgzszrtech1"




On Fri, Jan 17, 2014 at 4:08 PM, James Condron <
james () zero-internet org uk> wrote:

Where was it? And how do you know 'Romanian hackers' have been near
your server?

-James


On Fri, Jan 17, 2014 at 10:19 AM, Asheesh Tripathi <
informationhacker08 () gmail com> wrote:


Hi All

During log analysis of Linux server we have found a  strings
passwd

rt3y(iii#$%)yhyuhub3p3scpb3ll3muuulttreb265199403199403reb265tgzszrtech1

Can anybody help me out in understanding  above string we have
already found some traces of  Romanian hackers

Thanks
Anaconda

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/








_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: