Security Incidents mailing list archives

Re: Some details in a recent NT hack we encountered


From: Gossi The Dog <gossi () OWNED LAB6 COM>
Date: Fri, 2 Mar 2001 14:29:06 +0000

On Sun, 25 Feb 2001, Matt Scarborough wrote:

On Sun, 25 Feb 2001 10:15:18 -0700, Ron Grove <rgrove () HOTMAIL COM> wrote:

Just wanted to share some of the footprints of a hack that we had on one of
our NT servers.  This is not everything I am sure.  It was too important to
rebuild and secure the server for the users usage again.  If anyone else has
noticed this please let me know.

I sent details on this to the Incidents list on February 20, 2001. It would
have helped you find what is missing. I captured the entire kit.

Could you repost it at all?  I'm fairly interested in this kit for various
reasons.

Regards,
Gossi.


Current thread: