September 11th, 2001, 08:53 AM
FTP Exploits ...
I'm configuring DTK on my Linux box, and thus I'm looking for exploits (recent or not) to make the deception on port 21 more realistic.
Where can I find the best FTP exploits database?
Or if you have had some experience working with DTK, tell me...
September 16th, 2001, 01:04 AM
September 17th, 2001, 11:45 AM
I already got DTK, but I thank you for the help. What I'm looking for is FTP exploits recent or not, cause, the scripts of deception given with DTK are not very realistic and they don't cover much things.
September 20th, 2001, 09:29 AM
Depending on the FTP daemon that you're running, common wu.ftpd, or proftpd, a good place to start would be www.securityfocus.com. They also ahev mailing lists, and things you can sign up to get the latest in script kiddie needs. :-/ They seem to believe in "full disclosure".
Anyway.. another tip, on the Vuln-Dev mailing list there a new wu.ftpd vulnerability that was just posted either yesterday or today, Idon't remember.
Jason Parker - http://www.o-negative.net
o-Negative: Information Network