September 11th, 2001 07:53 AM
FTP Exploits ...
I'm configuring DTK on my Linux box, and thus I'm looking for exploits (recent or not) to make the deception on port 21 more realistic.
Where can I find the best FTP exploits database?
Or if you have had some experience working with DTK, tell me...
September 16th, 2001 12:04 AM
September 17th, 2001 10:45 AM
I already got DTK, but I thank you for the help. What I'm looking for is FTP exploits recent or not, cause, the scripts of deception given with DTK are not very realistic and they don't cover much things.
September 20th, 2001 08:29 AM
Depending on the FTP daemon that you're running, common wu.ftpd, or proftpd, a good place to start would be www.securityfocus.com. They also ahev mailing lists, and things you can sign up to get the latest in script kiddie needs. :-/ They seem to believe in "full disclosure".
Anyway.. another tip, on the Vuln-Dev mailing list there a new wu.ftpd vulnerability that was just posted either yesterday or today, Idon't remember.
Jason Parker - http://www.o-negative.net
o-Negative: Information Network