Tkae ya prefered 40MB "wordlist", a neat TelnetD somewhere and use Hydra
to bruteforce any account.
Then switch to another console and run dsniff ($ dsniff).
Dsniff will coredump after some seconds.
Example (dsniff ran 90-110 seconds):
-----------------
10/08/05 07:07:29 tcp some.where.int.19574 -> beloved.telnet.daemon.23
(telnet)
anyaccount
Abi-Farah
anyaccount
-----------------
10/08/05 07:07:29 tcp some.where.int.9193 -> beloved.telnet.daemon.23
(telnet)
anyaccount
Abi-Ghanem
anyaccount
Segmentation fault (core dumped)
$
Some neat but useless GDB output (just because I know somebody will ask me
for it):
$ sudo gdb --core dsniff.core /usr/local/sbin/dsniff
GNU gdb 6.3
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "amd64-unknown-openbsd3.8"...(no debugging
symbols found)
Core was generated by `dsniff'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/local/lib/libdb.so.3.1...(no debugging symbols
found)...done.
Loaded symbols for /usr/local/lib/libdb.so.3.1
Reading symbols from /usr/local/lib/libnet.so.0.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/local/lib/libnet.so.0.0
Reading symbols from /usr/lib/libpcap.so.3.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libpcap.so.3.0
Reading symbols from /usr/lib/libssl.so.10.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libssl.so.10.0
Reading symbols from /usr/lib/libcrypto.so.12.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libcrypto.so.12.0
Reading symbols from /usr/lib/libdes.so.9.0...(no debugging symbols
found)...done.
Loaded symbols for /usr/lib/libdes.so.9.0
Reading symbols from /usr/lib/libc.so.38.2...
(no debugging symbols found)...done.
Loaded symbols for /usr/lib/libc.so.38.2
Reading symbols from /usr/libexec/ld.so...(no debugging symbols
found)...done.
Loaded symbols for /usr/libexec/ld.so
#0 0x000000000040c790 in ?? ()
(gdb)
OS: OpenBSD current (snapshot downloaded yesterday)
ARCH: AMD64, SMP
dmesg:
OpenBSD 3.8-current (GENERIC.MP) #0: Fri Oct 7 00:57:26 CEST 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 2147020800 (2096700K)
avail mem = 1836093440 (1793060K)
using 22937 buffers containing 214908928 bytes (209872K) of memory
mainbus0 (root)
mainbus0: Intel MP Specification (Version 1.1) (TYAN S2882 )
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: AMD Opteron(tm) Processor 242, 1595.07 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,LONG,3DNOW2,3DNOW
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB
64b/line 16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: apic clock running at 199358268Hz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: AMD Opteron(tm) Processor 242, 1594.87 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,LONG,3DNOW2,3DNOW
cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB
64b/line 16-way L2 cache
cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
mpbios: bus 0 is type PCI
mpbios: bus 1 is type PCI
mpbios: bus 2 is type PCI
mpbios: bus 3 is type PCI
mpbios: bus 4 is type ISA
ioapic0 at mainbus0 apid 2: pa 0xffff800003740e24, version 11, 24 pins
ioapic1 at mainbus0 apid 3: pa 0xffff800003740d24, version 11, 4 pins
ioapic2 at mainbus0 apid 4: pa 0xffff800003740c24, version 11, 4 pins
pci0 at mainbus0 bus 0: configuration mode 1
ppb0 at pci0 dev 6 function 0 "AMD 8111 PCI-PCI" rev 0x07
pci1 at ppb0 bus 3
ohci0 at pci1 dev 0 function 0 "AMD 8111 USB" rev 0x0b: apic 2 int 19 (irq
10), version 1.0, legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: AMD OHCI root hub, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1 at pci1 dev 0 function 1 "AMD 8111 USB" rev 0x0b: apic 2 int 19 (irq
10), version 1.0, legacy support
usb1 at ohci1: USB revision 1.0
uhub1 at usb1
uhub1: AMD OHCI root hub, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
emu0 at pci1 dev 4 function 0 "Creative Labs SoundBlaster Live" rev 0x08:
apic 2 int 16 (irq 9)
ac97: codec id 0x43525914 (Cirrus Logic CS4297A rev 4)
ac97: codec features headphone, 20 bit DAC, 18 bit ADC, Crystal Semi 3D
audio0 at emu0
"Creative Labs PCI Gameport Joystick" rev 0x08 at pci1 dev 4 function 1
not configured
pciide0 at pci1 dev 5 function 0 "CMD Technology SiI3114 SATA" rev 0x02: DMA
pciide0: using apic 2 int 19 (irq 10) for native-PCI interrupt
vga1 at pci1 dev 6 function 0 "ATI Rage XL" rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
fxp0 at pci1 dev 8 function 0 "Intel 82557" rev 0x10, i82551: apic 2 int
18 (irq 11), address
inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
pcib0 at pci0 dev 7 function 0 "AMD AMD8111 LPC" rev 0x05
pciide1 at pci0 dev 7 function 1 "AMD 8111 IDE" rev 0x03: DMA, channel 0
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide1 channel 0 drive 0: <Maxtor 6Y080L0>
wd0: 16-sector PIO, LBA, 78167MB, 160086528 sectors
wd1 at pciide1 channel 0 drive 1: <WDC WD1200JB-75CRA0>
wd1: 16-sector PIO, LBA, 114440MB, 234375000 sectors
wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 6
wd1(pciide1:0:1): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide1 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <TOSHIBA, CD/DVDW SDR5372V, TU11> SCSI0
5/cdrom removable
cd0(pciide1:1:0): using PIO mode 4, Ultra-DMA mode 2
"AMD 8111 SMBus" rev 0x02 at pci0 dev 7 function 2 not configured
"AMD 8111 ACPI" rev 0x05 at pci0 dev 7 function 3 not configured
ppb1 at pci0 dev 10 function 0 "AMD 8131 PCIX" rev 0x12
pci2 at ppb1 bus 2
ahd0 at pci2 dev 6 function 0 "Adaptec AIC-7902B U320" rev 0x10: apic 3
int 0 (irq 9)
aic7902: U320 Wide Channel A, SCSI Id=7, PCI-X 67-100Mhz, 512 SCBs
scsibus1 at ahd0: 16 targets
ahd1 at pci2 dev 6 function 1 "Adaptec AIC-7902B U320" rev 0x10: apic 3
int 1 (irq 5)
aic7902: U320 Wide Channel B, SCSI Id=7, PCI-X 67-100Mhz, 512 SCBs
scsibus2 at ahd1: 16 targets
bge0 at pci2 dev 9 function 0 "Broadcom BCM5704C" rev 0x03, BCM5704 A3
(0x2003): apic 3 int 0 (irq 9) address
brgphy0 at bge0 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0
bge1 at pci2 dev 9 function 1 "Broadcom BCM5704C" rev 0x03, BCM5704 A3
(0x2003): apic 3 int 1 (irq 5) address
brgphy1 at bge1 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0
aapic0 at pci0 dev 10 function 1 "AMD 8131 PCIX IOAPIC" rev 0x01
ppb2 at pci0 dev 11 function 0 "AMD 8131 PCIX" rev 0x12
pci3 at ppb2 bus 1
aapic1 at pci0 dev 11 function 1 "AMD 8131 PCIX IOAPIC" rev 0x01
pchb0 at pci0 dev 24 function 0 "AMD AMD64 HyperTransport" rev 0x00
pchb1 at pci0 dev 24 function 1 "AMD AMD64 Address Map" rev 0x00
pchb2 at pci0 dev 24 function 2 "AMD AMD64 DRAM Cfg" rev 0x00
pchb3 at pci0 dev 24 function 3 "AMD AMD64 Misc Cfg" rev 0x00
pchb4 at pci0 dev 25 function 0 "AMD AMD64 HyperTransport" rev 0x00
pchb5 at pci0 dev 25 function 1 "AMD AMD64 Address Map" rev 0x00
pchb6 at pci0 dev 25 function 2 "AMD AMD64 DRAM Cfg" rev 0x00
pchb7 at pci0 dev 25 function 3 "AMD AMD64 Misc Cfg" rev 0x00
isa0 at pcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
sysbeep0 at pcppi0
lm0 at isa0 port 0x290/8: W83627HF
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
wd0: no disk label
dkcsum: wd0 matches BIOS drive 0x81
dkcsum: wd1 matches BIOS drive 0x80
root on wd1a
rootdev=0x10 rrootdev=0x310 rawdev=0x312
If you need any other informations: Please drop me a mail if I can help
Kind regards,
Sebastian
--
Don't buy anything from YeongYang.
Their Computercases are expensiv, they WTX-powersuplies start burning and
their support refuse any RMA even there's still some warenty.
