Date: Thu, 23 Aug 2001 06:14:32 -0400 From: Chip Norkus <wd@arpa.com> To: Stefanos Kiakas <stefanos@e-scape.net> Cc: security@freebsd.org Subject: Re: Compromised system. Message-ID: <20010823061432.C70948@anduril.org> In-Reply-To: <200108231554.LAA96346@corp.e-scape.net>; from stefanos@e-scape.net on Thu, Aug 23, 2001 at 11:54:30AM -0400 References: <200108231554.LAA96346@corp.e-scape.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu Aug 23, 2001; 11:54AM -0400 Stefanos Kiakas used 1.0K bytes of bandwidth to send the following:
>
[snip]
> total 23
> drwxrwxrwt 3 root wheel 512 Aug 23 16:39 .
> drwxr-xr-x 2 root wheel 512 Aug 3 11:48 .
> drwxr-xr-x 20 root wheel 512 Apr 4 04:46 ..
>
> How do I access the second . directory to see what
> is in it? I have tried everything I can thing of but
> I cannot list any of the contents.
>
This is, of course, only a guess, but there may be strange things like
terminal codes (or even a space after the name) in that file's name, in
/tmp, you might want to do:
ls -Ba /tmp
You'll then need to decode the output.
Alternatively, after chucking out everything else in tmp, you might try:
cd *.
cd .*
cd *.*
(until one of them works)
> Please cc me at stefanos@e-scape.net.
>
Good luck!
> Thank you,
>
> Stefanos Kiakas
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
-wd
--
chip norkus(rl); white_dragon('net'); wd@arpa.com
"That's Tron. He fights for the users." http://telekinesis.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010823061432.C70948>