[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Template for placeder page



On Sun, 11 Feb 2001, Chris Mason wrote:

> >From what I have read one of the ways hackers have identified Rzaq macbines
> has been to search for the text from the Cobalt default webpage. Can anyone
> tell me where to find the original file so I can change it?

Theres loads of ways to find RaQs...

Look for the admin page via Google, nmap for port 99 (admin interface
port), or just look for ISPs offering RaQ hosting.

Eg UK2.net (powerraq.com), they say they have 200+ raqs on their homepage,
you brose to the signup page and theres a link to a photograph which shows
one of their RaQ units, with the hostname and ip address on the unit.  All
their RaQs are in the same subnet, so you can mass own them all.