search

mushorg / glutton

Generic Low Interaction Honeypot
MIT License
244 stars 56 forks source link

satori #67

Open glaslos opened 7 years ago

glaslos commented 7 years ago 
INFO[20219] [telnet  ] recv: "/bin/busybox satori\x00\r\n" 
INFO[20220] [telnet  ] send: "> "

Seeing lots of those and no further stage. Ideas?

HashCode55 commented 7 years ago

Can it be related to this? http://www.linklogger.com/satori_setup.htm

glaslos commented 7 years ago

Most likely, but no idea what the command is supposed to return.

glaslos commented 7 years ago

Maybe we should just return satori: applet not found ?

gento commented 7 years ago

I just start to try out the response on my side. From the recent log, I noticed there were more than 30 attempts with this 'satori' in a day. Will see what we can get later. May the luck be with us

glaslos commented 6 years ago

@gento did you had any luck?

lhcunha commented 6 years ago

Im also receiving this command in my cowrie honeypot.