RE: What means "\xc7\x44\x24\x18\xda\xff\xff\xff\xe8"

From: David Schwartz
Date: Thu Apr 06 2006 - 09:58:24 EST



> In what file did you find this? This is how back-doors are written!
>
> On Wed, 5 Apr 2006, openbsd shen wrote:
>
> > this code from get_sct() of suckit 2, why memmem()
> > "\xc7\x44\x24\x18\xda\xff\xff\xff\xe8"use, what it want to find?
> > The get_sct() founction:

As he said, it's from "suckit 2", a root kit.

Back-doors in a root kit? Whodathunkit. ;)

DS


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/