Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

satori #67

Open
glaslos opened this issue May 2, 2017 · 6 comments
Open

satori #67

glaslos opened this issue May 2, 2017 · 6 comments

Comments

@glaslos
Copy link
Member

glaslos commented May 2, 2017 •
edited
Loading 

INFO[20219] [telnet  ] recv: "/bin/busybox satori\x00\r\n" 
INFO[20220] [telnet  ] send: "> "

Seeing lots of those and no further stage. Ideas?
@HashCode55
Copy link
Contributor

Can it be related to this? http://www.linklogger.com/satori_setup.htm

@glaslos
Copy link
Member Author

glaslos commented May 3, 2017

Most likely, but no idea what the command is supposed to return.

@glaslos
Copy link
Member Author

glaslos commented May 4, 2017

Maybe we should just return satori: applet not found ?

@gento
Copy link
Contributor

gento commented May 7, 2017

I just start to try out the response on my side. From the recent log, I noticed there were more than 30 attempts with this 'satori' in a day. Will see what we can get later. May the luck be with us

@glaslos
Copy link
Member Author

glaslos commented Nov 23, 2017

@gento did you had any luck?

@lhcunha
Copy link

lhcunha commented Dec 3, 2017

Im also receiving this command in my cowrie honeypot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@glaslos @gento @HashCode55 @lhcunha