sadmind

Description

Our intrusion detection system has identified abnormal behavior, which could be the caused by the same hacker as in a previous intrusion; he or she used the open-source software “Tiny SHell”. However, we do not know the goal sought by this attacker, and we hope that you will enlighten us. For this purpose, our team collected the following elements:

• the disk image of the compromised machine (HD3.hda.xz),
• traffic corresponding to the attack (sadmind.pcap).

Good luck!