glutton icon indicating copy to clipboard operation
glutton copied to clipboard

Published 20 hours ago • verified publisher icon mushorg

satori

Open glaslos opened this issue 7 years ago • 6 comments 

INFO[20219] [telnet  ] recv: "/bin/busybox satori\x00\r\n" 
INFO[20220] [telnet  ] send: "> "

Seeing lots of those and no further stage. Ideas?

glaslos avatar May 02 '17 14:05 glaslos

Can it be related to this? http://www.linklogger.com/satori_setup.htm

HashCode55 avatar May 02 '17 17:05 HashCode55

Most likely, but no idea what the command is supposed to return.

glaslos avatar May 03 '17 08:05 glaslos

Maybe we should just return satori: applet not found ?

glaslos avatar May 04 '17 13:05 glaslos

I just start to try out the response on my side. From the recent log, I noticed there were more than 30 attempts with this 'satori' in a day. Will see what we can get later. May the luck be with us

gento avatar May 07 '17 15:05 gento

@gento did you had any luck?

glaslos avatar Nov 23 '17 12:11 glaslos

Im also receiving this command in my cowrie honeypot.

lhcunha avatar Dec 03 '17 15:12 lhcunha