Hacker News new | ask | show | jobs
by inigyou 14 days ago
Do you allow them entry, present a fake prompt, and record what they do?

Some time ago I did a little experiment by running `nc -l -p 23` (telnet) which connects the next incoming telnet connection to your console. Type in a simulated prompt like Password: or # and it'll be buffered until the connection comes in. Then see what the scanner sends.

1 comments

Danger. I believe this opens a RCE hole if the attacker sends a properly crafted sequence of terminal escape codes.
Hope you never cat any file or curl any URL