|
I found a 68K SGI Iris 2400 machine up and running in college in about 2004. It had a sticker with the hostname on it. Later on that week, I went to the department homepage, got the staff roster and tried to guess the usernames. I telnetted to port 25 and tried RCPT TO hypothesized names, like so $ telnet host 25
MAIL FROM: a@a.com
250 Sender OK
RCPT TO: afranks
550 Recipient not found
RCPT TO: arty.franks
250 Recipient OK
...With this list of usernames I logged into the FTP to try to guess trivial passwords: $ telnet host 21
USER arty.franks
User OK
PASS 1234
Login failed
PASS password
...Eventually I got a valid username/password combo. Now I can just telnet <host> and log in. I got a line like this: Last login April 12, 1992.
$
It had this ancient version of IRIX on it, a hard drive under 100 MB, no X, a version of egcs, some ancient version of perl, no bash, and I think 12MB of RAM?It was fun, but I didn't know what I wanted to do with it. We executed this attack from the school library. Putz'd around a bit, in amazement of how old it was, and that it was still online, and then logged out - never to return. https://www.youtube.com/watch?v=9EEY87HAHzk - a video of the machine |