I'm not 100% sure, but after a quick look it appears that sshf opens up 
the uniq.txt and then procedes to connect to every ip using test:test or 
guest:guest.  It then dumps out which of those accounts:ip worked to 
vuln.txt.  Then a person can just go through the vuln.txt and ssh and 
perform whatever rooting they so choose.

I wonder what the "ss" program does.  It's got libpcap compiled into it 
so maybe it's some sort of sniffer and/or ip generator (creates bios.txt?).

Br0mGreV wrote:

> Hi,
>
> Does anyone started to reverse-ingineer that damn soft 'sshf'? I'm 
> sure we can learn some information about the exploit, if we
> look at this file.
> I'll start that tommorow. Hope to give you some informations from that 
> soon.
>
> GD
>
> -- 
> gentoo-security@g.o mailing list
>
>


--
gentoo-security@g.o mailing list