An oldie but a goodie. Bill Cheswick did this way back in 1991, from his paper "An evening with Berferd in which a Cracker is Lured, Endured, and Studied" he describes planting a passwd file on his ftp server, the passwords decrypt as "why are you wasting your time".
ref http://cne.gmu.edu/modules/acmpkp/security/texts/CRACKER.PDF On Fri, 2005-04-22 at 13:31 -0500, Ron wrote: > lmao > > root = you > kfinisterre = are > dotslash = so > mandark = lame > dognutz = for > elguapo = cracking > m0ssimo = this > > > KF (lists) wrote: > > > root:$1$WO0cTkiq$4x/Of2KBx2HRwv/OXmggv1:12741:0:99999:7::: > > daemon:*:12741:0:99999:7::: > > bin:*:12741:0:99999:7::: > > sys:*:12741:0:99999:7::: > > sync:*:12741:0:99999:7::: > > games:*:12741:0:99999:7::: > > man:*:12741:0:99999:7::: > > lp:*:12741:0:99999:7::: > > mail:*:12741:0:99999:7::: > > news:*:12741:0:99999:7::: > > uucp:*:12741:0:99999:7::: > > proxy:*:12741:0:99999:7::: > > postgres:*:12741:0:99999:7::: > > www-data:*:12741:0:99999:7::: > > backup:*:12741:0:99999:7::: > > operator:*:12741:0:99999:7::: > > list:*:12741:0:99999:7::: > > irc:*:12741:0:99999:7::: > > gnats:*:12741:0:99999:7::: > > nobody:*:12741:0:99999:7::: > > kfinisterre:$1$Rlqwwnze$.Faoa/0IpZ1ug5KqMZzMx1:12741:0:99999:7::: > > dotslash:$1$eCrTVdS5$XHZnOfRWMFYTs92/QW/k4/:12741:0:99999:7::: > > mandark:$1$lQPtoOYr$yi6XOruuh9Guz5x.MJOSu/:12741:0:99999:7::: > > dognutz:$1$bPIf0IFu$uzZgKkd2khdibcpEw1h/l1:12741:0:99999:7::: > > elguapo:$1$wPen8ltL$JE.hM3R/Dq32P47J6Myds/:12741:0:99999:7::: > > m0ssimo:$1$l/g.bEkT$dkBIncT1bmdZ48P60dmV61:12741:0:99999:7::: > > sshd:!:12741:0:99999:7::: _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
