On Don, Jul 10, 2003 at 02:10:56 -0400, Matt Hunter wrote: > Hi, hi,
> I recently had my linux worstation broken into. The cracker created > a directory and placed two executables in it. One was called 'zap' - > which I've since found out is used to clean up log files before the > cracker logs out. The other one was called 'nc'. I can't find any > information on this program. Does anyone out there know what it's used for? zap is used for cleaning utmp and wtmp login information. is rather old, but still used. if you need the source-code of this tool, contact me directly. nc is netcat, primarly a programm which does the same as cat, but based on tcp/ip sockets. you can redirect output of a programm to netcat and pipe it rawly to a remote listening socket. netcat is also capable of listening to incoming connections. this tool is called the "swiss army knife" of tcp/ip networking, because of its clean design and interaction with other un*x processes (piping and redirection is easy possible) HTH - regards, mathias --------------------------------------------------------------------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm ----------------------------------------------------------------------------