satori

Question

satori

Opened this issue 7 years ago · 6 comments

INFO[20219] [telnet  ] recv: "/bin/busybox satori\x00\r\n" 
INFO[20220] [telnet  ] send: "> "

Seeing lots of those and no further stage. Ideas?

Answer 1 · 2017-05-02T17:28:18.000Z

Can it be related to this? http://www.linklogger.com/satori_setup.htm

Answer 2 · 2017-05-03T08:23:26.000Z

Most likely, but no idea what the command is supposed to return.

Answer 3 · 2017-05-04T13:10:15.000Z

Maybe we should just return satori: applet not found ?

Answer 4 · 2017-05-07T15:23:13.000Z

I just start to try out the response on my side. From the recent log, I noticed there were more than 30 attempts with this 'satori' in a day. Will see what we can get later. May the luck be with us

Answer 5 · 2017-11-23T12:22:56.000Z

@gento did you had any luck?

Answer 6 · 2017-12-03T15:30:07.000Z

Im also receiving this command in my cowrie honeypot.