PPT Slide
[tcpdump sample omitted, sorry]
Notes:
Here we see a small extract from the hacker’s activity on the second (Astro) machine. From the Astro machine as FTP client, they are setting up an anonymous FTP connection to their own PC.
This server was also quite happy to respond to us when we tried it, revealing an interesting hoard of hacking materials.