Results 1 to 7 of 7
  1. #1
    Join Date
    Oct 2004
    Posts
    299

    Shut down Command For BindShell

    Any one know the command to shut down bindshel?l

  2. #2
    Join Date
    Jun 2000
    Location
    Washington, USA
    Posts
    5,991
    BindShell, as in the exploit?

    I use, kill -9 PID

  3. #3
    Join Date
    Oct 2004
    Posts
    299
    Yes BindShell as in the exploit, I tried kill -9 PID it said No such pid PID

  4. #4
    Join Date
    Jun 2003
    Location
    UK
    Posts
    6,601
    Is this on a cpanel box and chkroot kit?

    Rus
    Russ Foster - Industry Curmudgeon

  5. #5
    Join Date
    Oct 2004
    Posts
    299
    no on a cobalt raq server and yes chkroot kit installed.

  6. #6
    Join Date
    Jun 2003
    Posts
    961
    which pid does the bindshell run on? or what port?
    use netstat -nlp to find it
    then use the command from above, and replace PID with the PID of the process

  7. #7
    Join Date
    Apr 2003
    Location
    NC
    Posts
    3,080
    What user is running it? You can use "lsof -u USER" to find all files they are accessing. If you can find the file delete it then restart the server. When you run the lsof you will also be able to see the pid of the process which should let you kill it.
    John W, CISSP, C|EH
    MS Information Security and Assurance
    ITEagleEye.com - Server Administration and Security
    Yawig.com - Managed VPS and Dedicated Servers with VIP Service

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •