Nineveh_Knockd

Knockd

---

Knockd is present in the target system

www-data@nineveh:/var/www/html/department$ ll /var/mail/amrois
4.0K -rw-r--r-- 1 amrois mail 483 Jul  2  2017 /var/mail/amrois
www-data@nineveh:/var/www/html/department$ cat /var/mail/amrois
from root@nineveh.htb  fri jun 23 14:04:19 2017
return-path: <root@nineveh.htb>
x-original-to: amrois
delivered-to: amrois@nineveh.htb
received: by nineveh.htb (Postfix, from userid 1000)
        id d289b2e3587; fri, 23 jun 2017 14:04:19 -0500 (CDT)
to: amrois@nineveh.htb
from: root@nineveh.htb
subject: Another Important note!
message-id: <20170623190419.D289B2E3587@nineveh.htb>
date: Fri, 23 Jun 2017 14:04:19 -0500 (CDT)
 
Amrois! please knock the door next time! 571 290 911

There is an email sent from the root user to the amrois user regarding the knockd configuration The 3 ports sequence is 571 290 911