Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




fulldisclosure logo Full Disclosure mailing list archives

Re: 70 million computers are using Windows 98 right now
From: Tonnerre Lombard <tonnerre.lombard () sygroup ch>
Date: Wed, 02 Aug 2006 10:15:59 +0200

Salut,

On Tue, 2006-08-01 at 15:00 -0400, Micheal Espinola Jr wrote:
Windows NT Workstation was in fact identical to Server - except with
intentional limiters placed within the registry to prevent admins from
avoiding purchasing the "full" server product.  However, you could
hack it and make it a "Server".

In fact, this of course also worked the other way around. Also, there
was a bug in MSIE ASN1 parsing once which could be exploited to write
random registry keys with the user's privileges. So what we did was
this: we had a link on our internal archive web server which read "Don't
click here". Now if some stupid NT admin surfed as a user with
Domain-Admin privileges and clicked on the link, the NT domain server
would believe to be a workstation on the next boot. This happened from
time to time and caused a lot of amusement along us UNIX admins.

                                Tonnerre
-- 
SyGroup GmbH
Tonnerre Lombard

Loesungen mit System
Tel:+41 61 333 80 33    Roeschenzerstrasse 9
Fax:+41 61 383 14 67    4153 Reinach BL
Web:www.sygroup.ch      tonnerre.lombard () sygroup ch

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]