Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: Auto-Run CD - Disabling Screensavers

Re: Auto-Run CD - Disabling Screensavers

From: Chris Hall <chall_at_verio.net>
Date: Thu, 13 Mar 2003 12:06:11 -0600

[themac_at_bigpond.net.au] Mon, May 12, 2003 at 05:37:47PM +0800 wrote:
> I read somewhere (a while back on this list) that a CD burnt tool
> exists to disable the password protected screen savers on workstation
> (or server) if the CD Auto run setting is enabled on that machine...
>
> Does anyone know of the link for this resource?
>
> Systems : Windows 2000 workstations
>
> Regards,
> Nick
>
>

  There is/was an issue with using the cd autorun feature on Win9.x/NT that was
enabled by default. Bascily, one can just create a CD with a autorun.inf file
to run whatever. I am not sure if Win2k is affected by this.

http://www.securityfocus.com/archive/1/47338/2003-05-10/2003-05-16/1
http://www.securityfocus.com/bid/993

 It should be fairly easy to create your own to do whatever. Looking back
through the archives, here is one example.

http://www.securityfocus.com/archive/101/155392/2001-01-08/2001-01-14/2

 I do remember quite a few "tools" floating around, but couldn't locate any
googling, course i really didn't spend a whole lot of time looking either. :)

-- 
Thanks,
- Chris Hall
  "The growing use of e-mail, not to mention Web-page publishing, threatens 
to reverse the trend towards illiteracy among the supposedly educated without, 
at the same time improving their spelling".
                                               -- Michael Swaine, Dr. Dobb's Journal
---------------------------------------------------------------------------
Did you know that you have VNC running on your network?
Your hacker does.
Plug your security holes.
Download a free 15-day trial of VAM:
http://www.securityfocus.com/StillSecure-pen-test
----------------------------------------------------------------------------
Received on May 13 2003
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos