Penetration Testing: Re: NT/IIS Decoy

["Qazi M.M. Ahmed" <qaziahmed () pakcert org>]

You can disable Windows File Protection (and enable it again) in Windows 
2000 by editing registry keys. A hex editor will do the rest for w3svc.dll
You can find details about Windows File Protection (how to 
enable/disable etc) here:
http://www.microsoft.com/hwdev/driver/sfp/wfp.asp

For XP Windows File Protection, you have to edit the file:

%systemroot%\system32\restore\filelist.xml

Add the filename in the exclude section to disable protection for the 
specific file.
Qazi M.M. Ahmed


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/