RE: sshd for windows

["Depp, Dennis M." <deppdm () ornl gov>]

Richard,
 
The telnet built into Windows 2000 uses NTLMv2 authentication by defalt.  While this is not 3DES or RC4, it is still 
not plain text.
 
Dennis

        -----Original Message----- 
        From: Richard Parry [mailto:richard () generic-edesign co uk] 
        Sent: Wed 6/18/2003 12:19 PM 
        To: stephen at unix dot za dot net 
        Cc: security-basics () securityfocus com 
        Subject: RE: sshd for windows
        
        

        Oh yeah, thats the perfect way of breaking into a machine ! Telnet is plain
        text, so is very easy to sniff anything that goes on ! I hope you are being
        sarcastic !
        
        ........................................................................
        
        Regards - Richard Parry
        
        STUDIO Digital Media Limited new media + web.
        http://www.studiodm.co.uk <http://www.studiodm.co.uk/>
        
        Cd duplication services
        http://www.dupe.co.uk <http://www.dupe.co.uk/>
        
        Lichfield U.K.
        t: +44 (0)1543 416912  f: +44 (0)1543 416914
        ........................................................................
        
        
        -----Original Message-----
        From: stephen at unix dot za dot net [mailto:stephen () unix za net]
        Sent: 18 June 2003 8:19 AM
        To: Derek Perry
        Cc: security-basics () securityfocus com
        Subject: Re: sshd for windows
        
        
        
        
        theres a builtin telnet server included with win2k (server and
        workstation).
        
        just start the service, telnet to ip:23
        
        enter user and pass
        
        and wolah...
        
        you have a dos prompt :)
        
        
        
        
        --
        Success On Hold
        (www.soh.co.za)
        
        stephen () unix za net
        tel: (031) 207 4811
        
        
        
        On Mon, 16 Jun 2003, Derek Perry wrote:
        
        > Is there a sshd for Windows (W2K Server is the actual OS) that is freely
        > available?  I am doing a senior design project for a class at school and I
        > would like a way to log in remotely to the server at the company which I
        am
        > working with (the network admin hasnt even done the security updates on
        the
        > webserver, so he is hopeless).  Thanks in advance!
        >
        > --
        > Derek A. Perry
        > derek () cc gatech edu
        >
        >
        > --------------------------------------------------------------------------
        -
        > Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
        > The Gartner Group just put Neoteris in the top of its Magic Quadrant,
        > while InStat has confirmed Neoteris as the leader in marketshare.
        >
        > Find out why, and see how you can get plug-n-play secure remote access in
        > about an hour, with no client, server changes, or ongoing maintenance.
        >
        > Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
        > --------------------------------------------------------------------------
        --
        >
        
        
        ---------------------------------------------------------------------------
        Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
        The Gartner Group just put Neoteris in the top of its Magic Quadrant,
        while InStat has confirmed Neoteris as the leader in marketshare.
        
        Find out why, and see how you can get plug-n-play secure remote access in
        about an hour, with no client, server changes, or ongoing maintenance.
        
        Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
        ----------------------------------------------------------------------------
        
        
        
        
        
        
        ---------------------------------------------------------------------------
        Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
        The Gartner Group just put Neoteris in the top of its Magic Quadrant,
        while InStat has confirmed Neoteris as the leader in marketshare.
            
        Find out why, and see how you can get plug-n-play secure remote access in
        about an hour, with no client, server changes, or ongoing maintenance.
                 
        Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
        ----------------------------------------------------------------------------