Vulnerability Development mailing list archives

Re: File Share Vacuum


From: dim () XS4ALL NL (Dimitry Andric)
Date: Sun, 30 Jan 2000 18:28:08 +0100


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2000-01-27 at 19:45 Jonas Denily wrote:

If you know of any of these such files, please email me.

If the target user(s) are using Windows 9x, why not just download

C:\Windows\System.dat
C:\Windows\User.dat

These files contain most or all of the Windows 9x registry (dependent
on whether user profiles are enabled or not), and can be readily
dumped into ASCII using RegEdit. Windows 9x does NOT keep these files
locked when using them, so you can read/download them without any
problem. This is (alas) not possible on NT, AFAIK...

You can also try:
C:\Windows\System.da0          (registry backup file for Win95)
C:\Windows\User.da0            (              "               )
C:\Windows\SysBckup\rb000.cab  (registry backup file for Win98)
C:\Windows\SysBckup\rb001.cab  (              "               )
C:\Windows\SysBckup\rb002.cab  (              "               )
C:\Windows\SysBckup\rb003.cab  (              "               )
C:\Windows\SysBckup\rb004.cab  (              "               )

These last five also contain copies of System.ini and Win.ini, and
are even nicely compressed into M$-Cabinet format for speedy
downloading. ;-)

Cheers,
- --
Dimitry Andric <dim () xs4all nl>
PGP key: http://www.xs4all.nl/~dim/dim.asc
KeyID: 4096/1024-0x2E2096A3
Fingerprint: 7AB4 62D2 CE35 FC6D 4239 4FCD B05E A30A 2E20 96A3

-----BEGIN PGP SIGNATURE-----
Version: Encrypted with PGP Plugin for Calypso
Comment: http://www.gn.apc.org/duncan/stoa_cover.htm

iQA/AwUBOJRmkLBeowouIJajEQIvYgCfYifoqfVubVN2Y3SS3K6IHO2/fykAoJq/
9nrEW5YoFlL5vKGn8R/nSG+s
=ACwZ
-----END PGP SIGNATURE-----


Current thread: