DocumentsDate added

Trojan Explorer.exehot!

21.09.2001

This trojan explorer creates a user account called "hack0r" with a password of "cha0srul3sall!" on a windows NT machine, then runs explorer like normal. Plop it in the root of c: and when an admin user logs in, the pathing problem runs this one instead. Then, log in and enjoy. Props to Jimmy for the user creation piece! The trojan was hand-rolled by yours truly. This should definitely set off your virus scanner.

Hits: 55728

• Details
• Download

Unicode Attackerhot!

08.08.2001

This basic perl script does the unicode attack. Very basic, but made unicode easier to visualize. My second perl script ever. I didn't realize perl was so c00l! ;-)

Hits: 6930

• Details
• Download

Win2K LDAP authentication bruteforcerhot!

05.04.2001

This never really got finished... Anyhow, I noticed when playing around with LDAP on Win2k that LDAP authentication requests came back with different response codes when using an existing username vs a non-existing one. Using this technique, you can enumerate usernames on the server. In addition, LDAP authentications don't seem to count as invalid logins as far as the 2k user is concerned. This means you can remotely determine usernames, and attempt passwords to your heart's content without bothering the set lockouts. Nice.

Hits: 8795

• Details
• Download
• View