Welcome to...

Every purchase feeds an African child for one month! (What?)
Home arrow Downloads

Document details

Details for Attack/Defend 1: DCOM, WebDAV, TTYPROMPT
PropertyValue
NameAttack/Defend 1: DCOM, WebDAV, TTYPROMPT
DescriptionThe first in perhaps a series of presentations which show common attacks along with detailed, annotated network traces. This gives a perspective on both sides of a network intrusion. The attacks are shown step-by-step, and the network traces are examined and explained at a high level. This zip file includes the actual ethereal log files and explains how to use filters to isolate important data from those log files. I try to remain technically agnostic in this presentation so technical and non-technical readers can benefit. This first installment of Attack-Defend looks at quiet and noisy nmap scans, a high-end vulnerability scanner (www.heatscanner.com), the Solaris TTYPROMPT telnet bypass (tool-less!), the Microsoft Webdav overflow, and the Microsoft RPC DCOM overflow (the attack used in the August 2003 LoveSan/Msblaster/DCOM worm!)
Filename2003-Attack_Defend_1.zip
Filesize4.25 MB
Filetypezip (Mime Type: application/zip)
CreatorJohnny
Created On: 14.08.2003 03:56
ViewersEverybody
Maintained by
Hits13995 Hits
Last updated on 01.11.2006 03:56
Homepage