full-disclosure - OT microsoft "feature"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: research at bugtraq.org (Bugtraq Security Systems)
Subject: OT microsoft "feature"

Welcome to OCTAL! That's a feature with no quotes. We at BSS recommend
you read more of our hacking documents to fully understand such things as
OCTAL and HEXADECIMAL. We agree that Windows hacking is hard, and you
should be prepared to study to really undestand the internals of the
cmd.exe toolset.

YOURS TRULY,
BUGTRAQ SECURITY SYSTEMS


On Fri, 16 Apr 2004, Davide Del Vecchio wrote:

> Hi list,
>
> I`m sorry for the OT,
> Anyone has a good explaination for this ?
>
> Windows XP Professional SP1
>
> C:\>ping 10.10.10.10
>
> Esecuzione di Ping 10.10.10.10 con 32 byte di dati:
>
> Control-C
> ^C
> C:\>ping 010.10.10.10
>
> Esecuzione di Ping 010.10.10.10 [8.10.10.10] con 32 byte di dati:
>
> Control-C
> ^C
> C:\>ping 010.010.10.10
>
> Esecuzione di Ping 010.010.10.10 [8.8.10.10] con 32 byte di dati:
>
> Control-C
> ^C
> C:\>ping 010.010.010.10
>
> Esecuzione di Ping 010.010.010.10 [8.8.8.10] con 32 byte di dati:
>
> Control-C
> ^C
> C:\>ping 010.010.010.010
>
> Esecuzione di Ping 010.010.010.010 [8.8.8.8] con 32 byte di dati:
>
> Control-C
> ^C
> C:\>
>
> Obviously if you try the same thing on a *NIX or IOS the "0" is
> just ignored.
> It seems like the 0 character implies a modification in the IP field..
> It`s not a bug of the "ping" command, because it "works" on telnet, ftp...
>
> d.
>
>  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> Davide Del Vecchio "Dante Alighieri" dante@...ghieri.org ~ dante@...ejack.it
> http://www.alighieri.org http://www.bluejack.it http://www.ezln.it
>  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>