full-disclosure - SP2 and NMAP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: ACastigliola at unumprovident.com (Castigliola, Angelo)
Subject: SP2 and NMAP

Microsoft told Fyodor the reason they disabled raw sockets in SP2 was:

"We have removed support for TCP sends over RAW sockets in SP2. We
surveyed applications and found the only apps using this on XP were
people writing attack tools."

Thor:

"Fyodor also said to try the --win_norawsock option worked in most
cases."

Paul Wobbe:

"I have found that I you set Namp to "do not ping" the IP and "do not
detect the OS" it works wit SP2."

Angelo Castigliola III
Operations Technical Analyst I
UnumProvident IT Services
207.575.3820

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of PJ
Sent: Thursday, August 12, 2004 9:01 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] SP2 and NMAP
Importance: High

FYI... The current NMAP (Windows) version is now broken when applying
SP2.
MS has disabled the use of RAW packets... Details can be found on
insecure.org (by Fyodor).
... But then NMAP also ran on Win95 which did not support RAW packets -
thus
maybe a patched version will be available in the future.

Before someone says it ... I will.  You should be running Linux anyway
if
you want real functionality.

PJ

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html