full-disclosure - Re: Bypassing Personal Firewall (ZoneAlarmPro)Using DDE-IPC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sat Oct  1 20:46:13 2005
From: mail at hackingspirits.com (Debasis Mohanty)
Subject: Re: Bypassing Personal Firewall
	(ZoneAlarmPro)Using DDE-IPC

TZ Wrote: 
>> Interesting, please define "Current", I really would like to investigate
how ZA would do this. Because as I stated 
>> previously (afaik) you can't do it with onboard windows functions, must
be some wild patching and hooking going on 
>> (again).

The stuffs are here -> 

ZA Internet Security Suite : http://tinyurl.com/96x3s

ZA Pro: http://tinyurl.com/7qdkc

If the above link doesn't work then look for those products in the following
link: 
http://www.zonelabs.com/store/content/home.jsp


- D 

I hope I am not doing free marketing for Zone Labs ;-) 


 

-----Original Message-----
From: Thierry Zoller [mailto:Thierry@...ff-em.com] 
Sent: Sunday, October 02, 2005 1:06 AM
To: Debasis Mohanty
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] Re: Bypassing Personal Firewall
(ZoneAlarmPro)Using DDE-IPC

Dear Debasis,

DM> This one will work but as long as an user's intervention is there 
DM> but if you try to simulate key strokes using your code then this is 
DM> prevented by current version of ZA.
Interesting, please define "Current", I really would like to investigate how
ZA would do this. Because as I stated previously (afaik) you can't do it
with onboard windows functions, must be some wild patching and hooking going
on (again).

--
Regards,
Thierry Zoller