lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri May 12 18:50:45 2006
From: arr at watson.org (Andrew R. Reiter)
Subject: escalating privileges with named pipes


Not sure if the below is the same, but:

http://www.blakewatts.com/namedpipepaper.html

On Fri, 12 May 2006, 3APA3A wrote:

:Dear /dev/null,
:
:You can try this one:
:
:DigitalScream, Windows named pipes exploitation
:http://www.phrack.org/phrack/61/p61-0x03_Linenoise.txt
:
:In addition to explanations there are references to real-world exploits.
:
:--Friday, May 12, 2006, 6:16:11 PM, you wrote to full-disclosure@...ts.grok.org.uk:
:
:dn> Hello list,
:
:dn> does anyone know a practical example of named pipe attack to escalate
:dn> privileges in Windows environment? I'm trying to learn more about named pipe
:dn> attacks so any link/paper suggestion would be much appreciated (I already
:dn> found "Discovering and Exploiting Named Pipe Security Flaws for Fun and
:dn> Profit"). 
:
:dn> Thank you very much.
:
:dn> -E.
:
:
:
:dn> ____________________
:dn> http://www.email.si/
:
:dn> _______________________________________________
:dn> Full-Disclosure - We believe in it.
:dn> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
:dn> Hosted and sponsored by Secunia - http://secunia.com/
: 
:
:
:-- 
:~/ZARAZA
:????????????? ???? ????? ??????? ??? ???????????? ?????????. (???)
:
:_______________________________________________
:Full-Disclosure - We believe in it.
:Charter: http://lists.grok.org.uk/full-disclosure-charter.html
:Hosted and sponsored by Secunia - http://secunia.com/
:
:

--
arr@...son.org

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ