bugtraq - Re: security enforcement - new monitor for winnt

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <032701c41677$9072f9f0$3702a8c0@ashran>
Date: Tue, 30 Mar 2004 18:53:45 +0200
From: "Amir Mohammadkhani-Aminabadi" <amir.mohammadkhani@...surance.de>
To: "Liu Die Yu" <liudieyuinchina@...oo.com.cn>
Cc: <bugtraq@...urityfocus.com>
Subject: Re: security enforcement - new monitor for winnt


Please take a look at:
http://www.heise.de/ct/ftp/projekte/iecontroller/

Its open source and seems to do the same thing.

----- Original Message ----- 
From: "Liu Die Yu" <liudieyuinchina@...oo.com.cn>
To: <bugtraq@...urityfocus.com>
Sent: Tuesday, March 30, 2004 6:34 AM
Subject: security enforcement - new monitor for winnt


>
>
> i want to stop ie:
> writing EXE/CAB/LNK ... files,
> calling MSHTA.EXE to parse remote web pages,
> accessing files outside "favorites" and cache("content.ie5").
>
> i want to stop WSCRIPT.EXE from parsing files inside TEMP and cache.
>
> i want to stop the system running executable files located in TEMP and
cache.
>
> afaik, i can stop ie 0day exploits by doing these things.
>
> so, i made this:
> http://umbrella.name/winblox/
> of course, free. and you can define your own rules easily(assuming you
guys know a bit about regular expression).
>
> it's totally a new idea(afaik). so, not for operational uses.
>