full-disclosure - Re: Extracting files from SMB packet captures

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <28f529ba0702262022i6758cddse9007f6135b3dde6@mail.gmail.com>
Date: Mon, 26 Feb 2007 21:22:03 -0700
From: "Mike Vasquez" <mnv@...mni.princeton.edu>
To: "Jim O'Gorman" <jogorman@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Extracting files from SMB packet captures

While I haven't done anything specifically with SMB, I did come up with the
following a few years back: it might prove useful in your research:

http://www.adminprep.com/articles/default.asp?action=show&articleid=52

It covers taking an ethereal data cap, and taking portions of it to come up
with the original content, i.e. .wav's, .mov's, .zip's, .jpg's, etc.  You
get the idea.

If you have any sanitized caps you want to send my way, I'd be happy to play
around with them, as well.

Mike

On 2/26/07, Jim O'Gorman <jogorman@...il.com> wrote:
>
> I have been working with extracting files from full-content SMB packet
> captures. I would like to compare what I have found with other sources to
> see how right/wrong I am about a few things.
>
> Does anyone have good sources of examples on pulling files out of SMB
> packet captures I can use as a reference? Tools or write ups would be great.
>
>
> Thanks
> Jim
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/