Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread adrian . lamo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear n3td3v, God disagrees[1]. - -al [1] http://en.wikipedia.org/wiki/AIDS On Mon, 17 Nov 2008 16:42:31 -0500 Trollie Fingers <[EMAIL PROTECTED]> wrote: >point taken. i still don't agree that the rest of someones life >should be >an extension of t

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread Michael Boman
On Mon, Nov 17, 2008 at 10:42 PM, Trollie Fingers <[EMAIL PROTECTED]> wrote: > point taken. i still don't agree that the rest of someones life should be > an extension of their prison sentence. I thought that after serving time the individual has payed the price to the society, but I guess that's

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread Trollie Fingers
point taken. i still don't agree that the rest of someones life should be an extension of their prison sentence. On Mon, Nov 17, 2008 at 4:29 PM, <[EMAIL PROTECTED]> wrote: > On Mon, 17 Nov 2008 15:54:26 EST, Trollie Fingers said: > > > I also don't think we should prevent people from arranging

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread adrian . lamo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear n3td3v, Are you aware that by holding down a *SHIFT* key and then pressing the *8* key you can also make an asterix? This may help you when your numeric keypad is broken. All the best, - -al On Mon, 17 Nov 2008 16:29:26 -0500 [EMAIL PROTECTED]

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread Valdis . Kletnieks
On Mon, 17 Nov 2008 13:16:01 PST, William Lefkovics said: > Isn't the key 'profiting' from their crimes versus talking/writing about > them? I hope so. Oh, *usually* they're allowed to talk, write, give interviews, and so on - they just aren't allowed to personally make any money by doing so. S

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread Valdis . Kletnieks
On Mon, 17 Nov 2008 15:54:26 EST, Trollie Fingers said: > I also don't think we should prevent people from arranging words as they sit > fit on printed items. Isn't there some sort of amendment over here that > protects this kind of thing? (For those in Ermerika.) It's generally accepted that co

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread William Lefkovics
r 17, 2008 9:31 AM To: full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] NTLM Multiprotocol Replay attacks On Mon, 17 Nov 2008 14:46:50 GMT, n3td3v said: > We should bring in a law to stop criminal hackers from profiteering > from their crimes or otherwise reaching any kind of

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread Trollie Fingers
ROTECTED] > *Sent*: Monday, November 17, 2008 9:31 AM > *To*: full-disclosure@lists.grok.org.uk > *Subject*: Re: [Full-disclosure] NTLM Multiprotocol Replay attacks > > > On Mon, 17 Nov 2008 14:46:50 GMT, n3td3v said: > > > We should bring in a law to stop criminal hackers

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread [EMAIL PROTECTED]
a book on his most recent conviction for armed robbery/kidnapping here in Las Vegas. From: [EMAIL PROTECTED] Sent: Monday, November 17, 2008 9:31 AM To: full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] NTLM Multiprotocol Replay attacks On M

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread Valdis . Kletnieks
On Mon, 17 Nov 2008 14:46:50 GMT, n3td3v said: > We should bring in a law to stop criminal hackers from profiteering > from their crimes or otherwise reaching any kind of stardom. You might want to actually investigate what the law really is in your area. In most areas, there already *are* laws

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-17 Thread n3td3v
On Mon, Nov 17, 2008 at 3:08 AM, <[EMAIL PROTECTED]> wrote: > ps: yes my name is Adrian Lamo, but not the famous one profiled in > the upcoming kevin spacey documentary, which will undoubtedly be > the greatest tool ever! Why do we as a community reserve so much time on criminal hackers? We shou

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-16 Thread adrian . lamo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Andrea Tabasco, To be fair, the only great thing about the cdc is the appetites of the members, and the only great tools from the group would be the members themselves. Thank you for misunderstanding the word "great". best regards, - -al ps: y

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-16 Thread Andres Tarasco
Its a completely new tool as it does not share code with the old smbrelay however, as the main goal is to replay NTLM authentication challenges, i decided to name it "smbrelay", like the great cdc tool. smbrelay3 have been tested against windows 2000/xp/2003 and works fine. Andres 2008/11/16 yers

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-16 Thread yersinia
smbrelay in origin was, some years ago, created by CDC. M$ smb signing do it historic. This tool is an evolution of this ? Regards On Fri, Nov 14, 2008 at 9:37 PM, Andres Tarasco <[EMAIL PROTECTED]> wrote: > I have published a new proof of concept tool, named "Smbrelay3", that is > able to repla

Re: [Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-15 Thread Kurt Grutzmacher
On Fri, Nov 14, 2008 at 09:37:46PM +0100, Andres Tarasco wrote: > I have published a new proof of concept tool, named "Smbrelay3", that is > able to replay NTLM authentication from several protocols like > SMB/HTTP/IMAP/.. > http://www.tarasco.org/security/smbrelay/index.html Great little tool fro

[Full-disclosure] NTLM Multiprotocol Replay attacks

2008-11-14 Thread Andres Tarasco
I have published a new proof of concept tool, named "Smbrelay3", that is able to replay NTLM authentication from several protocols like SMB/HTTP/IMAP/.. http://www.tarasco.org/security/smbrelay/index.html Andrés Tarascó ___ Full-Disclosure - We believe