UGN Security
Posted By: Gremelin Articles - 09/21/02 08:37 AM
I am releasing 3 new articles on UGN within the next two nights. I hope that you all enjoy them...

They are:
WOL (Wake On Lan)
640x480 in XP
Windows Internet Gateway's

I'm working on:
Remote Sterio

I need some ideas. If you have something that you'd like to see researched feel free to email gizmo@undergroundnews.com and i'll do the research and get back to you. Or post them here.

Please though, only serious posts/emails though.

I'll take just about any smart idea (not smart as in smart [censored] dick)...
Posted By: Gremelin Re: Articles - 09/23/02 12:45 AM
Anyone? lol... Comeon I know you all don't know everything about everything...
Posted By: SilentRage Re: Articles - 09/23/02 01:25 AM
Fine gizmo, you wanna know what I wanna know? Give me the full detailed specifications for the MP3 file format.

Or, you can write an article on how ListView window can be created and manipulated. I'm particularly interested in learning how the damn thing is painted.

Or how about the NetBIOS protocol. That would be nice, I've been meaning to make a nbtstat-like utility that produces more information that you can actually understand.

An article about named and anonymous pipes would be nice too. How to create one, how to write/read them. Example code in C - the works.

Ok fine, you probably don't wanna make an article on all the above. So here's one you probably would like to write. Write an article about that new wireless radio frequency they're starting to use which doesn't have limitations like not going through walls like bluetooth and such.
Posted By: Gremelin Re: Articles - 09/23/02 02:20 AM
humm humm... ::thinks:: I'll work on them all... I'm not too sure how i'll be able to do the first few...
Posted By: pergesu Re: Articles - 09/23/02 02:40 AM
I want to find out how to identify wingates. Totally open proxies, not just for specific ports. Things like SR's port forwarder. I found the wingate at www.wingate.com and installed it on one of my boxes, figured out how to identify it, and made a scanner. But they don't seem to be that common, I've only found one. So how about getting other banners? Other methods of identifying one? I don't think it would be *too* tough, not like some of the other stuff mentioned. And I'll write a scanner that actually finds stuff and you can put it in the tools section
Posted By: Gremelin Re: Articles - 09/23/02 06:25 AM
Perg, not too many people run wingates, its more common to find a proxy than just a wingate...
Posted By: pergesu Re: Articles - 09/23/02 11:26 PM
Do proxies work for all ports though? That's what I wanna find. What about lookin into proxies then, so I can write my Java proxy scanner?
Posted By: BackSlash Re: Articles - 09/23/02 11:42 PM
why do we have to dl these articles opposed to just reading them off the site, your one to make things difficult gizmo
Posted By: Gremelin Re: Articles - 09/24/02 04:34 AM
BS: because I make them in one formata because their not wrote just for UGN...

Perg: If I recall correctly you can set most proxy programs to accept connections on any port, but common ports are 80 and 8080 and a buncha others...
Posted By: pergesu Re: Articles - 09/26/02 05:46 PM
I don't mean accepting connections on any port, I mean rerouting connections for any port. As far as I know, http proxies only work for http requests. So you can use an http proxy to browse the web, but you can't use it to bounce telnet connections. So that's what I mean by working for all ports, allowing connections for different services like http, ftp, and telnet. Am I wrong though, do proxies work like this?
Posted By: Gremelin Re: Articles - 09/27/02 12:16 AM
Diff proxies are set for diff protocol's... thats why not al the time you can use them through IRC or Telnet heh...
Posted By: black^Pimp Re: Articles - 09/27/02 07:08 AM
y'all heard about a method called Banner Grabing ?
Posted By: black^Pimp Re: Articles - 09/27/02 07:13 AM
well if not, than here it is.

Banner Grabbing :

This is good technique to learn and can also be used to perform a manual
portscan. E.g. Telnetting to every port on a victims computer and noting down which ones
you could connect to you and what services are running. This is what hackers had
to resort to before automated portscanners were written.

Banner grabbing is the art of connecting to a certain port or service and noting
down what response you get from the port daemon (The little "prog" that listens
for connections and then sends out information accorinding to what the user
types/does). Here is an example.

The targets IP is 123.123.123.123. You need to find out what OS he is running.
Lets try some common ports that give us feedback. We'll try port 80, http. To do
this we telnet to...and so on.

If you want more details, just let me know.
Posted By: Gremelin Re: Articles - 09/27/02 09:04 PM
Quote:
Originally posted by black^Pimp:
well if not, than here it is.

Banner Grabbing :

This is good technique to learn and can also be used to perform a manual
portscan. E.g. Telnetting to every port on a victims computer and noting down which ones
you could connect to you and what services are running. This is what hackers had
to resort to before automated portscanners were written.

Banner grabbing is the art of connecting to a certain port or service and noting
down what response you get from the port daemon (The little "prog" that listens
for connections and then sends out information accorinding to what the user
types/does). Here is an example.

The targets IP is 123.123.123.123. You need to find out what OS he is running.
Lets try some common ports that give us feedback. We'll try port 80, http. To do
this we telnet to...and so on.

If you want more details, just let me know.
hahaha, you just lost half of your respect points, and that already wasn't too many... Who cares about grabbing? Everyone and their mother (my mother for one has 3 port scanners on her box) uses a port scanner.
Posted By: black^Pimp Re: Articles - 09/27/02 09:13 PM
huh ? what's wrong with you man ?

respect points ? huh you're funny

i just do my thang.
Posted By: pergesu Re: Articles - 09/27/02 09:38 PM
Does your mother really have port scanners on her box? She does that sort of stuff?
Posted By: SilentRage Re: Articles - 09/28/02 01:26 PM
ya giz, I'm with mr pimp on this one. Banner grabbing is not without it's usefulness. Portscanners sometimes have banner grabbing built in, and if you don't have any idea what the banners may tell ya, then it's worthless to ya. Don't dis working techniques just because you personally rarely have need for them.

AND, I have more respect for people who target an IP/computer and methodically examine all the ports and their banners than for opportunists who scan a whole IP range for an open port.
Posted By: Gremelin Re: Articles - 09/30/02 04:26 AM
no the whole fact of the matter is he wants a text on them when most people could care less, all the scanners i use all have grabbers.

And yes, she does have 3 scanners on her box, scary thing is that only 1 is mine...
© UGN Security Forum