[Samba] login scripts do not run
kent
kent at mail.wareham.mec.edu
Fri Sep 24 08:32:14 GMT 2004
Mayebe I should have explained more of what is encrypted. Below is an example
of what is encrypted:
5B1CC95BAF6B10DD09D42ADE1A14D8D27134E31B1FBD6BDBB90993FC9D284C730E53ABC70C7ACC4C661CE4BD6E00F8C372A3B9A2A18C142AE0D1CB23B8870C772045D1FDA1D3B13729D75B66D97FB1360B1599735F2E2FBA2B3723C10F2A81A79BD4D7B89AF2684B8D245597F89D71962786FFE9069D1D93CD8EC895C1084440D7ADE53C9A4584A0DCCDAAB86433934767E9D72A3E48ABF02B870C9BB1A657114FE340972054C578602DB4A032ED0FFFD1B83149FDBBB73A34941D13626B84DA
That contains the username, password, path to command to run, domain, and an
option for a directory to start in.
It is used like this: rurasp.exe somefile.rap where the contents of
somefile.rap is the string of characters above.
Does that help?
Denis Vlasenko <vda at port.imtp.ilyichevsk.odessa.ua> wrote:
> On Thursday 23 September 2004 20:18, kent wrote:
> > Hello,
> > We have been successfully using RUNASP.exe
> > (http://www.mast-computer.com/c_9-s_7-l_en.html). You have to pay for
licensing
> > however. We use it for everything, running programs, udate Norton AV.
Password
> > is encrypted. Is very simple to use.
>
> If this script is runnable by the user then user can see that
> encrypted password and use it to launch some malicious code
> instead using this tool with admin rights.
>
> Correct me if im wrong.
> --
> vda
>
>
More information about the samba
mailing list