[Samba] login scripts do not run

kent kent at mail.wareham.mec.edu
Fri Sep 24 08:32:14 GMT 2004


Mayebe I should have explained more of what is encrypted. Below is an example  
of what is encrypted:  
  
  
5B1CC95BAF6B10DD09D42ADE1A14D8D27134E31B1FBD6BDBB90993FC9D284C730E53ABC70C7ACC4C661CE4BD6E00F8C372A3B9A2A18C142AE0D1CB23B8870C772045D1FDA1D3B13729D75B66D97FB1360B1599735F2E2FBA2B3723C10F2A81A79BD4D7B89AF2684B8D245597F89D71962786FFE9069D1D93CD8EC895C1084440D7ADE53C9A4584A0DCCDAAB86433934767E9D72A3E48ABF02B870C9BB1A657114FE340972054C578602DB4A032ED0FFFD1B83149FDBBB73A34941D13626B84DA
 
  
That contains the username, password, path to command to run, domain, and an  
option for a directory to start in.  
  
It is used like this: rurasp.exe somefile.rap where the contents of 
somefile.rap is the string of characters above.  
 
Does that help? 
 
Denis Vlasenko <vda at port.imtp.ilyichevsk.odessa.ua> wrote:   
> On Thursday 23 September 2004 20:18, kent wrote:  
> > Hello,  
> > We have been successfully using RUNASP.exe  
> > (http://www.mast-computer.com/c_9-s_7-l_en.html). You have to pay for  
licensing  
> > however. We use it for everything, running programs, udate Norton AV.  
Password  
> > is encrypted. Is very simple to use.  
>   
> If this script is runnable by the user then user can see that  
> encrypted password and use it to launch some malicious code  
> instead using this tool with admin rights.  
>   
> Correct me if im wrong.  
> --  
> vda  
>   
>   
  



More information about the samba mailing list