📄 novell netware - cracking netware.htm
字号:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<!-- saved from url=(0041)http://212.187.6.213/download/nncn104.htm -->
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word"><HEAD><TITLE>The Disclaimer</TITLE>
<META content="text/html; charset=windows-1252" http-equiv=Content-Type>
<META content=Word.Document name=ProgId>
<META content="MSHTML 5.00.2614.3500" name=GENERATOR>
<META content="Microsoft Word 9" name=Originator><LINK
href="./nncn104_files/filelist.xml" rel=File-List>
<STYLE>@font-face {
font-family: MS Mincho;
}
@font-face {
font-family: \@MS Mincho;
}
P.MsoNormal {
FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; mso-fareast-font-family: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan
}
LI.MsoNormal {
FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; mso-fareast-font-family: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan
}
DIV.MsoNormal {
FONT-FAMILY: "Times New Roman"; FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; mso-fareast-font-family: "Times New Roman"; mso-style-parent: ""; mso-pagination: widow-orphan
}
P.MsoPlainText {
FONT-FAMILY: "Courier New"; FONT-SIZE: 10pt; MARGIN: 0cm 0cm 0pt; mso-fareast-font-family: "Times New Roman"; mso-pagination: widow-orphan
}
LI.MsoPlainText {
FONT-FAMILY: "Courier New"; FONT-SIZE: 10pt; MARGIN: 0cm 0cm 0pt; mso-fareast-font-family: "Times New Roman"; mso-pagination: widow-orphan
}
DIV.MsoPlainText {
FONT-FAMILY: "Courier New"; FONT-SIZE: 10pt; MARGIN: 0cm 0cm 0pt; mso-fareast-font-family: "Times New Roman"; mso-pagination: widow-orphan
}
DIV.Section1 {
page: Section1
}
</STYLE>
</HEAD>
<BODY lang=EN-GB style="tab-interval: 36.0pt">
<DIV class=Section1>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">The
Disclaimer<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">I don't
encourage illegal activities, I really mean this! And if you really want
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">to try
something against the law, and you get caught I have warned you, hehe
:p<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">Introduction<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">This is
the first tutorial I have wrote. It was intensely only written for BSRF
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">(Black
Sun Research Facility), and it will be properly not the last one :)
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">though.
So if you discover some errors, please let me remind you this was my
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">first
one. Last note before I will begin writing about "Cracking Netware", at
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">the
moment you can't contact me by e-mail or whatsoever... I rather remain
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">'hidden', for the
moment.<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Index
Novell Netware tutorials:<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Novell
Netware - Cracking Netware<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Maybe
I'll write an advisory for system administrators or even my own found
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">vulnerabilities in Netware, but
remember I can't guarantee anything!<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">It's
possible that I'll write some other tutorials about different topics as
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">well.<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Well
this one will be about:<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Novell
Netware - Cracking Netware (v 1.04)<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Like
many other Operating Systems Netware original (before 5.xx) doesn't work
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">with
the TCP protocol, it uses it's own protocol called Internet Packet eXchange
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">(IPX).
This protocol isn't vulnerable at the moment to any kind of Denial of
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Service
(DoS) attacks like SYN-flood, while the TCP protocol is. Because Netware
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">didn't
get much attention from crackers they thought there system was
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">impenetrable, and so they didn't
much about security updates. Now many of you <o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">guys
think this is really cool, and think they can crack any Netware server with
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">some
help from the many tools that are available online. Well, I can tell you
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">that's
not that easy.<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">The
most important reason; Which Netware version they run, if running version
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">4.1 or
higher the change you will sneak in unnoticed will be really small.
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Unless
you have to deal with some really lame most times lazy system
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">administrators.
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">If the
system administrators patch the Netware server(s) on regular
base...<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Also if
you have some kind of permanent account with standard Netware rights,
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">not one
who's adjusted.<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">You
will need much time and don't be disturbed. Especially in classrooms this
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">will be
difficult to get, so you have to find a way with Social Engineering to
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">accomplish this
:(<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Before
I continue with Netware security and how to bypass it, first I'm going to
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">tell
you something about Servers & Clients.<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'"><![if !supportEmptyParas]> <![endif]><o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">After a
Netware client in Windows 9x has been installed it's possible to access
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">the
Netware server. When you arrive in Windows you'll see a login screen. Before
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">you
have logged into the network the "client <--> server" has already
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">established a connection with each
other, only this connection isn't validated <o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">by the
user who created the connection! You can see this connection on the
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">console
when monitor.nlm is loaded. You people don't know what the console
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">means?
Ok, I'll explain. The server is nothing less but a computer, not a normal
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">one
like a desktop or tower. No call it a very big tower. On this machine the
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">Netware
server software is installed, when you turn on this machine first dos
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">(6.22
or lower) will be loaded. After this you can boot Netware by executing
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">file
"server.exe", now many files will be loaded and you'll get a lot of
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">messages. It looks like when you're
booting a Linux machine. After the boot <o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">process
you look at a sort of dos screen, this is called the console. At the
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">console
you have the highest rights on the particularly Netware server. You can
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">down
the server any time you want with just one simple command. So the main
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">group
of crackers tries to get this access. But there are many different ways to
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN style="mso-fareast-font-family: 'MS Mincho'">crack a
Netware server. It just depends on what you want to do at the Netware
<o:p></o:p></SPAN></P>
<P class=MsoPlainText><SPAN
style="mso-fareast-font-family: 'MS Mincho'">server.<o:p></o:p></SPAN></P>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -