📄 hacking faq.txt
字号:
Q. How do I crack a Novell password?A. Taken from the Novell Netware Hack FAQ.If Intruder Detection is off, you can use a "brute force" password cracker.Encrypted passwords is Novell's way of protecting passwords from sniffers.Since older versions of Netware (2.15c) sent passwords as plain text over thewire, a sniffer could see the password as it went by. To secure things,Novell gave the administrator a way to control this. Later versions of theLOGIN.EXE program would encrypt the password before transmitting it acrossthe wire to the server. But before this could happen, the shell (NETX) hadto be updated. Since some locations had to have older shells and olderversions of LOGIN.EXE to support older equipment, the administrator has theoption of allowing unencrypted passwords to access the server. This is doneby typing SET ALLOW UNENCRYPTED PASSWORDS=ON at the console or by adding itto the AUTOEXEC.NCF. The default is OFF, which means NOVELBFH could be beepingthe server console every attempt! Fortunately most sites turn this switch on tosupport some old device.If you have access to the console, either by standing in front of it or byRCONSOLE, you can use SETSPASS.NLM, SETSPWD.NLM or SETPWD.NLM to reset passwords.Just load the NLM and pass it command line parameters: NLM Account(s) reset Netware version(s) supported ------------ ----------------- ---------------------------- SETSPASS.NLM SUPERVISOR 3.x SETSPWD.NLM SUPERVISOR 3.x, 4.x SETPWD.NLM any valid account 3.x, 4.xIf you can plant a password catcher or keystroke reader, you can get themthis way. The LOGIN.EXE file is located in the SYS:LOGIN directory, andnormally you will not have access to put a file in that directory. The bestplace to put a keystroke capture program is in the workstation's path, withthe ATTRIB set as hidden. The advantage is that you'll get the password andNetware won't know you swiped it. The disadvantage is getting access to themachine to do this. The very best place to put one of these capture programsis on a common machine, like a pcAnywhere box, which is used for remote access.Many locations will allow pcAnywhere access to a machine with virtually no software on it, and control security access to the LAN by using Netware's security features. Uploading a keystroke capture program to a machine like this defeats this.Q. What are the domain codes?A. Below is the current list of domain codes.AD AndorraAE United Arab EmiratesAF AfghanistanAG Antigua and BarbudaAI AnguillaAL AlbaniaAM ArmeniaAN Netherland AntillesAO AngolaAQ AntarcticaAR ArgentinaAS American SamoaAT AustriaAU AustraliaAW ArubaAZ AzerbaidjanBA Bosnia-HerzegovinaBB BarbadosBD BangladesBE BelgiumBF Burkina FasoBG BulgariaBH BahrainBI BurundiBJ BeninBM BermudaBN Brunei DarussalamBO BoliviaBR BrazilBS BahamasBT ButhanBV Bouvet IslandBW BotswanaBY BelarusBZ BelizeCA CanadaCC Cocos (Keeling) IslandsCF Central African RepublicCG CongoCH SwitzerlandCI Ivory CoastCK Cook IslandsCL ChileCM CameroonCN ChinaCO ColombiaCR Costa RicaCS CzechoslovakiaCU CubaCV Cape VerdeCX Christmas IslandCY CyprusCZ Czech RepublicDE GermanyDJ DjiboutiDK DenmarkDM DominicaDO Dominican RepublicDZ AlgeriaEC EcuadorEE EstoniaEG EgyptEH Western SaharaES SpainET EthiopiaFI FinlandFJ FijiFK Falkland Islands (Malvinas)FM MicronesiaFO Faroe IslandsFR FranceFX France (European Territory)GA GabonGB Great Britain (UK)GD GrenadaGE GeorgiaGH GhanaGI GibraltarGL GreenlandGP Guadeloupe (French)GQ Equatorial GuineaGF Guyana (French)GM GambiaGN GuineaGR GreeceGT GuatemalaGU Guam (US)GW Guinea BissauGY GuyanaHK Hong KongHM Heard and McDonald IslandsHN HondurasHR CroatiaHT HaitiHU HungaryID IndonesiaIE IrelandIL IsraelIN IndiaIO British Indian Ocean TerritoryIQ IraqIR IranIS IcelandIT ItalyJM JamaicaJO JordanJP JapanKE KenyaKG KirgistanKH CambodiaKI KiribatiKM ComorosKN Saint Kitts Nevis AnguillaKP North KoreaKR South KoreaKW KuwaitKY Cayman IslandsKZ KazachstanLA LaosLB LebanonLC Saint LuciaLI LiechtensteinLK Sri LankaLR LiberiaLS LesothoLT LithuaniaLU LuxembourgLV LatviaLY LibyaMA MoroccoMC MonacoMD MoldaviaMG MadagascarMH Marshall IslandsML MaliMM MyanmarMN MongoliaMO MacauMP Northern Mariana IslandsMQ Martinique (French)MR MauritaniaMS MontserratMT MaltaMU MauritiusMV MaldivesMW MalawiMX MexicoMY MalaysiaMZ MozambiqueNA NamibiaNC New Caledonia (French)NE NigerNF Norfolk IslandNG NigeriaNI NicaraguaNL NetherlandsNO NorwayNP NepalNR NauruNT Neutral ZoneNU NiueNZ New ZealandOM OmanPA PanamaPE PeruPF Polynesia (French)PG Papua NewPH PhilippinesPK PakistanPL PolandPM Saint Pierre and MiquelonPN PitcairnPT PortugalPR Puerto Rico (US)PW PalauPY ParaguayQA QatarRE Reunion (French)RO RomaniaRU Russian FederationRW RwandaSA Saudi ArabiaSB Solomon IslandsSC SeychellesSD SudanSE SwedenSG SingaporeSH Saint HelenaSI SloveniaSJ Svalbard and Jan Mayen IslandsSK Slovak RepublicSL Sierra LeoneSM San MarinoSN SenegalSO SomaliaSR SurinameST Saint Tome and PrincipeSU Soviet UnionSV El SalvadorSY SyriaSZ SwazilandTC Turks and Caicos IslandsTD ChadTF French Southern TerritoryTG TogoTH ThailandTJ TadjikistanTK TokelauTM TurkmenistanTN TunisiaTO TongaTP East TimorTR TurkeyTT Trinidad and TobagoTV TuvaluTW TaiwanTZ TanzaniaUA UkraineUG UgandaUK United KingdomUM US Minor Outlying IslandsUS United StatesUY UruguayUZ UzbekistanVA Vatican City StateVC Saint Vincent and GrenadinesVE VenezuelaVG Virgin Islands (British)VI Virgin Islands (US)VN VietnamVU VanuatuWF Wallis and Futuna IslandsWS SamoaYE YemenYU YugoslaviaZA South AfricaZM ZambiaZR ZaireZW ZimbabweARPA Old style ArpanetCOM US CommercialEDU US EducationalGOV US GovernmentINT InternationalMIL US MilitaryNATO Nato fieldNET NetworkORG Non-ProfitQ. What is phreaking?A. Phreaking is anything illegal that has to do with phones and phone lines.Q. How do I start phreaking?A. You should start by learning about boxes and reading up on different types of phreaking.Q. What kind of boxes are there?A.Below is a list of the most common boxes and what they do.Acrylic Box - Steal Three-Way-Calling and Call Waiting. Aero Box - Make free fone calls from Payfones. Aqua Box - Drain voltage from a FBI Lock In Trace call. Beige Box - Replicates a line mens hand-set. Black Box - Allows the calling party not to get charged for the call they place. Blast Box - Fone Microphone Amplifier. Blotto Box - Shorts every fone out in the area. Blue Box - Utilizing 2600Hz tones for free fone calls. Brown Box - Creates a party line from 2 existing fone lines. ⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -