Today I am going to hence about something that is critically dangerous, it's SourceSafe, I recommend to read the coming paragraph it will save lot of explanation
"Quoted" - http://keir.net/vsscrack.html
Visual SourceSafe (VSS) has a very weak password management system. There is one file stored within the VSS directory structure on the VSS server called um.dat (usually in the data sub-directory). This file contains all user names together with a hash of their passwords. The hashing process is poorly designed and insecure, not just due to the size of the resultant hash (2 bytes!) but also due to the extremely simple algorithm used to generate it. Such is the weak nature of the hashing algorithm that there are literally hundreds of easily obtained passwords that result in the same hash as the real password. In other words, the hashing algorithm used is extremely prone to collisions. So just bear in mind -- the passwords that this program produces are not necessarily (and in fact are probably NOT) the actual passwords initially created by the user, but will still give you the same level of access to VSS as if you had used the same original password. As an example, using a largish word list, my own password hash produced nearly 600 equivalent matching passwords, none of which was the true original but any of them could have been used in place of it.
Now after you read that, it is matter of minutes to crack the toughest password in SourceSafe, I just want to draw your attention that there is lots of other tools that work as source control with more safety and flexibility also it's open source which means you can develop your own version of source control with custom security you made or install from anywhere as plug-in, By the way, threre is HELL of tools that crack SourceSafe Password, also there is no way to secure it, as long as user has access to the Password file, it is done, anyways here is some recommendation for source control application that can be used to protect our code,
http://en.wikipedia.org/wiki/Concurrent_Versions_System
http://svnbook.red-bean.com/
Personal recommendation for client tools
CVS - http://www.tortoisecvs.org/
SVC - http://tortoisesvn.tigris.org/
Hope this article informative and helpful
P.S: there is many tools around I didn't want put any of it, to avoid anything that may cause trubles
BR
Ahmed Essam
of course anyone know Javascript will know esacp and unescap functions, I did a very simple page that unescae this content and put it in TextArea, and I found a very nice simple code for encrypting the content "dF(s)" this was the function name, I did anther Textarea to put the output of the Textarea , and what I saw make me get shocked :D, simply I don't update my internet explorer for this stupid exploit
I got the code that copies the worm to my machin
and here it is
New way to get all web page information
The idea: the core idea of this trick that is in Internet Explorer there is little back door to get all information of the web page and change it's content, the trick is in registry at the key
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\
In this key you can add new item to internet explorer context menu for example if you add this key
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\~~~~~~Get All Page Info~~~~
You will have this view
The second part of the trick is in the next link
The Property menuArgument gives you ability to write vb and java scripts that run on the client area and you have to know that menuArgument is part of external object
http://msdn.microsoft.com/workshop/author/dhtml/reference/objects/external.asp
if you collect all that together you can write script that will be called by the menu and do what every you want to with the page, here is example that read all cookies information , all forms information and all elements in the forms then save it in text file on C:\Infomation .text
<script language=vbscript>
for i = 0 to EventElement.forms.length -1 |
As you can see simple vbscript file that 100% depends on external.menuArguments , it collect the data which you want then save it on TXT file
In the upcoming part of this series I will give some tips on how to change in the main document and do what ever you want , it will help so much in some attacks, and I will explain how to protect the web pages against this attacks, before closing here is the steps to install this script and test it
Step 1: copy file HackingScript.htm to any folder and get the file path
Step 2: open " regedit " from run and navigate to the key
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\
Step 3: Add new key with the name "~~~~~~~~~Get All Page information~~~~~~~~"
Step 4: change the default key value to the HackingScript.htm path as you did in the first step
Step 5: open internet explorer and start right click and click on our new menu
Step 6: you will find file C:\Information.txt contain all information of the page.
I wish you like the article, wait for the next part which will contain how to use this type in attack such "Page Simulation" and "Session HiJacking", in the next part I will explain how to protect your application against these attacks, have a nice article ;)
Thanks for your time
Attached to the article 2 files
HackingScript.rar : contain the HTML file and Registry file which contain all in the article
HackingScript.exe : SFX file which can be installed directly to C:\ and add the menu to IE
There is one thing I want to mention somepeople ask what is going to happen if i use this script "it will get MY DATA" I just want to say that this script are able to modify things can't be done without this trick. try to use your imagination and guess what can you do with that, I write more in this topic, because it will be really harmful,:) I will explain later how to protect your web site from such things
