New tool for you: dcetest

From: Dave Aitel (daitelat_private)
Date: Thu Aug 23 2001 - 06:40:11 PDT

  • Next message: Dave Aitel: "New tool for you: dcetest"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    Available at http://www.atstake.com/research/tools/index.html#dcetest
    
    Microsoft has long offered "rpcdump" to allow administrators to analyze
    MSRPC network problems.  You can now download a mostly-compatible
    version for *nix I call "dcetest" which will do basically the same thing
    
    (connect to TCP/135 and query the endpoint mapper for usefull
    information).
    
    This may come in handy during pen tests, if you happen to be sitting on
    an
    oasis of Unix surrounded by a vast swamp of Windows. It may also be good
    
    for you if you happen to wonder how that protocol works, or if you're
    writing the world's best packet sniffer (www.ethereal.com) and need to
    update your protocol parsers. :> Please send any comments, questions, or
    
    flames directly to me at daitelat_private
    
    Interestingly, dcetest is also available at freenet:KSKat_private .
    
    Dave Aitel
    daitelat_private
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.6 (GNU/Linux)
    Comment: For info see http://www.gnupg.org
    
    iD8DBQE7hBPr9iGGtHdhlgMRAvwcAJ48IdD0OK0PA4T56k125Do2xB0IpwCdFDwO
    aHjcNpj8iA6Fc4F5fn+G2Fs=
    =BPfc
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Thu Aug 23 2001 - 09:06:52 PDT