Printable View
Hi Folks,
Actually, I want to present a cool application that gain the screensaver password, easly.
this tool simply checks the registery and decrypt it for you.
I think this tool works only on windows 9x.
It's Kind an old,,, but good one, isn't it?
Let me know your opinion guyZ!
Cheers mates.
Well, i wont use it. for one, it doesnt have source included. I have no idea what it could do. Two, i respect the passwords, and know they are there for a reason.
slick
[edit] if you include the source, ill try it out...sorry just a little paranoid...[/edit]
Hi Death Harvester,
I personally turn all screensavers off.........just added complications IMHO.............I have used the WinNT facility to force a logon after so many minutes/seconds inactivity, that I think is a useful tool.
I think that screensaver passwords are, on balance, dangerous..........lull users into false sense of security...........
"I don't need to get back to my office..........the screensaver will do the security for me " When the attitude shoulkd be "I am going out so I must log out".......It is a big education problem with the users?............your tool is very helpful in demonstrating that issue to them :)
Cheers
Hi slick8790,
First of all, I didn't supply the application for a malicious purposes or intentions, at all.
As far as you have an AV and firewall has been up-dated regularly, no fear needed.
and thanks for participate.
Hey guyz,
Do I done something wrong or this post is misfit one, If so, I'm really sorry.
nihil
Thank you for your nice participation.
Looking forward to hearing from you.
Bye
Hey Death Harvester,
I do not think that you have done anything wrong.............I have a collection of old machines and perhaps 6,000 viruses/malware........stuff that will not work now is not harmful IMHO?
I think it was the American philosopher George Seteyana (spelling?) who said something like:
"Those who will not learn from history are condemned to repeat the past"
I was always impresssed by that :)
My advice has always been to get an old machine to test things on, NEVER do it on a machine that belongs to another, is shared, or is important to you and your day to day work.
There are senior members on this site who have been kind enough to send me bad stuff so I could let it loose on my "laboratory rat" machines and report back.
I mainly like to test firewalls and AVs, but my speciality is second and third level defences......when the firewall and AV fail..........these are the ones that have saved me ;)
Good luck,
And keep posting
Death Harvester,
Some people just tend to get their britches in a bunch when a newbie posts something that is Anti-security... such as your tool. I think the tool could be a benifit to an admin who needs to get on a particular workstation to log out that user, but if it only works in WIN9X then that may lower its value to todays admins a little. Not many networks are using win 98 any more for workstations. I think you brought up a fine topic for discussion, you just approached it wrong. No harm done. :D
aeallison,
Nice post to a new guy who could not have meant any harm. I believe that the tool could be useful, as it can be used for demonstration/educational purposes without harm.............and it is relatively easy to get the kit to run it on?
I would not like to run security demos on the real system? it is all part of user education....or do I see things that differently?
Cheers
Hi nihil,
Well, thank you, for your valuable advice, and I'll regard it!
The quotation you provided is very nice.
All the best mate
aeallison,
can you show how to approach it in the right manner?
thanks again nihil
The best way I would have appoached this would have been like:Quote:
Originally posted here by Death Harvester
aeallison,
can you show how to approach it in the right manner?
thanks again nihil
I have not tried your tool nor have I downloaded it. Does this help?Quote:
I found this cool little utility that I think might benifit some of our community members here at AO. This tool would allow an admin to bypass the password protect on a Win9x workstation that a user set absent mindedly, so he could log that person off without knowing the password. Does anyone here ever have this problem and would it be a useful tool? If so I have provided it to you below...
Hello everyone, I am new to this forum but what I have read is interesting so far!
I personally don't see any harm in what DH posted. I really don't see any harm in posting any old tools or password cracking utilities. These programs should not be a problem with System Administrator today.
Forgive me if I offend anyone here, but their are so many System Administrators and IT managers that don't have enough information security experience that it is no wonder script-kiddies are getting into networks. The old tools and password utilities are what they are using. I perform many network audits, vulnerablility assessments and I have use these same old tools and found many holes that are still open that shouldn't be. Looking for old vulnerabilities is the first place I start in any assessement. Because you must have these closed up first thing which just requires installing patches usually.
Death Harvester.. Just to change the subject .. can you use the Edit button instead of double posting..
By asking for advice you are doing things right..
Cheers..
" but if it only works in WIN9X then that may lower its value to todays admins a little. Not many networks are using win 98 any more for workstations."
aeallison,
It would seem that this is an incorrect assumption considering M$'s decision to continue support for WIN98 until 2007.
well, aeallison is right according to me...
its the approach that matters... u framed your question in a negative way...
everything has its negative and positive points...
re-frame the question, n i hopoe u will get good response...
:)
Well, I am giong to post whatever I think it would be helpful here at AO. Post with my own expressions and thoughts,,,, And even if I done something wrong there are Moderators and Administrators who can direct me to the right way.
And another point, when you see something is wrong, there is somthing called netiquette , we have to respect each other, beacuse we are posting in a respectable place {AO}. In addtion we assumed to gain the knowledge not the unacceptable posts.
About the tool I had attached,,,, to know how the modern things runs you have to be awar and familiar with the old tools,,,, in another hand,,, me and many guyz here are newbies,,,, instead of posting meaningless post ,,, try to give us some clues and hints to the right way,,,
no offence guys,,,, but this is my point of view.
Hey Death Harvester,
Don't get all paranoid like me ::hide-beh
I understood you perfectly, did I not? One of the beauties of this forum is that it is multinational, but that means that not all members have English as their first language? I suggest that we all bear that in mind :) Not referring to DH here, but it should be a general consideration?..............BOTH ways?
Also cut a little slack for the short posts.....if you cannot write a language very well you tend to keep it short?...just pass the post by and let someone with a bit more patience answer it?
I feel that you should speak as you find, as I feel that that is both democratic and professional? and certainly within the mission statement of AO (on the front page?)
Anyone like to meet me in a battle of English language , grammar and syntax?............. I may not be any good at Counter strike but....
I believe that you should post as you feel, within reason, and what you posted was well "within reason" IMHO, Death Harvester.
Take care mate, and keep posting!
Cheers
WOW I can't believe people at ao are still so tight in the ass about everything. When are people going to learn there is no such thing as control (just let it go it will be ok) Anyways couldn't help but notice that there was a win 98 screen saver hack on and thought I might provide another tool which I created in vb in 2000 (yes it's old). THIS IS A HACKING TOOL DO NOT USE UNLESS YOU WANT TO HACK INTO ANOTHER LAMERS COMPUTER. neeer I said it and I don't give a ****. So what you do is download the .zip file. Then burn the files to a cd. When a computer is locked with the screen saver pass just open the cdrom and put he cd with the files burnt on and whalla no more screen saver. It's so easy my retarded aunt could do it and she can only count to 3. hahahha.
Later all
I am taking it that my posts in this thread were a bit misunderstood, I am really not trying to cause/ or force proper netiquette.
For ease of understanding... My first post to D.H. ....
Then nihil posted...Quote:
Death Harvester,
Some people just tend to get their britches in a bunch when a newbie posts something that is Anti-security... such as your tool. I think the tool could be a benifit to an admin who needs to get on a particular workstation to log out that user, but if it only works in WIN9X then that may lower its value to todays admins a little. Not many networks are using win 98 any more for workstations. I think you brought up a fine topic for discussion, you just approached it wrong. No harm done. :D
I maybe should have posted an opinion to this but I figured my next post would cover it, after I read D.H.'s next two posts...Quote:
aeallison,
Nice post to a new guy who could not have meant any harm. I believe that the tool could be useful, as it can be used for demonstration/educational purposes without harm.............and it is relatively easy to get the kit to run it on?
I would not like to run security demos on the real system? it is all part of user education....or do I see things that differently?
Cheers
I then posted the passage below...Quote:
Hi nihil,
Well, thank you, for your valuable advice, and I'll regard it!
The quotation you provided is very nice.
All the best mate
aeallison,
can you show how to approach it in the right manner?
thanks again nihil
I was simply trying to help D.H. I had zero intentions of causing any problems...Quote:
The best way I would have appoached this would have been like:
Quote:
I found this cool little utility that I think might benifit some of our community members here at AO. This tool would allow an admin to bypass the password protect on a Win9x workstation that a user set absent mindedly, so he could log that person off without knowing the password. Does anyone here ever have this problem and would it be a useful tool? If so I have provided it to you below...
I have not tried your tool nor have I downloaded it. Does this help?
In computer security, there is no such thing as paranoia, only preparation.
Now, would everyone kindly step down off the soap box so I can set fire to them.
He got a tool that has been used since what, 1998? 1999? It still works, and that's sad. These tools are VERY useful. I'v used them here at home to try and show how insecure a certain OS is.
Honestly, come on now, if a company is still running Windows 98, that's fine, but if they are allowing these old as piss holes to still exist, than, well, quite frankly, **** em'. Let someone own their asses and then maybe they will do something about it.
It's a cycle really. Someone doesn't patch, or try to secure the OS, they get owned, the CEO flips, and then we all get paid to do a network security analysis, and fix problems. See how that works? We all still win;) Some lamer bastard get's bragging rights, we get cash, and the company get's better security.
Gore!!...........you are posting like a fifty year old :p Good heavens I haven't corrupted you that much have I?
phreeOn:
I noticed "another lamer's computer", and I understand your sentiment, yes it was well out of date and here is something better that is also out of date? ;)Quote:
THIS IS A HACKING TOOL DO NOT USE UNLESS YOU WANT TO HACK INTO ANOTHER LAMERS COMPUTER
aeallison: I do not see anything wrong with what you posted either?...English is a funny language?
I think that I have to go with the view that these old tools are useful for educational purposes in the real world and for "shits and giggles" at home?
Are we really missing Nightfalls_Girl that much?
Cheers
It has been kind of nice not having to squint to figure out what she was saying, she had the worst spelling I have ever seen in any forum.Quote:
Are we really missing Nightfalls_Girl that much?
As for what I meant... I was getting dissed by D.H. for not being polite to the newbies... and I thought I was being polite by answering his question... post haste...
aeallison,
As far as I have seen you are always polite.....period, not just to newbies :)Quote:
and I thought I was being polite by answering his question... post haste...
The way I look at a thread like this is that it cannot mean any harm, given that it is an old operating system, that never had any real security features? You would go NT4.0 otherwise?
My concern would be that people might think that if they set a screensaver password in 9x, they actually had any security against more than the family tomcat going to sleep on the keyboard :D
In that respect, I think it is a useful post, because it allows admins to demonstrate how weak the 9x screensaver password really is. To be very blunt (direct) I guess I must have at least a half dozen "cracking tools" just from the front cover CDs of computer magazines :)
I think that people never realised that 9x is home "amateur" and that is how it was designed and written.......hey don't get me wrong, I like 9x, in the right environment.
Regards
please guys, excuse my poor English!
perhaps I wounded some guys somehow, so I do apologise.
I am here now for one cause, gaining knowledge.
I want to say that talking about old tools is not in that bad,,,,
It could be useful somhow. It doesn't mean it is a time-consuming helpless.
that's all.
Thanks for considerateness.
Cheers.
You are most welcome friend. :D