winfingerprint...not exactly new
Results 1 to 2 of 2

Thread: winfingerprint...not exactly new

  1. #1
    Senior Member
    Join Date
    Aug 2003
    Posts
    1,019

    winfingerprint...not exactly new

    I found this the other day and have been tinkering around with it....


    "Winfingerprint is capable of querying/enumerating information without any logon credentials via the Windows null session. Essentially, the null session is an unauthenticated connection to an NT machine used for anonymous information gathering (user lists, for example). While the availability of null sessions eases some administrative burden by providing services to tools like Explorer, null sessions are akin to the Unix "finger" service. They are an intruder's dream: access to users, shares and other potentially useful information, remotely and anonymously. While null sessions can be disabled using a registry hack (see "Locking Down Windows NT Server"), most organizations have not made these changes. "

    Can be found here http://winfingerprint.sourceforge.net/

    or here http://www.mirrors.wiretapped.net/se...infingerprint/


    Anyway, I thought it might be handy...did I mention it's free?

  2. #2
    Senior Member
    Join Date
    Mar 2003
    Posts
    245
    Looks like an interesting tool. I know of a couple of companies who would _not_ want this kind of information
    to be available, even internally.

    Thanks

    -- spurious
    Get OpenSolaris http://www.opensolaris.org/

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •