ahh I see.. so is there a way using net send or another command to specify port trafic? Or would I have to write my own program that compiles the packets manually and sends through the port I want?
Printable View
ahh I see.. so is there a way using net send or another command to specify port trafic? Or would I have to write my own program that compiles the packets manually and sends through the port I want?
My question is do you have to be on a network though?
Nyroca , for Net Send you need to be on the same network as the target machine. This is my problem. I do not see how these programs (like direct advertiser) are sending these 'net send' messages over the i-net.... What command could they be using? Are they just compiling packets and sending them to an IP? or what????? I can't seem to get a simple answer, so I hope some one here can help out a little with the manual way to send these messages over the i-net without being on the same network, and without these programs....
Quote:
Originally posted here by cross
Nyroca , for Net Send you need to be on the same network as the target machine. This is my problem. I do not see how these programs (like direct advertiser) are sending these 'net send' messages over the i-net.... What command could they be using? Are they just compiling packets and sending them to an IP? or what????? I can't seem to get a simple answer, so I hope some one here can help out a little with the manual way to send these messages over the i-net without being on the same network, and without these programs....
I may be wrong about this, but the way Directadvertiser works is to target windows machines that are misconfigured. By doing this they scan for machines which have basically opened themselves to the would via port 135 and 139 (I think). I believe there may also be other ports used (136, 137, 138). When they find a vulnerable machine, bang...there goes a pop-up. Most users should be OK if 1) They have set-up the computers correctly (don't broadcast NetBIOS) and 2) They are behind a firewall which will drop all this activity right away.
Cheers:
It would be interesting to see if they are port scanning to gather all of these Ip addresses that they give away with the tool.
To thier credit, they do show you how to stop the Windows Messaging service.
There is an article at securityfocus that discusses this product and how it works.
http://online.securityfocus.com/columnists/117
Interesting site: http://www.directadvertiser.com
I looked at the screenshot and laughed when I seen how simple this program could be recreated with C++ and maybe some open-source snipplets.
The kicker is that they want $700 to install a simple service(135-139) to accomplish this. Wonder how many people got dupped into buying the license crap.
I send popups to my dad, I’m in England he is in the US, from a DOS prompt over the internet with net send IP address, once I get it. It takes about 5 – 10 seconds for it to show up on his machine but it works well from XP to Win2k pro boxes.
Brackenwood! How do you send messeges to you father across the world with out being on a network? i know you need his ip number but i was told you can't do that with out being on a network. Please share your intellegence. Also how do you find out his ip add? As you all can tell i'm very very new at this and i'm trying to soak all this in before i go to colledge so i can have a easier time with this.
I've had sucess with net send across the net but any router or firewall will block it.
It should work as long as both computers have netBios enabled and the target is not behind a router or firewall. Fromt he command prompt type:
net send ip-adress "Message you want to send"
You dont even have to put the message in quotes. I've found it works either way. For more info on net send type "net help send" at the command prompt.
I'm curious as to how the spammers keep the IP from showing in the message that is sent. I imagine that is because they compile the packets manually.
In order to find an IP address (Assuming you know what an IP adress is) there is many different methods. Anytime another computer makes a connection to yours it leaves its IP. You can find the IP address of a person who sent you an e-mail in the MIME extensions. Somone can find there own IP by looking at there internet connection properties or by typing winipconfig, or ipconfig in the console. They could also find it by going to a webpage that shows your IP such as this one: http://www.whatismyip.com/Quote:
Nyroca
Also how do you find out his ip add?
If you make a direct connection with somone in AIM or another messenger or sometimes even a direct connection in a game, you can type "netstat" at the console and it will show you the person's IP as well as the prot it is connected through.
You could find the IP of a server such as www.aol.com by doing a whois or a DNS lookup.
Hope some of that helped you. But dont expect info to be spoon fed. If some of this doesnt make sense, search for more info on the topic. go to www.google.com and look it up.