Printable View
You didn't know? They changed April to April Fool's Month!Quote:
Originally posted here by gauravjulka
hey there is not any difference with the .inf file. Is it really making use of the first week of April, but 1st April is way past now.. why this kind of posting then
What? we need reason to help people hose their computers? sorry, if you are reading a thread on how to hack hotmail and take it as anything more than a joke you deserve what you get.
so all people less "wise" then you should die ?Quote:
What? we need reason to help people hose their computers? sorry, if you are reading a thread on how to hack hotmail and take it as anything more than a joke you deserve what you get.
Well, as this thread seems to be providing amusement still:
http://www.thinkgeek.com/edm/20050401.html
Enjoy :D
As I said there are a few reasons. First off, and the most obvious reason is, in Catch's rush for power and glory he forgot one tiny thing. The [Version] section. This is the part of an INF file that describes what version of Windows it applies to. The options are:Quote:
And why exactly do you think my INF won't work? Syntax error? Possible, I never actually use this stuff...
quote:
[Unicode]
Unicode=yes
;Access_NTx2197(addr:iphx-40042007)
;Auth:"acct-*",1,"freebsd:shadow:-*"
[Registry Keys]
"CLASSES_ROOT",0,"D:PAR(D;OICI;KA;;;SY)"
version ="$Windows 95$" obvious
version ="$Windows NT$" obvious
version ="$CHICAGO$" Everything. This is pretty much all you see nowadays. Dont ask me, I have no idea.
An INF file will NOT install without this. Secondly, this is a security template (sort of) and not a standard driver install file. And while it is an .INF and uses the same structure and keywords, as well as Security Descriptor Definition Language (SDDL), it actually has to be installed in the local security database device, and this is only done through the MMC Security and Analysis snap-in, or through the secedit.exe command line tool. Right clicking and installing just doesnt do the trick for security templates. Since we're talking about it I may as well continue a bit to clear things up for everyone else.
Stay with me folks its about to get hairy. What Catch posted is whats called a "security descriptor string". An SDS can (but doesnt require all) consist of 4 parts. Group,Owner,DACL (Discretionary access list), and SACL (system access list). Each part of an SDS is described by a token. The respective tokens are O:,G:,D:,S:. The Owner and Group consist of SID string. All well know SIDs have constant SID strings. (see my whoami tut for more on SIDS) Here are a few including the one Catch used:
"WD" SDDL_EVERYONE
"AN" SDDL_ANONYMOUS
"DU" SDDL_DOMAIN_USERS
"SY" SDDL_LOCAL_SYSTEM
"LA" SDDL_LOCAL_ADMIN
The DACL (What were interested in) and SACL tokens have 2 parts. Any optional flags (DACL_flags, and SACL_flags respectively) and then the related ACE (Access Control Entry) string(s). The flags we can use in the DACL_flags or SACL_flags can be concatenated in any way and are as follows :
"P" SDDL_PROTECTED - (Dont inherit from parent objects)
"AR" SDDL_AUTO_INHERIT_REQ (Auto-propagate permissions to children)
"AI" SDDL_AUTO_INHERITED (I believe this is unused - not certain)
So what we have here:
"CLASSES_ROOT",0,"D:PAR(D;OICI;KA;;;SY)"
As Catch said, "classes_root" is the target object. Then we have the inheritance code 0 (0 - Propagate inheritable permissions to subkeys, 1 - Do not allow permissions on this key to be replaced, 2- Replace permissions on all keys with inheritable permissions), with the D: (DACL) token with the PAR set in DACL_flags, and then one ACE. Got it? Good. The ACE then is "(D;OICI;KA;;;SY)" this breaks down like this:
ace_type; ace_flags; rights; object_guid; inherit_object_guid; account_sid
Where the ace_type is "D - SDDL_ACCESS_DENIED" the ace_flags are actually like the DACL_flags concatenated flags, in this case "CI" - SDDL_CONTAINER_INHERIT and
"OI" - SDDL_OBJECT_INHERIT, the rights are "KA" - KEY_ALL_ACCESS, no group stuff, and the SY as account_sid as previously defined constant. So if we do set it up and apply it, what does it mean? Well, I've saved the best for last. It wont do what catch expects. First of all HKEY_CLASSES_ROOT is not the "registry root". In fact HKCR is not even really its own hive. Its bascically a hive that is symlinked from parts of HKLM (HKEY_LOCAL_MACHINE) and HKCU (HKEY_CURRENT_USER) . The CLASSES_ROOT is completely profile dependent. Meaning it only applies to the current user. It contains all the COM registration and file type associations for the logged in user. So, what does the SYSTEM need from this? Well, that depends, not much really , except that its the SYSTEM which is responsible for maintaining it, so if you remove its rights, you'd better not need to change anything. It wont really bother the system if you remove access. BUT... there is a catch here. (haha, a "catch", get it?) The only access CLASSES_ROOT really needs to have is that the user needs to be able to at least READ/EXECUTE otherwise when you log in, ALL file associations are inaccessable (including those for say explorer.exe) So, while the system wont be bothered, all your users surely will. So you say then "denying SYSTEM wont hurt, right?" Er- well, not exactly. :) By default there is a null DACL on classes_root (I think some SP's might change this). As you may know, Windows interprets a NULL (note: an EMPTY DACL is diffrent and grants NO access by default) DACL as granting full access to the EVERYONE group. So, by default everything is sooper. But, when you add catch's DACL you have now created a DACL which not only denies SYSTEM access but everyone else too (If you make sure to give at least one user full control to HKCR you wont totally screw yourself). So, now Windows has been kept from granting everyone else access to the hive. So... the system WILL boot. It will in fact be quite happy there without any users to trouble it, but will be quite useless to anything with fingers. Of course this could be undone easily if only you hadnt denied your SYSTEM access to HKCR. :) (This can be undone with some serious love and some chacl tools, but I dont want to give away all my secrets.) Hopefully someone will have gained something useful from this mess and maybe some of you will be tempted to play with security templates. Have fun kids and don't **** up your machines too bad.
-Maestr0
DISCLAIMER: If your going to screw off inside your machines registry, use ntbackup.exe and back it up first. Second, dont come crying to me when you hose it good. ;)
Power and glory? I wish. ;)Quote:
First off, and the most obvious reason is, in Catch's rush for power and glory he forgot one tiny thing.
If the version was included, and someone ran it... well I'd make a new enemy. ;) Though a glance at the first rule on:
http://msdn.microsoft.com/library/de...n_inf_file.asp
Would have cleared things up quickly for them.
As I said with the rest of it, I gave my best casual effort, but I NEVER author inf files.
cheers,
catch
lmfao...hosing your computer is hardly dying.Quote:
Quote:
What? we need reason to help people hose their computers? sorry, if you are reading a thread on how to hack hotmail and take it as anything more than a joke you deserve what you get.
so all people less "wise" then you should die?
Quote:
Originally posted here by Maestr0
version ="$Windows 95$" obvious
version ="$Windows NT$" obvious
version ="$CHICAGO$" Everything. This is pretty much all you see nowadays. Dont ask me, I have no idea.
Code:Chicago /Windows 95/Version 4.0
Aspen /Microsoft Visual Studio 98 Version 5.0
Astro /Microsoft DOS 6.0 Version 6.0
Athena /Microsoft Outlook Express
Apollo /Project 98
Goalline /Microsoft Mail 3.2 Verion 3.2
Capone /Microsoft Mail 4.0 Version 4.0
Freon /Sucsessor of X-Box
Gecko /Microsoft Internet Explorer 5.0 Version 5.0
Metro /MSN 2.5
Texas /MSN 8 client
Mars /MSN 7 client
M4 /Word 97
Mistral /MSN 6 client
NGO /(Next Generation Office / Office.NET / Office11 Microsoft Office 2003 Version 11.0
Vegas /Microsoft Visual Studio 6.0 Version 6.0.8176
Office10 /Microsoft Office XP Version 10.0
Opus /Microsoft Word
Boston /Visual Studio 6 Version 6.0
Rainier /Microsoft Visual Studio.NET Version 7.0
Everett /Microsoft Visual Studio.NET 2003 Version 7.1
Renard /Microsoft Visual FoxPro 3.0 Version 3.0
RoadRunner /Microsoft Visual FoxPro 5.0 Version 5.0
Bonzai /Visual C++ Version 1.0
Sequoia /Visual C++ 2.0 cancelled
Caviar /Visual C++ Version 1.5
Barracuda /Visual C++ for NT Version 1.52
Dolphin /Visual C++ Version 2.0
Sushi /Visual C++ (Japanese) Version 2.0
Wings /Visual C++ for Mac Version 2.0
Olympus /Visual C++ Version 4.0
Jakarta /Visual J++ Version 1.0
Vegas /Visual J++ Version 6.0
Sedona /Microsoft Visual FoxPro 7.0 Version 7.0
Taz /Microsoft Visual FoxPro 2.0 Version 2.0
Rotor /CLI Shared Source Code project
Thunder /Microsoft Visual Basic
Watson /Microsoft Outlook 2001 for Apple Macintosh Version 8.7
Utopia /MS BOB Version 1.0
Whidbey /Visual Studio .NET 2004
Cool /C# (C sharp 1998)
Orcas /VS.NET Longhorn Release (03/06/2003 : RTM Planned for 2005)
Office Longhorn /Office 12 RTM 2005 /Version 12
Europa /Visual FoxPro 9.0 /Version 9.0
Manga /the development system for MSN 1.0
Toledo /Visual Foxpro 8.0
Cirrus /Access 1.0
Scribbler /Onenote 2003 (Part of Office 2003 system)
Sparkle /Tool to automate XAML application development
Trinity /Visual Studio Tools For Office
Green /Next generation Business Solutions aka Microsoft Business Framework
MSN 9 /MSN Premium
Memo /MS Write for WIndows 3.0
Iris /Office 2003 Business Contact Manager
Magellan /Intellimouse International
Saturn /ASP .NET Web Matrix
Mickey /Serial/ PS2 Consumer Mouse
Starlite /NET Compact Framework 1.0
XDocs /InfoPath 2003(Part of Office 2003 system)
Janus /Windows 3.1 Version 3.1
Kato /Microsoft Windows for Workgroups (first initiated)
Snowball /Windows for Workgroups 3.11 Version 3.11
Frosting /Windows 95 PlusPack!
Knoxville /Short-lived codename for Microsoft® Windows® 95 refresh release ("close to Nashville").
Detroit /Windows 95 OSR 2 Version 4.0b
Nashville /Originated as Windows 96. "True Web Integration" technology. Web based shell for Windows. Designed as a new version of Windows but finally available as Internet Explorer 4 "Desktop Update" for Windows 95 and NT and integrated in next versions. (NOT IE4 itself!) Version 4.0
Memphis /Windows 98 Version 4.1
Neptune /Planned successor of Windows 98 Cancelled
Newshell /Alpha shell update for NT3.x Millennium,
Georgia /Windows ME Version 4.9
Panther /Port of Windows NT Win32 core to run on top of Cougar. Subsequently abandoned and replaced with Chicago
Cougar /32-bit protect-mode MS-DOS kernel. Planned to serve as the kernel for major Windows release (see No Name Cat). Subsequently merged with Jaguar and Stimpy (but not Panther) to become Chicago.
Jaquar /Retail implementation of Cougar (DOS 7.00). Major features included more powerful and consistent command-line options, improved NLS support, Flash Memory Filesystem, etc. Subsequently merged with Cougar and Stimpy (but not Panther) to become Chicago.
Microsoft(R) Windows(R) EmbeddedArticle Image
Pegasus /Windows CE 1.0 Version 1.0
Venus /Windows CE for webTV version 1.0?
Aplollo /Windows CE for Auto PC Version 2.01
Gryphon /Windows CE 2.0 for palm size PC Version 2.01
Mercury /Windows CE for Handeld PC Version 2.0
Alder /Windows CE 2.1 (Alder Enhancement Pack) Version 2.1
Axe /Embedded Toolkit for 2.0 and 2.1 (Platform builder) Version 2.x
Hermes /Windows CE for webphones version 2.11
Jupiter /Windows CE for Handheld PC Pro V3 Version 2.11
Wyvern /Windows CE for Color Palm PC Version 2.11
Orion /Windows CE for Chinese handheld PC Version 2.11
Goldeneye /Windows CE for AutoPC version 2.12
Brich /Windows CE 2.11 2.12 (Brich Enhancement Pack) also Embedded Toolkit Version 2.11 2.12
Cedar /Windows CE 3.0 Version 3.0
Tazz /Microsoft Phone
Galileo /Windows CE for H/PC V4 (Handheld PC 2000) version 3.0
Rapier /Windows CE for P/PC V2.0 (Pocket PC 2000)
Palm-size PC with a new user interface. Version 3.0
Chainsaw /Windows CE Platform Builder 3.0 Version 3.0
Talisker /Windows CE 4.0 (Windows Powered)+ Platform builder 4.0 Version 4.0
Merlin /Windows CE 2002 (Pocket PC 2002) Version 4.5
Jameson /Windows CE.NET Update (IPv6, SMS, MS Office Viewers) Version 4.1
Stinger /Windows CE for Smartphone V1 (Smartphone 2002)
McKendrick /Windows CE for Media2go (Media Center Pocket) Version 4.x
Mira /Windows CE for Smart Display Devices Version 4.0
Visine /Novell Netware migration tool that came with older versions of NT (3.x)
Jupiter /Macallan Windows CE.NET Corporate Edition Version 5.0
Hai Ku /(Japanese poetry form) Multimedia Extensions for Windows (circa 1991)
WinPad /prototype handheld/portable device (roughly the size of a Filofax) that MS was developing with Compaq and Toshiba. Supposed to use the Chicago/Win95 OS framework, but the technology of the day was far too underpowered, expensive and power-hungry for such devices, and the project was cancelled
Stimpy /Personal Information Manager (PIM) / News client befor OE
T-box /next-generation automotive software
Ozone /Pocket PC 2003
Laguna /The next version of SQL Server For Windows CE Microsoft Windows NT Workstation HomeWindows 2000 Home Microsoft(R) Windows(R) XPWindows Server 2003 NT Platform
Daytona /Windows NT 3.5 Version 3.5
SUR /(Shell Update Release) Originally a Patch for Windows NT 3,51, in order to implement the new Windows 95 look and feel. Later further technologies were then implemented, which actually were only intended for Cairo . For this reason from " the Patch " Windows NT 4,0 and the remaining technologies of " Cairo " was then shifted on NT 5,0. Version 4.0.1381
Cairo /Originally Windows NT 4,0, later then a designation of technologies, which were planned partly for NT 4 and/or NT 5. Cancelled
Impala /Windows NT 4.0 Embedded Version 4.0.1381
NT5 Windows 2000 Version 5.0.2195
Astroid /win2k ServicePack1
Janus /Windows 2000 64 Bit Version 5.0
Astroid /Windows 2000 Service-Pack 1 Version 5.0.2195
Odyssey /Planned successor of Windows 2000 Cancelled
Whistler /Windows XP (Merge of Odyssey & Neptune) Version 5.1.2600
Whistler Server/ Windows Server 2003 Version 5.2.3700
Bobcat /Windows Server 2003 Small Business Edition Version 5.2
Mantis /Windows XP Embedded 5.1 Version 5.1.2600
Freestyle /Windows XP Media Center Edition Version 5.1
Harmony /Windows XP Media Center Edition 1.5
No codename just Tablet PC Tablet PC Vesion 5.1
Longhorn /Successor of Windows XP (client only) Version 6.0
Blackcomb /Successor of Longhorn (server only?) Version 7.0
Bear paw /The next version of Windows Terminal Services for win2k3
Lonestar /Tablet PC 2004
NAS 3.0 /Windows Storage Server 2003
OS/2 3.0 /Became Windows NT
Mir /Mercury internal release (codename for Microsoft® Windows NT® Server upgrades of existing Xenix servers).
Mesquite /Batch Job Management for Microsoft® Windows NT Server/Windows 200x.
Sundown /Windows 64 bit
WinFX /next-generation Windows programming model (longhorn)
Aero /Longhorn 3D-rendering user interface
Springboard /back-port various Longhorn security technologies into winXP SP2
Symphony /Media Center 2005
Slalom /Media Center Longhorn
Microsoft(R) Internet ExplorerMSDN Online Windows Media Home Technologies
AirStream /Services for wireless connections to Exchange
Avalanche /Internet-Information-Services 5.0 Version 5.0 2195
Avalon /3-Di UI (for Longhorn) "The next-generation platform for Windows client applications." Client application platform built upon .NET Framework, to be available in Longhorn.
Argo /Query-Services for SQL-Server 2000
Blackbird /portable execution platform, java competitor. cancelled, but
likely the basis for .net cancelled
Blackbird /MSN SDK
Blizzard /Business oriented Set of Services in .NET My Services
Basecamp /VPN dial-up networking update (PPTP) for win95
Calais /Smart-Card Technologies
Cascade /Windows Active-Directory
Cayman /NetMeeting 3.0 Version 3.01 4.4.3400
Chrome /ChromeEffects (GUI-Feature)
Comet /Network-Tools for Windows 2000
Corona /Windows Media-Technologies 9.0 Version 9.0
Coyote /Distributed Views for SQL-Server 2000
Darwin /Windows Installer 1.1 Version 1.1
Dart /Setup for Oracle, SQL-Server ODBC-driver
DaVinci /Database-Design & Query-Tools
Denali /Active Server Pages| underpinnings & structure of MSN 2.0 released in VisualStudio Version 1.0
Europa /New GUI for the MSN-Community
Fahrenheit /Direct X Version 10.0
Falcon /Windows Messaging Queuing Server
Fusion /Technologies for DLL improvements
Gemini /Succesor GUI "Europa" for MSN-Community
Gibraltar /Internet-Information-Server 1.0 Version 3.0
Grizzly /Workflow-Designer for SQL-Server 2000
Hailstorm /XML Message Interface
HardeningPack/Internet Explorer Enhanced Security (Windows Server 2003) Version 6.1
Hydra /Windows NT Terminal Services
Jakarta /JAVA-Engine for Internet Explorer 3.0
Jupiter /E-Business-Initiative Unification of Biztalk 2004, SharePoint Portal Server V3 ? and a merged Commerce Server /siteserver.
Kagera /OLE-DB Provider for ODBC-Data
K2 /Internet-Information-Server 4.0 Version 4.0.1381
Lightning /.NET Common Language Runtime (CLR)
Luna /Theme technology for Windows XP
Luxor /OLE-Provider-Services for Yukon
Magic Carpet /Passport-Technologien
Marvel /Microsoft Network (MSN)
Merlin /Microsoft® Internet Explorer for Dreamcast (cancelled circa 1999).
Mercury /DUN 1.2 update for Win95
Oprah /Netmeeting
Nile /OLE-DB
O'hare /Internet Explorer 1.00. How you get from Chicago (Windows 95) to the rest of the world.
Palladium /Hardware-Embedded Security (Chip) (Trustworthy Computing)
Plato /OLAP-Server
Quartz /Direct Show
Slate /Microsoft Management-Console (MMC) Version 1.0
Steelhead /Windows NT Routing & Remote-Access Services (RAS)
Stinger /Windows CE Cellphone-edition (SmartPhone)
Talisman /3D Graphic- und Multimedia Architecture
Tensor /OLE-DB Extensions for OLAP
Touchdown /Outlook 97 (Also mentioned:Public folders for MS Exchange)
Trident /Dynamic HTML (DHTML)
Whistler /Speech Recognition (text-to-speech)
Whisper /Speech Recognition (speech-to-text)
Whitehorse /Web services-based business-process modeling tool
Wolfpack /Windows Cluster-Services
Normandy /Microsoft Commercial Internet System (MCIS)
Idaho /Preliminary/alpha version of the next Windows-Longhorn
Aruba /Windows Media Platform for Blackcomb
Whitehorse /A set of integrated graphical design tools that extend and complement Visual Studio .NET. Release
Xenon /Xbox 2
Nomad /Longorn Command Shell Msh is the new scripting and automation environment for Windows
Spark /Integration of Windows SharePoint Services and CMS
WinFS /The digital aid meets meta data. Store all your "stuff" and find it seemlessly with hundreds of rules
Athens /New prototype PC design (with HP)
Thungsten /Microsoft Rights Management Services (RMS)
Sidewhow /Task Shelf of Longhorn (MS research)
Babylon /MSSearch shipped by the Site Server product team (derived from the Tripoli code base)
Ren /Email client before OE
Microsoft(R) Exchange ServerMicrosoft(R) SQL Server(TM)Microsoft(R) Host Integration Server
Microsoft(R) Internet Security and Acceleration ServerMicrosoft(R) BizTalk(R) ServerMicrosoft(R) Site Server
Microsoft(R) Application CenterMicrosoft(R) Commerce ServerMicrosoft(R) Content Management Server
Microsoft(R) Mobile Information ServerMicrosoft(R) Site Server Commerce Edition Microsoft(R) Small Business Server
Microsoft(R) BackOffice(R) ServerMicrosoft(R) Systems Management Server Backoffice Exchange-Server
Osmium /Microsoft Exchange Server 5.5 Version 5.5
Platinum /Microsoft Exchange 2000 Server Version 6.0.5762.4
Mercury /Microsoft Exchange 6.1 (cancelled) version 6.1 (cancelled)
Titanium /Microsoft Exchange 2003 Server (Interims) Version 6.5
Kodiak /Microsoft Exchange 2006 Server Version 7.0
Magma /Embedded Exchange. Microsoft® Exchange core store technology being developed into a storage solution to serve a range of application architectures. Available in three flavors: Enterprise, Departmental, and Clients (Local Store).
Systems-Management Server
Hermes /Microsoft Systems-Management-Server 1.0 Version 1.0
Opal /Microsoft Systems-Management-Server 2.0 Version 2.0.1493
Topaz, Emerald/Microsoft Systems-Management-Server 2003 Version 2.5.2389
Ruby Diamond/Successor of SMS 2003 Version 3.0
SNA-Server /HIS
Orca /Microsoft SNA-Server 4.0
Thor /SNA-Server ODBC services
Babylon /Microsoft Host-Integration-Server 2000 Version 5.0.798
FullSail /HIS 2004 SQL-Server
Starfighter/Enterprise Manager SQL-Server Version 6.0
SQL95 /Microsoft SQL-Server 6.0
Hydra /Microsoft SQL-Server 6.5 Version 6.5
Sphinx /Microsoft SQL-Server 7.0 Version 7.0
Shiloh /Microsoft SQL-Server 2000 Version 8.0.534
Yukon /Microsoft SQL Server 2004? Version 9.0
Liberty /64Bit-Edition SQL-Server 2000 Version 8.0
Acadia /Microsoft SQL Server 2006?
Rosetta /SQL Reporting Services Greenwich, Realtime Communication Server (RTC) Live Communications Server (Office System) version 1.0
RTC 2.0 /Live Communications Server 2.0 RTM 2005 Version 2.0
Catapult /Microsoft Proxy-Server 1.0 Version 1.0
Comet /Microsoft Internet-Security & Acceration Server 2000 Version 3.0.1200.165
Tripoli /Microsoft Index-Server Version 1.0
Plutonium /Microsoft Commerce-Server 4.0 Version 4.0
Sable /Microsoft E-Commerce Server 2001 Version 1.0
Tiger /Microsoft Media-Server Version 4.0
Viper /Microsoft Transaction-Server 2.0 Version 2.0
Tahoe /SharePoint Server 2001 Version 1.0
Latinum /Microsoft BizTalk-Server 2000 Version 1.0
TrustBridge, Meta Directory Services (MMS) Microsoft Identity Integration Server
Thorium /Enterprise edition of Microsoft Commerce Server 2002.
Ossa /Microsoft Site Server 2.00. First release of Olympus. Combination of the Normandy technology and Merchant Server 1.10 to form a retail release.
Microsoft System Center unify all of Microsoft's management products in one offering (MOM,SMS, Appcenter) 2006
Bizet /BizTalk 2002 Server
Kahiltna /Microsoft® Commerce Server 2.00, formerly Merchant Server.
Stingray /ISA v 2
Narayan /Microsoft Enterprise Location Server (MELS) Microsoft Location Server (MLS)
Discovery /Merge of Commerce Server and CMS server RTM 2004?
Good decode by !matationRust for the code from Maestro. But why only poor Microsoft then and not the rest. After all they have being doing it to us all these years what this thread is intended to be.
poor m$? That's a new one.