Printable View
Quote:
Originally posted here by AngelicKnight
So get on with improving it and get back on topic will ya? What more is behind this concept? [/B]
err..what was the original topic again? :confused:
oh yeah..DHCP..;)...or was it whether this was a tut or not?hehe
better than a beginners tutorial forum (imho) why not an advanced security tutorial section and a corresponding count under the avatar that would show a members expertise. as long as the members took the time to scrutinize it as we have this one and not just those written by members someone resents it could be a blessing. set a high criteria and force people to stick to it.
Actually, I said I wasn't sure how such a small effort counted as a tutorial, and stated I felt the topic wasn't explored well enough.Quote:
Originally posted here by pooh sun tzu
That's not what is going on here. It's the difference between helping someone and insulting them. What csh did was insult. Instead of helping to instruct and teach all he did was point out a plethora of errors with no attempt to correct.
If this example weren't completely irrelevant, it would still be humorous. A tie cannot be factually correct or incorrect. Information can. Perhaps a more useful expenditure of your time would be instead to come up with an actual response to what is being said, rather than inventing some humorous analogies that don't really apply.Quote:
There are two ways to handle situations like this. For example, you tell me if a tie looks good on you:
a kind person who wants to improve the quality of the forum: 1. I say that blue isn't your color, but tell you the grey one would fit better with that suit color.
someone here to improve their ego and demean people: 2. I say blue looks horrible on you, that it makes your eyes too big, makes your cheeks look puffy, and call you a loser for chosing it in the first place.
Pooh, I suggest you re-read this thread and determine who is bashing whom in an effort to inflate their egos.Quote:
csh was the second one. You want to improve the quality of the forums, Juridian? Get more of the first people here who are here to actually help, and not ego inflate by bashing people who do not know as much as others.
:rolleyes:
Post count does not equate to knowledge. Considering some of your recent discussions and efforts to help people without the knowledge how, I should think that is blatantly obvious to you.Quote:
Originally posted here by Tedob1
better than a beginners tutorial forum (imho) why not an advanced security tutorial section and a corresponding count under the avatar that would show a members expertise. as long as the members took the time to scrutinize it as we have this one and not just those written by members someone resents it could be a blessing. set a high criteria and force people to stick to it.
When are you guys gonna just agree to disagree? How about those of us actually concerned about the topic of the tutorial? Are we ever gonna get back on topic or not? He's not going to agree with you, you're not going to agree with him, and the mods have spoken, so there ya go. So some want an improved tutorial? Then let's get on with it, start contributing stuff to the thread and let's improve it.
I read the Tutorial and learned something from it.
Maybe my opinion doesn`t hold much weight but maybe there should be a process set up for posting tutorials.
Example:
1.The author of said tutorial can post his work.
2.Then the tutorial can be reviewed, (by the whole community) and if agreed then it can be put in the tutorials section for good..agreed on by everyone.
Or something along those lines. I will be the first to admit that my knowledge is limited...i come here and read alot when i get bored,but when i read a tutorial i want it to be just that a "tutorial" aimed at Maximum security,with current facts....something i can save to my documents for further reference.
Yeah...that's never gonna happen. Too many people have opinions that are too sacred to bend on.Quote:
...and if agreed...
So anyway, about that DHCP topic...
First in chsh’s defense. HT tried to get this started in addicts to keep it off the main page. it just turned into another pointless thread. Chsh tried to air it there to no avail.
Chsh I would have thought you of all people would have appreciated my idea. I said it with you in mind. When I said people could show their level of knowledge I was NOT referring to myself. You blindly arrogant and disturbed little bastard.
posted by shithead:
"Post count does not equate to knowledge. Considering some of your recent discussions and efforts to help people without the knowledge how, I should think that is blatantly obvious to you."
What this really says is:
Im not getting the recognition that I deserve. Everyone should see me as the omniscient that I am. Contributing to a community means nothing, its only ME that matters and all should know it without me having to prove it. Bow down to me.
The only thing that is blatantly obvious to me is the bitterness of your small mind.
So anyway, about that DHCP...
Since we do seem to have gone nowhere with this thread I'll be the first to list some ways you can abuse DHCP to subvert the network if you can get control of the DHCP server.
Fot the benefit of our resident critics this isn't a tutorial..... It's an "on the fly" look at what could be subverted and the potential effect. It isn't, by any means exhaustive, in fact I have a time limit of an hour less the usual distractions in my satellite office......
I haven't had time to look at this but it may be a way to hide your activity on a workstation you intend to subvert and leave the server looking pretty much the same an admin in his usual hurry thus making detection harder.
Running through this document I'll list some of the things that come to mind as a read them. DHCP options have codes so I'll preface each with the code number X and the potential result such as DOS, sniff, etc.
Obviously..... changing any existing options set up by the admin or adding the more "unusual" options can make things go a little funky...... I'm just looking for obvious/easy things that could assist a cracker yet not necessarily be immediately obvious as to their existence or cause.
4. DoS: On a Windows 2000 AD domain time is very important. Certain activities fail if the time is incorrect, (automatic updates certainly do). Set the time server to a different server where the clock is wrong and there are a number of services that will fail and may DoS the network due to anomalies between the clients and the AD servers. Sometimes the admin will receive an error message telling him that the time is off thus there is a problem. With some services this can be difficult to determine.
6. Network Subversion: Tell the clients that the primary, or a subsequent DNS server, is somewhere else and you don't have to bother with DNS poisoning. You write your own DNS for the domains you want. This is a "subvert away" situation - especially if you can set up a DNS server on the same subnet.... It might go unnoticed by the admin that the IP address is a little wrong for his servers.
23. DoS: Let's have some fun setting that to 1 and letting the admin work it out. All packets are dropped/ICMP Time_Expired by the first router.... IE won't show the ICMP returned, just the 404 page not found. Nice one..... Admin really needs to sniff the network traffic and notice the TTL's are messed up.... Then he has to determine where it came from....
26. DoS: Set the Maximum Transmission Unit to it's minimum, (68). It makes for loads of really small packets and slows connection to a crawl. Let the admin find that one out too...
44. Network Subversion: Similar to the DNS subversion above, Alter the WINS server you can change the way the client sees it's network resources.
28. DoS This one should be obvious..... change the broadcast address of a subset of machines and you effectively knock them off the local network. Change it to 192.168.1.1 for example.....
That's a few and there's a lot more that I don't have time to research and/or write out....
Anyone else want to "pipe up" with some other potential issues that could be caused by DHCP subversion?
OMG ROFL ... I just read all 6 pages. And as many of you know, I'm not going to have anything relevant, poignant, or otherwise intelligent to say.
HTREGZ - This whole thread, much like your website www.seeminglyrandom.info is/was a waste of time, and space. Much like yourself.
Arguing with CHSH is like swimming against the tide. It gets you nowhere. He will always believe he is right. No matter what. Period. No matter how pointless, the topic. It's just like death and taxes ... A way of life.
Juridian, while making some excellent points as always, took his usual "middle of the fence" stance. Not something I can relate too, but to each his own.
Hogfly - by far the best post of this thread. Bravo!
The rest of you tomatoes, who felt the need to chime in with your 0.02 cents, and not post anything relevant; WAY TO GO HIPOCRITES!