evul tool to hack win servers

I released the RHTOOLS 1.5a. Its an asp appl that allow file browsing thru server files, server prompt access, server system info, upload, mass perm test, etc...
If u administrate a win2k server, I recommend you put this stuff into one web folder and access it thru web to check if you're really safe. It can be found at http://www.kpdef8.com/rhtools.
By the way, I already made an exploit search also, who grabs automatically some major xpl provider information. Check it at http://www.kpdef8.com. (this is not an abusive advertisement, I just made two good tools and I think that you guys would like to check it, cuz its very usefull)
;)

ps: the links are without the dots
http://www.kpdef8.com/rhtools
http://www.kpdef8.com

Lemme get this straight...you made a hack tool...and you want us to do what? Praise you for it? Use it? Have you read the FAQ yet?

*edit*
Seems like you're new and I should've said this from the start... Anyway, welcome to AntiOnline and I think it would be very beneficial to you if you were to read some of the sticky posts and the FAQs. Thank you for your early contribution to this site...although I feel it to be slightly misguided?

Multiple posts are usually frowned on here, especially if you are promoting something.

http://www.antionline.com/showthread...hreadid=260124

You might want to delete one.

Cheers:

3 posts, all of which are spam. BAM!

Hmm, Security links to *FREE* security related tools..... this is spam how?? This IS still a security board isn't it? Jeesus, no wonder your loosing members like crazy.

Quote:

---

Originally posted here by cross
Hmm, Security links to *FREE* security related tools..... this is spam how?? This IS still a security board isn't it? Jeesus, no wonder your loosing members like crazy.

---

mostly cuz he's got the exact same thread twice on the front page.

that still does not constitute spam, so he posted twice, big deal. Have an admin delete a thread. He did post it in 2 different forums, maybe he wasn't sure where to put it. At least he's trying to contribute something instead of bitching and flaming.

Threads merged. Removed dup posts. Enjoy.

IMO, it could still constitute helpful software. This is what the site used to be about:

"Hackers know the weaknesses in your system, shouldn't you?"

Okay, if you have not been here in the heyday of AO, this site also featured programs like the dude is yapping here. JP had virii soure code,l malicious tools, sploits, and other docs from the underground. The thing is, if you do not know what the other guys are doing, how in the **** are you going to know what you need to do?

The primary rule is: The kiddies have the upper hand. The admins have to patch and ward the dragons from the gate.

Cross is right in my own opinion. Contributors are gonna go away if you keep doing **** like this, but hey, this is the NEW AO I suppose :p

I consider the "new" AO to be the new members that join and spam our boards, or post in GCC exclusively. I could care less if someone posts malicious code.

I saw the post count and I figured he was brand spankin new. Turns out hes a year old. If you ask me, he should advertise in his sig only and start contributing to the forums.

Well, again, he did not spam. He was helping to contribute IMO. But that was in the grey line I suppose.

Ya know what, **** it. What do I know?

Am I the only one who noticed that the links are broken? Or is it just me?

Just the ones in his first post because they have extra punctuation. The links in his second post work.

rhfactor, thank you for sharing it with us.

Quote:

---

Just the ones in his first post because they have extra punctuation. The links in his second post work.

---

Ahh, thanks muert0. Nice site there rhfactor, and I'm going to check out your program on my friend's box and see what I can find. :)

ps: I posted twice cuz the first one was my first post in these forums and I posted it in a wrong forum. Anyway, sorry all who get mad with my posts, wasn't my intention.

Btw, like cross said, I thought that here someone could use the tool. I made it cuz I worked some time as programmer and now I admin 3 webservers. Isn't only a hack tool. Like any sec scan, u can use it to evul or to protect yourself. Putting this tool in ur website is an easy way to check if u're FSO vulnerable, or CMD vulnerable, or REG vuln.

Anyway, my intention was to help and make someone use a FREE tool that NO ONE paid me to make.

ty all

Spyder32: no, this server sux :P

use a proxy and u probably will access the files, I dont know why but it works...

and SORRY AGAIN for those who HATE 2 posts in sequence, but I saw spyder msg after I sent my first msg

How come AO isn't like it was before? How come it changed to the "new" AO?

Last advice ( I don't wanna be called spammer again :P ):

to proctect your server against this stuff, change the permission of the FSO dll in system32 folder (I don't remember the file name, but I think that isn't too hard to search the web and find it). Protection against web prompt access, change cmd.exe permissions. I recommend to move all "dangerous" prompt appl to one specific folder and allow only adm to access it (net.exe, ftp.exe, cmd.exe, etc).

Anyway, before doing all these actions, better test all web folder permissions thru the tool, its good to see where you didn't applied the right permissions.

Main web folder must be well ACL configured.

Carefull with permissions in folders with write access (usually mdb or txt folders).

Is extremelly important the ACL configuration, otherwise your users can destroy your host.

If I said some **** (Im not talking about my english, I know that sux), if I'm "spamming", lemme know. I do my best.

;)

Yeah I remeber the day that AO wasnt just a forum. 99 ish, if i remeber correctly. Theres plety of tools and software that I wouldn't dare mention at this site in fear of being flamed, I go to other sites that speak about these items freely. Yes writing a tool that explotes an a server is wrong. Yes using said tool to exploit a server is wrong. But someone is going to write these programs eventually. Would you prefer to learn of the vunerablities from being informed though the net or from cleaning up the mess of a skiddy that ran rampant on your server. So go ahead and only talk about known weaknesses. Im off to look for 0-day issues that could cause problems.

symantec response:

http://securityresponse.symantec.com...l.rhtools.html

Are they late or what? :confused:
As part of Intrusion Prevncion Policies, after my work as an admin is done i personally use every good tool to try and burn my servers down... better be me the first to discover the weakness right?

===========
Ai irmao! Bom ver alguem q fala portugues por estas bandas!
Abraco e continua c o bom trabalho