The Brave New World of NT

1
The Brave New World of NT

• by Jonathan McIndoe Hunt
• jmhunt_at_mit.edu
• MIT Information Systems

2
Outline

• Service Packs
• Sad State of the World
• Brief tour of BackOrifice 2000
• Question and hopefully answers

3
Service Packs

• SP3 with Hotfixes is a bare minimum
• SP5 with Hotfixes is recommended
• MITs Current Recommendations

4
Sad State of the World

• False Alarms
• Exploits/Attacks
• L0pht Crack
• Email Attachments

5
False Alarms

• NukeNabber
• ICMP destination unreachable
• 10 seconds and read up to 1k
• http//www.dynamsol.com/puppet/nukenabber.html
• Intruder Alerter
• http//www.axent.com/product/smsbu/ITA/default.htm

6
Exploits/Attacks

• Denial of Service (DOS)
• Unauthorized Access
• Privilege Elevation

7
L0pht Crack

• Sniffers
• Bad Password Choice
• Weak Authentication Win 9x

8
Email Attachments

• W32/ExploreZip.worm
• http//www.nai.com/asp_set/anti_virus/alerts/va101
  85.asp
• Ataka IE0199.EXE
• http//vil.nai.com/vil/tro10134.asp
• W32/Ska Happy99.EXE
• http//vil.nai.com/vil/vpe10144.asp
• Back Orifice
• http//vil.nai.com/asp_set/anti_virus/alerts/vabo2
  k.asp

9
Back Orifice 2000

• Demo