Penetration Testing mailing list archives

RE: XPSP2 compatability


From: "Todd Towles" <toddtowles () brookshires com>
Date: Fri, 20 Aug 2004 07:59:49 -0500

So you can't inject packets with spoofed IPs in Windows? Who does that
in Windows anyways... 

-----Original Message-----
From: Jacob Uecker [mailto:jacob () juecker net] 
Sent: Wednesday, August 18, 2004 11:26 AM
To: pen-test () securityfocus com
Subject: Re: XPSP2 compatability

According to Microsoft, only outgoing packets are affected.

Check it out:

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2netwk.
mspx#XSLTsection127121120120

Jacob

Terry Dunlap wrote:

I read a post by Fyodor
(http://seclists.org/lists/nmap-hackers/2004/Jul-Sep/0002.html) that 
this may be related to the fact that MS removed the TCP raw sockets in

SP2.

Terry

On Mon, 16 Aug 2004 22:50:32 +0930, Anjin <wildcard () internode on net>
wrote:

Following up on the item from James, it also seems that XPSP2 is 
incompatible with WinPCAP.  Both Snort and Ethereal fail with an 
identical error when XPSP2 is installed.  Removing the patch solves 
the problem.



------------------------------------------------------------------------
------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Check out our Advanced
Hacking course, learn to write exploits and attack security
infrastructure. Attend a course taught by an expert instructor with
years of in-the-field pen testing experience in our state of the art
hacking lab. Master the skills of an Ethical Hacker to better assess the
security of your organization.

http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
------------------------------------------------------------------------
-------


------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
-------------------------------------------------------------------------------


Current thread: