Penetration Testing mailing list archives
RE: Escalating from Netware box
From: "Smarsz, Michael" <michael.smarsz () eds com>
Date: Mon, 16 Aug 2004 09:09:15 +1000
-An inability to see the entire results of a command run on the system. I can run a command, but then to see the results I have to open /etc/console.log and read the last few lines (so I can't always see the entire results, because it appears to be cut off in the log).
To view all the entries in the console log, you need to unload conlog. Otherwise it truncates the file, as you have discovered.
-I don't even know how to download files to the Netware box. I have been unable to determine if it has a HTTP or FTP client
To my knowledge, there's no cli client for either of these. The way that Netware runs is a slightly different philosophy to other OSs. You manage the server from a remote PC, not so much from the host itself. See if you can load a common/popular 3rd party app called toolbox. If you have another netware server, you should be able to copy files from it using toolbox.
For example, I tried loading the remote console and then accessing it remotely, but it appears to be blocked at the firewall since I can't get in.
Rconsole uses IPX. You said you were coming in via the Internet. Joined the dots yet? Try using rconj, which will give IP access. You'll still have to break the rconsole passwd (unless it's in the clear from files you have already read). Or if it isn't loaded, seed it with your own passwd.
Current thread:
- Escalating from Netware box McKenna Henage (Aug 12)
- RE: Escalating from Netware box Jerry Shenk (Aug 16)
- <Possible follow-ups>
- Re: Escalating from Netware box Dave Nuull (Aug 16)
- Re: Escalating from Netware box Francois Labreque (Aug 23)
- RE: Escalating from Netware box Steven A. Fletcher (Aug 16)
- RE: Escalating from Netware box Smarsz, Michael (Aug 16)