OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Full-disclosure] Re: Bypassing Personal Firewall (ZoneAlarmPro)Using DDE-IPC

From: Debasis Mohanty (mailhackingspirits.com)
Date: Sat Oct 01 2005 - 14:46:07 CDT


TZ Wrote:
>> Interesting, please define "Current", I really would like to investigate
how ZA would do this. Because as I stated
>> previously (afaik) you can't do it with onboard windows functions, must
be some wild patching and hooking going on
>> (again).

The stuffs are here ->

ZA Internet Security Suite : http://tinyurl.com/96x3s

ZA Pro: http://tinyurl.com/7qdkc

If the above link doesn't work then look for those products in the following
link:
http://www.zonelabs.com/store/content/home.jsp

- D

I hope I am not doing free marketing for Zone Labs ;-)

 

-----Original Message-----
From: Thierry Zoller [mailto:Thierrysniff-em.com]
Sent: Sunday, October 02, 2005 1:06 AM
To: Debasis Mohanty
Cc: full-disclosurelists.grok.org.uk
Subject: Re: [Full-disclosure] Re: Bypassing Personal Firewall
(ZoneAlarmPro)Using DDE-IPC

Dear Debasis,

DM> This one will work but as long as an user's intervention is there
DM> but if you try to simulate key strokes using your code then this is
DM> prevented by current version of ZA.
Interesting, please define "Current", I really would like to investigate how
ZA would do this. Because as I stated previously (afaik) you can't do it
with onboard windows functions, must be some wild patching and hooking going
on (again).

--
Regards,
Thierry Zoller

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/