OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Paul L Schmehl (paulsUTDALLAS.EDU)
Date: Wed Mar 07 2001 - 15:44:50 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Well, if you have authenticated access, accessing the registry to check for
    modems would be trivial. All you have to do is query (IIRC)
    HKLM/System/CurrentControlSet/Enum/Modems/. You can do this with a KiXtart
    script easily during login. Or you could write a VB script that remotely
    queries whenever you want.

    I'm not sure why you'd even care about the Unicode string. Wasn't the goal
    to determine if there were modems on any machines on your network? This
    can be "proven" by the existence of the Modems key in the Enum list.

    --On Tuesday, March 06, 2001 11:20 PM -0800 Attonbitus Deus
    <ThorHAMMEROFGOD.COM> wrote:

    > A similar discussion took place on the Pen-Test list. Interested parties
    > may wish to look in the archives for "Modem detection without dialing" for
    > more information. One poster said he had a script already written that
    > will remotely query the target systems' registry to determine what
    > RAS/Modem devices were installed- of course, that would be authenticated
    > access.

    Paul L. Schmehl, paulsutdallas.edu
    Supervisor, Support Services
    The University of Texas at Dallas