OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: XPSP2 compatability

From: Todd Towles (toddtowlesbrookshires.com)
Date: Fri Aug 20 2004 - 07:59:49 CDT


So you can't inject packets with spoofed IPs in Windows? Who does that
in Windows anyways...

-----Original Message-----
From: Jacob Uecker [mailto:jacobjuecker.net]
Sent: Wednesday, August 18, 2004 11:26 AM
To: pen-testsecurityfocus.com
Subject: Re: XPSP2 compatability

According to Microsoft, only outgoing packets are affected.

Check it out:

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2netwk.
mspx#XSLTsection127121120120

Jacob

Terry Dunlap wrote:

> I read a post by Fyodor
> (http://seclists.org/lists/nmap-hackers/2004/Jul-Sep/0002.html) that
> this may be related to the fact that MS removed the TCP raw sockets in

> SP2.
>
> Terry
>
> On Mon, 16 Aug 2004 22:50:32 +0930, Anjin <wildcardinternode.on.net>
wrote:
>
>>Following up on the item from James, it also seems that XPSP2 is
>>incompatible with WinPCAP. Both Snort and Ethereal fail with an
>>identical error when XPSP2 is installed. Removing the patch solves
>>the problem.
>>

------------------------------------------------------------------------
------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Check out our Advanced
Hacking course, learn to write exploits and attack security
infrastructure. Attend a course taught by an expert instructor with
years of in-the-field pen testing experience in our state of the art
hacking lab. Master the skills of an Ethical Hacker to better assess the
security of your organization.

http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
------------------------------------------------------------------------
-------

------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
-------------------------------------------------------------------------------