The Razor Warez: Bindview's Razor Team

1. -- the razor warez ------------------------------------- black hat 2001 -- WaReZwArEzWaReZwArEzWaReZwArEzWaReZwArEzWaReZwArEzWaReZwArEzWaReZwArEz ..:,,,,,,::. ....... .... ...:::.... ..:,;ii,: ....... i#########Dj L####t W##########. .,i;: i#########Dj i###W,,iE###j ;######: ;iiitD###K, i ,i, i###W,,iE###j i###DiijK###i K##i###D .W###W. j .ij###DiijK###i i#########L, L##f j###j ,K###f f. .jE#######L: i###L t###D ;##########: j###K; :f. ;DL t###W i###L G###L .K##ftttj###E.G####EWWWWW .jt: :: :t W###L ;WWWj .WWWW,tWWf fWWWfWWWWWWWWWWW .ijtti;;;;, .. .WWWW, WaReZwArEzWaReZwArEzWaReZwArEzWaReZwArEzWaReZwArEzWaReZwArEzWaReZwArEz the razor warez todd sabin and mark loveless http://razor.bindview.com/ http://www.bindview.com/ --------------------------------- page 0x00 ------------------------------

2. -- the razor warez ------------------------------------- black hat 2001 -- we are analysts for bindview's razor team we write advisories and research papers we also write a variety of tools --------------------------------- page 0x01 ------------------------------

3. -- the razor warez ------------------------------------- black hat 2001 -- the razor warez unix windows - vlad the scanner - << tba >> - ncpquery - rpc tools - despoof - acl tools - zombie zapper - porttool - tfn2k - strace for nt - ngrep - zombie zapper - warscan - lsadump2 - icmpenum - pwdump2 - md5-tool - enum - nbtstat - ntreg --------------------------------- page 0x02 ------------------------------

4. -- the razor warez ------------------------------------- black hat 2001 -- vlad the scanner ]- sans top ten - http://www.sans.org/topten.htm ]- extensive database-driven cgi scanner ]- multi-protocol password cracker ]- 0 day database-driven banner checker --------------------------------- page 0x03 ------------------------------

5. -- the razor warez ------------------------------------- black hat 2001 -- vlad database formats ]- cgi.db - title - description - platform - severity - root - query-type - test-query - real-query --------------------------------- page 0x04 ------------------------------

6. -- the razor warez ------------------------------------- black hat 2001 -- vlad database formats ]- banner.db - title - description - platform - port - severity - comparision - banner --------------------------------- page 0x05 ------------------------------

7. -- the razor warez ------------------------------------- black hat 2001 -- vlad demo --------------------------------- page 0x06 ------------------------------

8. -- the razor warez ------------------------------------- black hat 2001 -- << tba >> (0 day) ]- dumps hashs with pwdump2 ]- dumps lsa secrets with lsadump2 ]- dumps cached hashes --------------------------------- page 0x07 ------------------------------

9. -- the razor warez ------------------------------------- black hat 2001 -- << tba >> demo --------------------------------- page 0x08 ------------------------------

10. -- the razor warez ------------------------------------- black hat 2001 -- questions/contact ]- http://razor.bindview.com/ ]- thegnome@razor.bindview.com ]- tsabin@razor.bindview.com --------------------------------- page 0x09 ------------------------------

11. -- the razor warez ------------------------------------- black hat 2001 -- ..###' '###,. '####; .ooooo. ;####' '##, .o8P"""""Y8o. ,##' '##, 88' '88 ,##' '##8' '8##' '#8 ,o. .o, 8#' 8 8 888; :888 8 8 8P '88' '88' Y8 P 8 'Y b 888 d `8b d8` 88'"88888"'88 8 `"""""""` 8 `8ooooooo8` ,##' '##, ,##' '##, jgs ,##' '##, .#####, ,#####. `##' '##` --------------------------------- page 0x0a ------------------------------