Ros-dev

ros-dev@reactos.org

5788 discussions

argh!!! who's implementing advapi/sec/lsa.c??

by Luke Kenneth Casson Leighton

argh! please whoever is implementing advapi32 lsa.c please look at samba tng's lsarpcd service. argh! -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

oh maaaaaan!! which mad bugger started implementing SAM!!

by Luke Kenneth Casson Leighton

okay. who's the nutcase that's been implementing libsam - i _hope_ you looked at samba tng's "samrd" source code!!!! l. -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

lib/netapi32/access.c and friends

by Luke Kenneth Casson Leighton

these are standard smbclient-related and/or rpcclient-related functions. NetUserGetInfo grabs the information from a NET_USER_INFO_3 structure which is "cached" from the MSV1_0.DLL access token for example (it's a really long story). NetShareEnum() is a LANMAN function, whoopeee what fun. in nt, there are _stacks_ of functions that tie pretty much directly into samba source code. l. -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

subauth.h

by Luke Kenneth Casson Leighton

oh maaan, that's really sad: i know what the stuff in subauth.h is all about, aaaaagh! it is incredibly similar to the MSRPC "NETLOGON" stuff that's implemented in cli_nt_login_interactive, cli_nt_login_network and cli_nt_login_generic in rpc_client/cli_login.c joy. l. -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

SSPI stuff... not ... _entirely_ relevant to MSV1_0.DLL but hey...

by Luke Kenneth Casson Leighton

http://win32.mvps.org/security/sspi.html this is getting really obscure... -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

mooore MSV1_0.DLL

by Luke Kenneth Casson Leighton

http://computer.programming-in.net/articles/dll-api.aspx?dll=msv1_0 just some stuff about the export ordinals. l. -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

MSV1_0.DLL

by Luke Kenneth Casson Leighton

... anyone speak russian? http://www.void.ru/content/720 -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

LSASS and MSV1_0.DLL - more research

by Luke Kenneth Casson Leighton

lots of people appear to have done quite thorough amounts of digging into MSV1_0.DLL due to it being the key to security attacks and stuff e.g. http://www.security-protocols.com/whitepapers/NT/NTcred.txt the two that i have read so far describe how WINLOGON.EXE is a "user" of the LSASS system by doing a LsaLookupAuthenticationPackage call, in order to obtain, presumably, the vector-table which MSV1_0.DLL registers with the LSASS, and then once that vector-table is obtained, they then go on to describe how MSV1_0.DLL may be attacked, by describing in detail the data structures in it. how very convenient for actually implementing one :) l. -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

samba tng program compile status

by Luke Kenneth Casson Leighton

hi, thought people might want to know: rpcclient.exe already was confirmed as working (by elrond) i just successfully compiled and tested smbclient, that works too. rpcclient.exe produces a _beautiful_ blue screen, i fell about when i saw this. elrond has a patch for smbd which removes fork() and i want to try this out and also make the msrpc services do the same thing, that will be fuuun. the sooner someone gets freedce to compile on mingw32 the damn better is all i can say there. i found some example code that uses NamedPipes i intend to add that in at both the client side and the server side and see what breaks, oo that will be fun i've never done nt named pipes programming before. l. -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

Re: SMSS & LSASS: Service Status

by Luke Kenneth Casson Leighton

regarding your offer to help with LSASS.... GREAT! because, coincidentally, this is exactly one of the areas required to tie in MSV1_0.DLL which will be a registererer with the LSASS, and MSV1_0.DLL is where all the nt authentication stuff happens. great, great. okay, here's something i found which describes the process, it looks pretty damn good: http://www.coresecurity.com/common/showdoc.php?idx=87&idxseccion=11 now, here's the bit that you _don't_ have to do: you do NOT have to do _any_ of the bits _behind_ "access the sam database". all of that is already written for you - in samba tng. i've had a _brief_ look at the implementation of lsass in reactos, and i believe it to be pretty good. it's just that there are no "registerers" e.g. there is no implementation of MSV1_0.DLL. l. -- -- <a href="http://lkcl.net">http://lkcl.net</a> --

19 years

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Ros-dev