Ŀ
 Presents
  ڿĴ VMag, Issue 2, 1 June 1998
  

   㦨 짮⥫᪨ ஫   Novell 3.x  .
   --------------------------------------------------------------

1. .

	              ᫮   ਥ,
騬  	  让  ᯥ樠쭮	ᠭ   ணࠬ
㧭 ஫ 짮⥫  ⥩ Novell 3.x   . ࠧ	᪠,
 ⢮ ⮩      ਭ , ⥬	,  ᠬ
  	 ᠬ 孮.  ⬥ ,   ॠ
      ।⠢      	   㤮  
ᯫ樨,  ,  ᮬ,    	 ⮩   ⥯
訥	ᯮᮡ  ॠ樨  ᫥  ਬ⥫쭮	   
᫮ "ᯫ樨"  ⮤...


2. ணࠬ PasswordStorer.

	  ணࠬ   ॠ 뢠  ᯮᮡ.  
 祬    ?..   ⮬,    室    짮⥫
ᯮ ணࠬ LOGIN.EXE.  ᪥ ணࠬ 뤠   ࠭
᫥. :

Enter your login name:
Enter your password:

        祬, ᫨  ⢥     뢠  ᨬ
    ந    宬  (..  ᨬ  ⮡ࠦ  
࠭),   ஬ - .     ஫   㦨
,          ᢥ 冷  ᯫ. ;)
⥫쭮,  ⮤  "ࠡ"  ࠭    ᬮ   ஫
砫쭮   ਬ.    ,   ᬮਬ   ⮣   
㦨 ஫  ।⢥   ⥢ ,  뫠 
ࠡ祩 ⠭樨, 믮饩 LOGIN,   ࢥ:      ⮬,
ᠬ  ஢ 㧭 ஫?   ⮬,  ஫,  뫠
 ࢥ,  .   祬    DES-   ३
    ᪥,  ᯥ樠쭮  訢  ணࠬ  LOGIN ।
ᮬ ஫.      ୮   Novell 3.x   4.x   ࠡ 
० 樨  bindery. ⢥,     ஢  
  ᪫祭  "⫮" ஫  ,   
ࢥ. ... 㦥     ਠ⮢?.. .   祬
  祭  .   㦭  ᫥    ணࠬ  LOGIN   
࠭  ᨬ,      ६  ࠡ.   
 ஡:    , ᫨  짮⥫ 㤥 ᯮ짮  
    㣨        २    LGIN?  
 ।  ᪠      ࠡ⠥. :(    ,
 ਠ⮢? . ,   LOGIN 訢   ࢥ ।
祭 ஫  ஢.    ⎨ ᫥  맮
⮩ 㭪樨  _᫥_ ⮣      ᨬ,
.. ஫?..  ⠪  ࠡ⠥ ணࠬ PasswordStorer.


3. .

          㪠  짮⥫  䠩    ଠ  COM    EXE
뢠   ஢   ணࠬ-ᡮ騪   ஫.    
㤭  㦥  ணࠬ-ᡮ騪,  ᫥  
  ஬   SMEG  (Simulated   Metamorphic   Encryption
Generator  by  Black  Baron).    ⥫ ணࠬ ࠭  
䠩,    ஬  㤥  ந  ࠭  ஫     
짮⥫, 室  .   ᪥ ⠪ COM  EXE  䠩
ந室 ⠫ ணࠬ-ᡮ騪      (
,         UMB).    祬   १      
㦨   ᬮ   Volkov Commander   Dos
Navigator.  ந    䠩,    ஬   ࠭
஫,     ᢨ,  ᮧ .  ⥬ ந
墠  뢠  Int  21h  (DOS  ࢨ),  ந ன
ॣ஢          ࠢ     ।     ਣ쭮   
ணࠬ-த⥫. ࠡ稪 Int 21h 믮 ᫥騥 樨:

- 墠  DOS  fn  4b00h  (㧨   믮)  ᯮ 
    ᪠ 䠩.   砥, ᫨  䠩  *NET?.*
  (emsnetx, xmsnetx, netx, bnetx,  neta  ..)   *VLM.* (vlm.exe),
  ..   ᪠ ⥢  ࠩ, ⢫騩  ࠡ   
  १  ࢨ  Int  21h,       ।  ᪮   ⠭
  ਣ쭮   祭      Int   21h,      ᫥  -  ᭮
  墠뢠.   ᠬ ⨣  筮 ४⭠  ࠡ
  墠稪  ஫      ⮬  砥,  ᫨   㦥 
    㧪   ࠩ஢ ࠡ  .

- 墠  DOS fn  F217h (⥢  ⨯).   ⮬ 砥  
  㥬     뢠 㭪樨,   ᫨   ࠢ
  18h  (login  object  encrypted),    ⠥,    ࠡ⠥ LOGIN,
  ࠭塞    ஢      짮⥫,    
    LOGIN  (  ⠪  ।    )   䫠
  ࠡ⪨ DOS fn 8.  ଠ 맮  㭪樨 ⠪:

  AX=F217h
  CX=length of request buffer
  DX=length of reply buffer
  DS:SI=request buffer
  ES:DI=reply buffer

  request buffer:
  dw	  ?		; ᫥ 
  db	  18h		; 㭪樨 (login object encrypted)
  db	  8 dup (?)	;஢  祭  ꥪ
  dw	  ?		;⨯ ꥪ (1 - user)  ଠ big-endian
  db	  ?		;  ꥪ
  db      ? dup (?)     ; ꥪ
                        ;(..  襬 砥  짮⥫)

    ⮬,    ᠬ   㭪 뢠   
  楤 室  .

        1) LOGIN  砥  ID  訢   ꥪ  (..  
  짮⥫, 饣 믮  LOGIN) ଠ ॣ஢  맮
   .

  request buffer:
  dw	  ?		; ᫥ 
  db	  35h		; 㭪樨 (get bindery object ID)
  dw	  ?		;⨯ ꥪ (1 - user)  ଠ big-endian
  db	  ?		;  ꥪ
  db      ? dup (?)     ; ꥪ
                        ;(..  襬 砥  짮⥫)

  reply buffer:
  dd	  ?		;ID ꥪ
  dw	  ?		;⨯ ꥪ
  db	  ? dup (?)	; ꥪ


        2) LOGIN 訢  ࢥ 8-⮢   ८ࠧ
  ஫ ଠ ॣ஢ 맮  .

  request buffer:
  dw	  ?		; ᫥ 
  db	  17h		; 㭪樨 (get encryption key)

  reply buffer:
  db	8 dup (?)	;襭  ८ࠧ

        3) LOGIN    ID  ꥪ    DES-   
  ᯮ짮  祭    ८ࠧ    ᫥   ⮣
  뢠  襯ਢ  㭪  18h  (login  object encrypted) c
  ⥬, ⮡  믮 室   ,  砥, ᫨  ஫
    짮⥫   ⠭ (null).  ⬥,  
  ஢ઠ null-஫  ࢥ  ࠦ  -䠩 ,  ஬
  ⮣,    প  ⢥   ࢥ    砥,  ᫨   
  짮⥫ -⠪  ஫.

        4)   設⢥  砥  .3  ࠡ⠥   訡, .. 
  짮⥫   ஫.   ⮬ 砥  LOGIN 뢮  
  ࠭:

  Enter your password:

   ⠥ ஫ १ 㭪 DOS 8 (character input without  echo),
  ࠡ뢠  ⨥    "backspace"  (  㤠 ⠭
  ᨬ)   뢠   "enter".

        5) ᫥  ⮣  LOGIN   .1-3, ᯮ  
  짮⥫ ஫.   砥  㤠筮 ⪨,  LOGIN 蠥
  믮  ⠭  .  ⨢ 砥  (᫨
  室    ந 㤠筮)   ࠢ .

- 墠  DOS  fn  8  (get  character without echo).   㭪
  ࠡ뢠  ⮫쪮    ஬⪥    맮  "login object
  encrypted"     ⨥       "enter"      襭
  ணࠬ.   㭪 뢠  ணࠬ LOGIN   ⠢
  ஫, ⥬  ᠬ   ᨬ쭮 ࠭塞  ஫,  
  ᨬ.      ࠡ뢠   ⠪  ⨥      "backspace"
  (ࠥ  ।騩  ࠭  ᨬ).        
  "enter"   ४頥 ࠭  ᨬ ஫    (஫
  ).

- 墠 DOS fn 4ch (exit  of program). ਬ, ࠭    
  ६ ᥠ ࠡ 蠥  ணࠬ ஫ (..   믮
   LOGIN), ᫨     襭 ணࠬ ࠢ 0, .. 室  
    믮 ᯥ譮,   뢠   䠩,   
    襬   ஫,     뢠     		஢
  LOGINAME\PASSWORD.

		䠩    㤥  ⥬  ,  ஢  
ணࠬ PswView.Com.      ,      _祭_  .
筮  ணࠬ-ᡮ騪    䠩,  믮塞
 autoexec.bat,  ஫ 	짮⥫, 室     ⮩
ࠡ祩 ⠭樨   	 ଠ.  ;) 㣮  :   㦭  
?..	;)    ணࠬ  PasswordStorer,  ࠢ      㣨
訥 ⨫/ࠪ      ᪨   Bashut 
Niceut (2Scout: ,   ४  -⠪  ﭥ... ;)


4. ஡.

         ᠭ   ⬠,     ᫥ ,  
⪨.         ࠡ  ᯥ稢     砥
믮 ᫥ ᫮:

- ணࠬ-ᡮ騪  ⠫஢    ᫥  ࠩ ⥢
  DOS-ࢨ (shell),   ।  ,    ⮬  砥   
     ⠭  (?net?,vlm).

- ணࠬ-ᡮ騪    ⠫஢       ணࠬ,
  ⢫  墠  Int  21h    ६ ᢮ ࠡ (ਬ
  Volkov  Commander),  ᫨  ।  室        ணࠬ
  㦠  

- 믮 室   ⢫ ⠭⭮ ணࠬ  LOGIN
     100%-ᮢ⨬ .

   ⮬ 砥  ,  ஫ - ... ;)


樠쭮  LMD, Psychomancer // SPS.
		     2:454/5.9@FidoNet
