FAQ for downgrade.exe
10725f3841e8ab4c997f5566880668a3<HTML>
<HEAD>
<TITLE>The SMB Downgrade Attacker FAQ</TITLE>
</HEAD>
<BODY BGCOLOR="BLACK" TEXT="#FFDFBF" LINK="#C08010" VLINK="#C08010" ALINK="WHITE">
<FONT FACE="arial" SIZE="3">
<B>- The SMB Downgrade Attacker FAQ -</B>
</FONT>
<FONT FACE="arial" SIZE="2">
<BR><BR>
<I><FONT COLOR="#C08010">Q: </FONT>How do I unbind TCP port 139 in Windows NT?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>Click Start - Settings - Control Panel - Network - Bindings. Select "all protocols" and mark "WINS Client (TCP/IP)". Then click Disable - OK. Reboot your computer for the change to take effect.
</BLOCKQUOTE>
<I><FONT COLOR="#C08010">Q: </FONT>When I try to map a share on the computer running the SMB Downgrade Attacker, I get the error message "System error 1240 has occurred. The account is not authorized to login from this station.". What's wrong?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>The client computer is probably Windows NT 4.0 with SP3 or later. If it is, the SMB redirector refuses to send plaintext passwords with the default configuration. However, you can circumvent that (but remember that lowers the security). Go to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Rdr\Parameters and add the value EnablePlainTextPassword as a REG_DWORD that contains the data 1.
</BLOCKQUOTE>
<I><FONT COLOR="#C08010">Q: </FONT>What does "Client bailed out!" mean?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>Most of the time it means that the client refuses to send the password in plaintext.
</BLOCKQUOTE>
<I><FONT COLOR="#C08010">Q: </FONT>I have problems with the SMB Downgrade Attacker and Windows 9x, what should I do?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>The SMB Downgrade Attacker has only been written and tested on Windows NT. If it works on other systems that's great, if it doesn't, that's the reason.
</BLOCKQUOTE>
<I><FONT COLOR="#C08010">Q: </FONT>I have a question that is not covered by this FAQ. Where can I get help?</I>
<BLOCKQUOTE>
<FONT COLOR="#C08010">A: </FONT>Send a mail to winnt@bahnhof.se with your question. I can't promise that I will have time to answer, but I'll do my best.
</BLOCKQUOTE>
</FONT>
<FONT FACE="arial" SIZE="2">
<BR><BR>
<HR WIDTH="50%" ALIGN="CENTER" SIZE="1">
<CENTER><A HREF="http://www.bahnhof.se/~winnt/">[Home]</A> <A HREF="http://www.bahnhof.se/~winnt/advisories/index.html">[Security Advisories]</A> <A HREF="http://www.bahnhof.se/~winnt/toolbox/index.html">[The Toolbox]</A> <A HREF="http://www.bahnhof.se/~winnt/trashcan/index.html">[The Trashcan]</A></CENTER>
<P ALIGN=RIGHT>
<FONT FACE="arial" SIZE="1">
© 1999, Arne Vidström
</FONT>
</P>
</FONT>
</BODY>
</HTML>
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!