Entries from December 2005

looking for tools/scripts to clean up unused AD accounts

Date December 4, 2005

Hello everyone.
I am looking for tools/scripts to clean up unused AD accounts
Background:
- Active Directory is one of the key repositories for system and user accounts.
- Various licensing systems use AD as an indicator of the number of
licenses needed to cover the environment.
- AD is known to have entries for systems and people that are no
longer [...]

Network Layer 2 Trace

Date December 4, 2005

Hello,
I would like to know if it is possible to do like a traceroute
but on layer 2.
I need to see the equipment that is between source and target
machines.
Thanks in advance;
PS: Sorry my English, this [...]

policy-based password cracker

Date December 4, 2005

Hi all,
I am looking for a brute-force password cracker that
can be configured based on password policies. For
example, I am trying to audit a system that I know the
security policy on (min/max pw length, complexity
rules, etc) What I want is to only brute-force
passwords that fit that policy. Obviously, min and
max is not the [...]

Ping a mac address

Date December 4, 2005

HI All
I am looking for a tool that can ping mac address
The only tool that I found is arping from
http://freshmeat.net/projects/arping/
The only problem is that it can’t ping windows machine and is working only
for
machines which answer broadcast pings.
Is there anything like that or am I searching for something that doesn’t
exist.
Thanx In Advance For All The Help
- [...]

Bugs and Exploits 03-dec

Date December 4, 2005

Zen-Cart

A flaw in Google’s G-Mail system allowed anyone access to any mailbox

Date December 3, 2005

This bug has already been corrected, that’s why it’s been published.
In this manual you will see step by step how to exploit Gmail’s
vulnerability, that gave you access to any account, reported by
Anelkaos, colaborator of elhacker.net’s forum and patched by Google by
October 18. Due to the bug’s gravity (that allowed in a few simple steps
to login [...]