Vulnerability Development mailing list archives

Re: Windows file problem


From: "Flaherty, Jack" <Shockro () AOL COM>
Date: Mon, 9 Oct 2000 20:33:43 EDT

Yep.  This has been a potential security risk for quite some time now because
these extra file streams can be dropped anywhere (possibly behind important
DLLs, etc.)  They're perfect places to hide rootkits, stolen nuclear hard
drive images, etc.

Uhhh...Some white-hat group released a program to find file streams and
delete them if necessary.  I thought it was the L0pht, but I can't seem to
remember now and I sure can't find it on their site.  URL someone?

amp


Current thread: