Fingerprinting through Windows RPC

No ratings

Presented at BlackHatWindows 2004 by

Many Windows 2000/XP/2003 functions depend on RPC service. By enumerating Windows RPC endpoint-map elements, you will differentiate between the followings: Windows NT 4.0 SP3 or before and Windows NT 4.0 SP4 or later, Windows 2000 SP2 or before and Windows 2000 SP3 or later, default Windows XP and Windows XP SP1, Windows XP Home Edition and Windows XP Professional. This presentation will show what differences are there between Windows 2000/XP/2003. Hidenobu Seki, aka Urity works as a network security specialist at SecurityFriday Co., Ltd in Japan. He has published many tools, ScoopLM/BeatLM/GetAcct/RpcScan etc. He has been a speaker at the Black Hat Windows Security 2002 and 2003.