How to Invade Windows98/95

Date : 2005-03-10
Author : Defolos

CONTENTS

(1.) Win9x簡単侵入講座
(2.) Windows98のパスワード解析

Win9x簡単侵入講座

  1. コンピュータを起動します。

  2. 「starting windows」と表示されているときに"F8"を押し、スタートアップメニューを開きます。

  3. 「MS-DOSプロンプト」を選択し、以下のコマンドをタイプします。
      C:\Windows>rename c:\windows\*.pwl c:\windows\*.xxx

  4. 再起動させます。

  5. パスワード要求ウィンドウが現れますが、これはパスワード設定ダイアログです。

  6. 適当にパスワードを設定します。

  7. 侵入後はコマンドプロンプトを開き、以下のコマンドをタイプします。次のコマンドをタイプすることで元のパスワードに戻すことができます。
      C:\Windows>rename c:\windows\*.xxx c:\windows\*.pwl

 侵入の発見には、最近*.pwlファイルが更新されていないかどうかを確かめることで、この方法での侵入を検知することができます。


Windows98のパスワード解析

 レジストリエディタを起動し、次のようにキーを進んでください。

HKEY_LOCAL_MACHINE
  SOFTWARE
    Microsoft
      Windows
        CurrentVersion
          Network
            LanMan

 「parm1enc」というキーがあるはずです。このキーの値が仮に"71df0be91fe687"だったとしましょう。はじめから2文字づつ分けていくと次のようになりますね。

"71 df 0b e9 1f e6 87"

 下のテーブルを参照しながらみてください。

 1文字目の"71"は「1」の列を見てみると、"D"であることがわかります。2文字目の"df"は「2」の列を見てみると、"E"であることがわかります。3文字目の"0b"は「3」の列を見てみると、"F"であることがわかります。4文字目の"e9"は「4」の列を見てみると、"O"であることがわかります。5文字目の"1f"は「5」の列を見てみると、"L"であることがわかります。6文字目の"e6"は「6」の列を見てみると、"O"であることがわかります。7文字目の"87"は「7」の列を見てみると、"S"であることがわかります。

 全部繋ぎ合わせると、パスワードは「DEFOLOS」であることがわかります。

          1   2   3   4   5   6   7   8

A       =74 =db =0c =e7 =12 =e8 =95 =2b
B       =77 =d8 =0f =e4 =11 =eb =96 =28
C       =76 =d9 =0e =e5 =10 =ea =97 =29
D       =71 =de =09 =e2 =17 =ed =90 =2e
E       =70 =df =08 =e3 =16 =ec =91 =2f
F       =73 =dc =0b =e0 =15 =ef =92 =2c
G       =72 =dd =0a =e1 =14 =ee =93 =2d
H       =7d =d2 =05 =ee =1b =e1 =9c =22
I       =7c =d3 =04 =ef =1a =e0 =9d =23
J       =7f =d0 =07 =ec =19 =e3 =9e =20
K       =7e =d1 =06 =ed =18 =e2 =9f =21
L       =79 =d6 =01 =ea =1f =e5 =98 =26
M       =78 =d7 =00 =eb =1e =e4 =99 =27
N       =7b =d4 =03 =e8 =1d =e7 =9a =24
O       =7a =d5 =02 =e9 =1c =e6 =9b =25
P       =65 =ca =1d =f6 =03 =f9 =84 =3a
Q       =64 =cb =1c =f7 =02 =f8 =85 =3b
R       =67 =c8 =1f =f4 =01 =fb =86 =38
S       =66 =c9 =1e =f5 =00 =fa =87 =39
T       =61 =ce =19 =f2 =07 =fd =80 =3e
U       =60 =cf =18 =f3 =06 =fc =81 =3f
V       =63 =cc =1b =f0 =05 =ff =82 =3c
W       =62 =cd =1a =f1 =04 =fe =83 =3d
X       =6d =c2 =15 =fe =0b =f1 =8c =32
Y       =6c =c3 =14 =ff =0a =f0 =8d =33
Z       =6f =c0 =17 =fc =09 =f3 =8e =30
space   =15 =ba =6d =86 =73 =89 =f4 =4a
1       =04 =ab =7c =97 =62 =98 =e5 =5b
2       =07 =a8 =7f =94 =61 =9b =e6 =58
3       =06 =a9 =7e =95 =60 =9a =e7 =59
4       =01 =ae =79 =92 =67 =9d =e0 =5e
5       =00 =af =78 =93 =66 =9c =e1 =5f
6       =03 =ac =7b =90 =65 =9f =e2 =5c
7       =02 =ad =7a =91 =64 =9e =e3 =5d
8       =0d =a2 =75 =9e =6b =91 =ec =52
9       =0c =a3 =74 =9f =6a =90 =ed =53
0       =05 =aa =7d =96 =63 =99 =e4 =5a
~       =4b =e4 =33 =d8 =2d =d7 =aa =14
`       =55 =fa =2d =c6 =33 =c9 =b4 =0a
!       =14 =bb =6c =87 =72 =88 =f5 =4b
@       =75 =da =0d =e6 =13 =e9 =94 =2a
#       =16 =b9 =6e =85 =70 =8a =f7 =49
$       =11 =be =69 =82 =77 =8d =f0 =4e
%       =10 =bf =68 =83 =76 =8c =f1 =4f
^       =6b =c4 =13 =f8 =0d =f7 =8a =34
&       =13 =bc =6b =80 =75 =8f =f2 =4c
*       =1f =b0 =67 =8c =79 =83 =fe =40
(       =1d =b2 =65 =8e =7b =81 =fc =42
)       =1c =b3 =64 =8f =7a =80 =fd =43
-       =18 =b7 =60 =8b =7e =84 =f9 =47
_       =6a =c5 =12 =f9 =0c =f6 =8b =35
+       =1e =b1 =66 =8d =78 =82 =ff =41
=       =08 =a7 =70 =9b =6e =94 =e9 =57
[       =6e =c1 =16 =fd =08 =f2 =8f =31
]       =68 =c7 =10 =fb =0e =f4 =89 =37
{       =4e =e1 =36 =dd =28 =d2 =af =11
}       =48 =e7 =30 =db =2e =d4 =a9 =17
;       =0e =a1 =76 =9d =68 =92 =ef =51
:       =0f =a0 =77 =9c =69 =93 =ee =50
'       =12 =bd =6a =81 =74 =8e =f3 =4d
"       =17 =b8 =6f =84 =71 =8b =f6 =48
,       =19 =b6 =61 =8a =7f =85 =f8 =46
<       =09 =a6 =71 =9a =6f =95 =e8 =56
.       =1b =b4 =63 =88 =7d =87 =fa =44
>       =0b =a4 =73 =98 =6d =97 =ea =54
?       =0a =a5 =72 =99 =6c =96 =eb =55
/       =1a =b5 =62 =89 =7c =86 =fb =45
\       =69 =c6 =11 =fa =0f =f5 =88 =36
|       =49 =e6 =31 =da =2f =d5 =a8 =16

■参考文献


go back to the TOP page of Glazheim Lykeion.