Article View: comp.os.os2
Article #1435Security leak in MS-Windows!
From: Bernhard Rosenkraenzer
Date: Tue, 14 Mar 1995 11:32
Date: Tue, 14 Mar 1995 11:32
39 lines
2777 bytes
2777 bytes
Another advantage of OS/2 in comparison to MS-Windows and Windows 95:
I've just discovered that the operating system MS-Windows has a security
leak that allows a programmer to get passwords required for almost every
program that runs with Windows.
You do it this way:
Every time Windows opens or closes a window, a CBT (Computer Based
Training) function is called. You can hook this message using
SetWindowsHook().
Most programs that ask for passwords (MS-Word (opening protected files),
MS-Access 2.0, etc.) use a dialog box to ask for the password.
In a CBT function, you can register the opening of any window having
"Password" or "Code" in the title bar (or whatever the title of the
program you're trying to get into is, and save the window's ID.
When the window closes (detectable by the saved ID), you can save the
content of all child windows (like the EditBox for the Password!).
If you need some code to demonstrate the mechanism (it works perfectly for
MS-Word 6.0 (German version) and MS-Access 2.0), send mail to
BERO@Flash.gun.de.
StarFleet Admiral Bero,
currently commanding the starship U.S.S. Tawern, NCC-54456
_
.-----________________--_ ________.--'-`--._____
\____==================_) \_'===================`
_,--___.-|__|-.______|=====/ `---'
`---------._ USS - Tawern|
`-._ - - - ,'
\_____,-'
e-mail: BERO@Flash.gun.de
## CrossPoint v3.02 ##
Technical Details
Message-ID:
<5hpY8YjFq0B@p0000021.flash.gun.de>Path:
arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!gatech!udel!news.mathworks.com!uunet!news.gun.de!gtnduss1.du.gtn.com!ius.gun.de!flash.gun.de!BEROShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f69fe,1b64f2ee9872c186,start X-Google-Attributes: gidf69fe,public X-Google-Thread: 1160f1,1b64f2ee9872c186,start X-Google-Attributes: gid1160f1,public X-Google-Thread: 114b37,1b64f2ee9872c186,start X-Google-Attributes: gid114b37,public X-Google-Thread: 1138ec,1b64f2ee9872c186,start X-Google-Attributes: gid1138ec,public X-Google-ArrivalTime: 1995-03-16 09:39:31 PST Lines: 39 Newsgroups: comp.os.os2,comp.os.os2.advocacy,fido.ger.os2,de.comp.os.os2 Message-ID: <5hpY8YjFq0B@p0000021.flash.gun.de> From: BERO@flash.gun.de (Bernhard Rosenkraenzer) Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!gatech!udel!news.mathworks.com!uunet!news.gun.de!gtnduss1.du.gtn.com!ius.gun.de!flash.gun.de!BERO Organization: United Federation of Star Trek Writers (UFSW) Subject: Security leak in MS-Windows! Date: Tue, 14 Mar 1995 12:32:00 +0100 X-Mailer: CrossPoint v3.02 via [DOS/NCBMail V2.11a REL.:050395] X-Gateway: ZCONNECT UX ius.gun.de [UNIX/Connect v0.71] MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Z-Post: Bernhard Rosenkraenzer; Auf der Hard 3; 54456 Tawern; Germany X-Z-Telefon: V+49-6501-14202