Re: [Full-Disclosure] Psexec on *NIX

From: Ondrej Krajicek (krajicek_at_ics.muni.cz)
Date: 05/07/04

  • Next message: debian-security-announce_at_lists.debian.org: "[Full-Disclosure] [SECURITY] [DSA 501-1] New exim packages fix buffer overflows" 
    Date: Fri, 7 May 2004 08:39:22 +0200

    On Thu, May 06, 2004 at 02:54:55PM -0400, Chris Carlson wrote:
    > As I said before, I don't want to add any additional applications to my
    > machines. Yes, I know how psexec works; it adds a service, uses that
    > service, then removes it. I also know that the r services are an
    > option, as is ssh, but these are not what I want.
    >
    > If it doesn't exist, then it doesn't exist. In that case, I'll go make
    > one. I'm just trying to save myself some time here.

    I'm really curious how are you going to do it. There is no remote
    execution magic (except of remotely exploitable bugs)...
    even Windows does not containt any such magic, what makes
    psexec possible is RPC.

    SSH (sshd) is secure, widely supported from open source community,
    fixed and patched regularly. I really could not see why to
    prefer proprietary solution... which anyway adds additional
    applications. Is not supported, must be maintained and also patched.
    Just wait for first evil user who finds a bug, but does
    not report it.

    Ondra

    >
    > -----Original Message-----
    > From: Michael Gargiullo [mailto:mgargiullo@warpdrive.net]
    > Sent: Thursday, May 06, 2004 14:54
    > To: Harlan Carvey
    > Cc: Chris Carlson; full-disclosure@lists.netsys.com
    > Subject: Re: [Full-Disclosure] Psexec on *NIX
    >
    > On Thu, 2004-05-06 at 13:33, Harlan Carvey wrote:
    > > any of the r* services...rlogin, rexec, rshell?
    > >
    > > http://csrc.nist.gov/publications/nistpubs/800-7/node129.html
    > >
    > > --- Chris Carlson <chris@compucounts.com> wrote:
    > > > This has probably come up before, but does anyone know of a *nix
    > > > utility similar to psexec[1] to execute commands on remote windows
    > > > systems?
    > > >
    > > > I've seen several samba newsgroup threads about this, but no posted
    > > > solutions.
    > > >
    > > > I'm not looking for any extra services to add to my machines - I
    > > > already know of plenty. I just want something comparable to psexec
    > > > that will run on *nix.
    > > >
    > > > - Chris
    > > >
    > > > [1]
    > > >
    > > http://www.sysinternals.com/ntw2k/freeware/psexec.shtml
    > > >
    >
    > umm have you tried ssh
    >
    > ie... ssh you@remotemachine 'ps ax'
    >
    > -Mike
    >
    >
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    +>>>-----------------------------------------------------------------+
    |Ondrej Krajicek (-KO|
    |Institute of Computer Science, Masaryk University Brno, CR |
    |http://isildur.ics.muni.cz/~ondra krajicek@ics.muni.cz|
    +--------------------------------------------------------------------+

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

    • application/pgp-signature attachment: stored
  • Next message: debian-security-announce_at_lists.debian.org: "[Full-Disclosure] [SECURITY] [DSA 501-1] New exim packages fix buffer overflows"

    Relevant Pages

    • RE: [Full-Disclosure] Psexec on *NIX
      ... machines. ... option, as is ssh, but these are not what I want. ... Subject: Psexec on *NIX ... Full-Disclosure - We believe in it. ...
      (Full-Disclosure)
    • Re: [Full-Disclosure] Psexec on *NIX
      ... Have you considered creating one dedicated windows machine with SSHd ... and psexec installed and using it as a jumpbox? ... Why would I install ... CC> and run an ssh daemon just to use it to run another program, ...
      (Full-Disclosure)
    • Re: How do you kill a completely locked up thread?
      ... In this particular case, I need SSH, which for some reason Microsoft doesn't ... back in the days where there was no memory protection for applications. ... rogue application could bring the entire system down. ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: [Full-Disclosure] Psexec on *NIX
      ... What command's could you run on a window's OS VIA remote that would save you ... Psexec allows you to run commands on remote win boxes, ... > SSH is fine and good, but Psexec requires nothing more than a fresh ... > network he wishes, or he's simply trolling because he's bored. ...
      (Full-Disclosure)
    • Re: ssh X11 port fwd-ing breakage in FC3?
      ... "The behavior of ssh clients that are invoked with the -X flag ... In OpenSSH 3.8 and later, ... applications always ran as trusted clients. ... forward X11 so that applications are run as trusted clients, ...
      (Fedora)