Re: NetBIOS Name resolver

From: Alun Jones (alun_at_TEXIS.COM)
Date: 09/13/03

  • Next message: Mark Brown: "XP systems continue to reboot, even with all patches installed an d native firewalling enabled" 
    Date:         Sat, 13 Sep 2003 09:38:47 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    > -----Original Message-----
    > From: Windows NTBugtraq Mailing List
    > [mailto:NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM] On Behalf Of Greg Chapman
    > Sent: Friday, September 12, 2003 12:07 AM
    >
    > Those of you on dynamically addressed networks may be having
    > a little bit of a headache in taking the contents of the
    > vulnerable.log file generated by Microsoft's scan tools for
    > MS03-026 and MS03-039. The log is very useful, but since it's
    > contents are the IP addresses only, you may be spending quite
    > a bit of time at the console running nbtstat -a to reverse
    > resolve those addresses to NetBIOS names for your technicians
    > in their task of manually patching recalcitrant hosts.

    Or, you might simply try kb######scan with the "/r" parameter. This will
    resolve numbers to names through DNS. Unfortunately, those names aren't
    included in the vulnerable.log file, but the output from kb######scan can be
    redirected to a log file of your own making.

    Alun.
    ~~~~ 

    ----
Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER!
With a growth rate exceeding 110%, the TICSA security practitioner
certification is one of the hottest IT credentials available.  And now, for
a limited time, you can save 33% off of the TICSA certification exam! To
learn more about the TICSA certification, and to register as a TICSA
candidate online, just go to
http://www.trusecure.com/offer/s0100/
----
  • Next message: Mark Brown: "XP systems continue to reboot, even with all patches installed an d native firewalling enabled"

    Relevant Pages

    • Re: Alert: Microsoft Security Bulletin - MS03-039
      ... The way that Microsoft patched the new RPC Part II vulnerability ... Summer's Hottest Certification Just Got HOTTER! ... To learn more about the TICSA certification, ...
      (NT-Bugtraq)
    • WHERE ARE NT4 OLD PASSWORDS STORED
      ... Sorry if this bores many of you (being an NT4 question), ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • Windows 2000 server issue
      ... accurately parse the lists of vulnerable machines produced by the scan ... of addresses directly on the script. ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification ...
      (NT-Bugtraq)
    • Firewalls and DCOM
      ... Never underestimate the lengths to which your users will inadvertently go through to infect a network;)" ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • Re: Drivial Pursuit: Internet Explorer Browser & Your Files and Folders !
      ... The default Enhanced Security Configuration of IE ... access to files and folders on the local machine from the internet. ... With a growth rate exceeding 110%, the TICSA security practitioner certification is one of the hottest IT credentials available. ... And now, for a limited time, you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)