Re: MS Office Files

From: David Julião Santos (djps@zmail.pt)
Date: 02/14/03

  • Next message: bill: "OWASP WebGoatv2 released" 
    From: David Julião Santos <djps@zmail.pt>
To: <pen-test-return-2723-djps=zmail.pt@securityfocus.com>, <pen-test@securityfocus.com>
Date: Fri, 14 Feb 2003 17:32:08 -0000

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    > I recall a while back seeing a post somewhere about pulling credential
    > information from Office documents, but I can' t seem to find it now.

    GUIDClean.exe allows users to detect, display and modify the Global Unique
    Identifiers (GUID) that some MS Office products (Word and Excel) place in
    user's documents. An argument can be made that these GUID strings are a
    breach of users' privacy and may be used to track documents and bind them to
    particular users or particular machines.

    http://www.tranglos.com/free/index.html

    David Julião Santos
    -----BEGIN PGP SIGNATURE-----
    Version: PGP 8.0

    iQA/AwUBPk0oFRhPIskM5QolEQLk1QCgrhmuS124cSzuYXKH5qfDBLUoLsEAmwdQ
    HhA2ho42KBNLsWQtfeIUFz4b
    =f3mR
    -----END PGP SIGNATURE-----

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/

    Relevant Pages

    • Re: faster scans? (nmap)
      ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Re: pen test help please asap
      ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
      (Pen-Test)
    • Re: ettercap help
      ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
      (Pen-Test)
    • RE: CFM SQL injection
      ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Re: ettercap help
      ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)