Fw: testing an installer



----- Original Message -----
From: Timmothy Lester
To: 'dzoner@xxxxxxxxx' <dzoner@xxxxxxxxx>
Sent: Tue Feb 26 17:06:08 2008
Subject: Re: testing an installer

Just to add some good tools you may also be interested in.. Tea timer (which comes with spybot S&D) won't allow software to chang the registry without your permission. Not good for testing, but a good tool indeed. On the same vendors webpage, there is a tool called file anyzer (or something like that) which may come in handy. Not the best tool for the job, but I have used it and its good enough/ lightweight.

----- Original Message -----
From: listbounce@xxxxxxxxxxxxxxxxx <listbounce@xxxxxxxxxxxxxxxxx>
To: pen-test@xxxxxxxxxxxxxxxxx <pen-test@xxxxxxxxxxxxxxxxx>
Sent: Mon Feb 25 15:05:32 2008
Subject: Re: testing an installer

On Mon, Feb 25, 2008 at 10:25 PM, Qazi, Reema <reema.qazi@xxxxxxxxx> wrote:
Hi,

I am new to penetration testing and am doing security testing on an
installer. I need some help on "how to figure out every file & registry
entry an installer reads & writes".

Any tools that can help me find this info?



Regards,
Reema.



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



Hello

You can do that with active registry monitor (ARM) which has option to
create snapshot before and after actions and then you can compare
them.

You can find it on internet, 30days trial works like a charm.

Regards
Amar

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Relevant Pages

  • Re: Graphic converter query - transparency
    ... I was thinking of castle. ... make your installer available; an ftp site isn't a software installer in ... size of TeX has to do with anything. ... So you are saying that everything in that download is directly useful? ...
    (uk.comp.sys.mac)
  • Re: UNABLE TO CHECK FOR UPDATES ON THIS COMPUTER
    ... "Office Hotfix Installer encounter a problem..." ... i did download the windows installer cleanup utility w/o ... >There are some known issues with the Office Update site. ... >1) Use a utility to clean out the Windows Installer data, ...
    (microsoft.public.officeupdate)
  • Re: An alternative to Product Activation
    ... dongles will be regarded as a serious option by Codegear. ... Either the user could provide a username and password at the ... which is somehow embedded into the installer prior ... to download, or Codegear would generate them for you (probably the ...
    (borland.public.delphi.non-technical)
  • Re: Is there a malware/virus in the form of a fake registry cleaner?
    ... | pop-ups wanting to fix 288 registry entries. ... | all - asks if you want to send the installer to the recycle bin --- SAY ... Execute; Multi_AV.exe ... FireWall to allow it to download the needed AV vendor related files. ...
    (alt.comp.anti-virus)
  • Re: Fiend reuntied
    ... >> somewhere on the Debian website is a single-CD installer. ... Download, burn, ... Type some of a valid file-name and then hit. ... Suprisingly handhi. ...
    (uk.rec.sheds)