Re: Database of Hacker/Trojan MD5 Hashes for Group Policy?

"Stephen Wright" >
Has anyone seen an online database of some sort with these programs' MD5
hashes listed, updated as the programs are updated? That would definitely
make my life easier.

If I may make so-bold, you are doing this completely the wrong way...

You can change a hash by changing a single irrelevant byte, poof your system
is defeated, and any 'grades' system that can be broken into using simple
hacking tools should have its designer hung, drawn and quartered.

You should enforce the reverse, only allow executables to run that match a
known hash, that way you know exactly what can run.

If you are serious, you should always run by the PERMIT, PERMIT, DENY ALL
methods.

--
- Mark Randall
http://www.temporal-solutions.co.uk

"We're Systems and Networks..."
"It's our job to know..."


.

Relevant Pages

  • Re: alghorithm for code a password?
    ... > I look simply for a suitable algorithm (so better detailed and not ... > sophistical) than I can make a program which permit to code and to ... You need to salt and hash the password. ... Depending on your security ...
    (sci.crypt)
  • Re: Database of Hacker/Trojan MD5 Hashes for Group Policy?
    ... If I may make so-bold, you are doing this completely the wrong way... ... If you are serious, you should always run by the PERMIT, PERMIT, DENY ALL ... would probably suffer a big performance hit. ...
    (microsoft.public.security)
  • Re: alghorithm for code a password?
    ... It's a one-way hash algorithm. ... correct password, you hash that password and compare the result with the ... This methodology does not permit you ...
    (sci.crypt)