ppl still using 95 and 98
-------------------------------------------------------------------------------------
PQwak v2.00a October 27, 2000
© Shane Hird 2000
DISCLAIMER: By using this program, you agree that you are completely
responisble for your own actions, and I, Shane, am in no way
liable, unless its something good.
->What is PQwak?
This program exploits a flaw in the share level password authentication
of MS windows 95/98/ME in its CIFS protocol to find the password of a
given share on one of these machines.
->How does it work?
The program exploits a flaw found by nsfocus (www.nsfocus.com) in which
windows verifies passwords based on the client supplied password length
rather than the server's. The program is essentially a stripped down
NetBIOS client, which communicates at the TCP/IP level, using CIFS through
SMB over NetBios over TCP/IP
iterating through a set of characters, when it finds a match, it goes up
to a size 2 password and so on.




