If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)

Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

RPC backdoor

Angelo Pascal · 2008-11-01 03:39:28

Alot of windows processes (anti virus, firewall, database, OS) use RPC to function with other systems on the network. I was thinking about a backdoor using RPC, since its probably ignored. current services use RpcServerRegisterIfEx() if you see this in an executable, then its worth investigating for buffer overflows. a…

01-11-2008 04:39AM

#1

Angelo Pascal

Closed Accounts Posts: 35 ✭

Join Date: October 2008

Posts: 24

Alot of windows processes (anti virus, firewall, database, OS) use RPC to function with other systems on the network.

I was thinking about a backdoor using RPC, since its probably ignored.

current services use RpcServerRegisterIfEx()

if you see this in an executable, then its worth investigating for buffer overflows.

a tool which will list RPC services and their api is PortQuery

http://support.microsoft.com/KB/832919

0