As there were more
than 1,000 remote computers, I made a custom software package with
602 Practical Hacking Techniques and Countermeasures
InstallShield that would remove the old antivirus while it was running, reboot
the computer, and then install the latest version. By the way, when the
antivirus was uninstalled the antivirus icon remained by the clock on the
screen, so the end users never knew what had happened, even if they were
looking right at it.
Personally, I see a problem if my antivirus can be removed while it is
running, but it is possible.
If you need a good application to track all changes made during an
installation, including files, Registry changes, and even reboots, I highly recommend
the In Control application. The current version is version 5 and is
included on the CD or can be downloaded from:
http://www.devhood.com/
tools/tool_details.aspx?tool_id=432
Chapter 10
Redirection
Redirection
605
Lab 86: PortMapper
Traffic Redirection: PortMapper
Prerequisites:
None
Countermeasures:
Log monitoring, strong access control lists (ACLs)
Description:
Firewalls are used to filter undesired network traffic. Port
redirection allows you to bypass that restriction by forwarding traffic
through allowed ports on the firewalls.
Procedure:
Install the application, configure the parameters, and use the
program.
From the target machine obtain the IP address by typing
ipconfig
and
pressing
Enter
.
Pages:
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207