ISS.txt

`ISS products are meant to be used in a defensive role. Here we will look at   
using them in an offensive role.  
  
===Please note that the writer has NO responsibility for YOUR actions with   
this === ===information! I did not make you do it. I just made you aware it   
COULD be done.===  
  
  
Internet Scanner and the Real Secure products can both be used to create a   
DoS type attack on unsuspecting networks. Here is what a would-be attacker   
would need to conduct such an attack:  
ISS product.  
Visit http://crack.21m.net/ and obtain the key generator for ISS products.  
Cut your key to include the range of IP addresses, which you wish to use the   
products against. (Or just make one "God" key by making the range   
0.0.0.0-255.255.255.255)  
Install the product and drop the newly created key in the directory. Now   
your ready to go to work. Note: You may want to install the latest Xpress   
updates before you begin. Having the latest and greatest exploits and   
vulnerabilities in the product increases your chances of finding one that   
your target is vulnerable to.  
Scenarios:  
Having ISS Internet Scanner on a laptop could work wonders. For instance,   
have physical access to a network. Plug yourself in. Now let Internet   
Scanner run DoS attacks against the entire network. Or set up policies in   
Real Secure that restrict net bios traffic if it is a Windows network   
environment. Or maybe stop all traffic to website you hate by blocking HTTP   
traffic from any host to your target (website). Remotely a person could look   
up a domain on the Internet, grab its IP address, remotely check for its   
Operating System, and Web server application and let Internet Scanner run   
against it.  
  
Keep in mind that these products will not spoof the source IP address that   
the attacks are coming from. There are only a couple of "checks"(attacks)   
that spoof the source address of the attack. Although in Real Secure killing   
TCP connections are a bit harder to trace than a teardrop attack from   
Internet Scanner.  
  
There are a number of ways that these products could be used in an offensive   
manner. This is in no way an all-inclusive listing.  
  
`