RE: Win95 detection

["Jeff Gercken" <JeffG () kizan com>]

Use gettype.exe from the MS Resource Kits.  There are two versions, one
for 9x & NT, the other for 2k, xp and up.

E:\gettype

Host Name:   spork
Name:        Windows XP Professional
Version:     5.1 Build 2600 Service Pack 1
Role:        Workgroup
Components:  Not Installed

Alternatively you can use ver, which is built into the command shell but
you may have spotty results with this method.

To execute them you should use psexec from sysinternals and remotely run
a batch file that you'll create.

Contents of file: checkver.bat
net use b: \\computer\share
ver > b:\%computername%.txt (or b:\gettype > b:\%computername%.txt)
net use /delete b:

Then run the following command against all your workstations:
psexec \\<wokstation> -low -u <admin account> -p <passwd> -c
checkver.bat

OS fingerprinting is great but if you HAVE credentials on your boxes why
not use em?
-Jeff

-----Original Message-----
From: Trevor Cushen [mailto:Trevor.Cushen () sysnet ie] 
Sent: Wednesday, December 01, 2004 4:59 AM
To: petreski () ksu edu
Cc: security-basics () securityfocus com
Subject: RE: Win95 detection

Have you tried a login script to do the job for you?  Kix32 is perfect
for this job.

-----Original Message-----
From: Samuel Petreski [mailto:petreski () ksu edu]
Sent: 30 November 2004 21:53
To: security-basics () securityfocus com
Subject: Win95 detection


I have been given the task to scan for hosts that are running Windows 95
on
the network. I have tried scanning with Nmap and Nessus, however they
cannot
distinguish the hosts between 95/98/ME. I was wondering if anyone has
run
across a tool that is able to detect Win95 hosts on the network.

Thanks for your help.

Samuel Petreski

This email and its attachments are solely for the attention of
petreski () ksu edu.  
Please contact Trevor.Cushen () sysnet ie if you receive this mail in
error.