Dailydave mailing list archives
Re: Detecting Windows language versions
From: Rich Smith <richard.j.smith () hp com>
Date: Mon, 27 Jun 2005 13:03:37 +0100
Yeah I've been looking at SMB/NB/RPC responses to see if I can get any language info from them, haven't found anything useful as yet but will continue to play :) Cheers --Rich-- On Sat, 2005-06-25 at 14:20 -0500, H D Moore wrote:
Not the most accurate system in the world, but you can use sid2user to obtain the administrator account and administrator group name. Map these to a table of known languages and there shouldn't be too much overlap. It would be nice to get the actual language ID though, I wonder if that gets leaked in any SMB responses... -HD On Friday 24 June 2005 05:30, Rich Smith wrote:Hi all, Kinda on the same theme as the 2k3 SP0/SP1 fingerprinting thread a while back, I was wondering if anyone knew of any techniques to detect the language version of a remote Windows box?? i.e to detect the difference between an English, Sweedish,Chinese etc etc Windows boxen that are on the same OS version and service pack. Any thoughts ......? --Rich--_______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com https://lists.immunitysec.com/mailman/listinfo/dailydave
-- Rich Smith Trusted Systems Laboratory Hewlett Packard Labs _______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com https://lists.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- Detecting Windows language versions Rich Smith (Jun 24)
- Re: Detecting Windows language versions Meder Kydyraliev (Jun 25)
- Re: Detecting Windows language versions H D Moore (Jun 25)
- Re: Detecting Windows language versions Rich Smith (Jun 27)