Re: Encrypting a library -- MIDRANGE-L

Subject: Re: Encrypting a library
From: Patrik Schindler <poc@xxxxxxxxxx>
Date: Wed, 2 Jun 2021 22:39:32 +0200
List-archive: <https://archive.midrange.com/midrange-l/>
List-post: <mailto:midrange-l@lists.midrange.com>
List-subscribe: <https://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=subscribe>
List-unsubscribe: <https://lists.midrange.com/mailman/options/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=unsubscribe>

Hello Rob,

Am 02.06.2021 um 21:35 schrieb Rob Berendt <rob@xxxxxxxxx>:

What I'm trying to do is to see how one could maliciously encrypt such objects by using a share.

It is completely sufficient to test if you could actually overwrite the file's contents. Aka, opening it in notepad, replace the content with some arbitrary different content, save the stuff, and close the file.

That is what ransomware does.

Perhaps there are encryption tools which do not differentiate between stuff on a Windows server and stuff on other servers like Windows Explorer does?

Please do not confuse the Windows "built in" file encryption capabilities with some custom routines of Ransomware.

:wq! PoC

As an Amazon Associate we earn from qualifying purchases.

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.