Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What is an OOB attack?

April 26, 2017Attack oob

0

10 Posted

What is an OOB attack?

1 Answer

0

10 Posted

This attack is fairly simple, and a fair amount of source code is available. Basically it involves sending an out-of-band message to a Windows operating system. Typically port 139 is used. This was patched with SP3 and a Hot Fix but apparently with a little monkeying around with the code you can get around this. This DoS is very popular, mainly because of the wide variety of implementations of sockets. I’ve seen Unix and Windows NT versions of code, an implementation in Perl, and even an implementation using the Rexx Socket APIs on OS/2. If you are so inclined, try a web search for “winnuke” which will get you probably a thousand locations with the code.