Comments on: Winlockpwn: More then a Partytrick

By: Raven Poh

Raven Poh — Wed, 21 Apr 2010 09:08:29 +0000

I had a question on the winlockpwn script and hope that someone could help me out. Is it possible to use a USB to firewire cable to link from Linux VM to WinXP SP2 machine Or it is a necessary that we need a linux machine with firewire in order for the winlockpwn script to work.

The Linux VM will be running the winlockpwn script and the attacked machine is WinXP SP2. Thank you.

By: The Mule

The Mule — Fri, 09 Jan 2009 12:24:14 +0000

Does anyone know how to get past a "Permission Denied" error when "./winlockpwn 0 1 2" is entered.

By: Tom

Tom — Thu, 08 May 2008 23:00:14 +0000

Thanks for testing this Jim. I would assume that it’s only a matter of time until the code is rewritten to support XP sp3 (unless MSFT found a way to prevent it from working). I’ll keep everyone updated on any developments I find.

By: jim blanford

jim blanford — Thu, 08 May 2008 22:22:24 +0000

I’m guessing this doesn’t work on XP SP3. I just followed your tutorial on an XP SP3 machine and it was a no/go.

By: Tom

Tom — Thu, 08 May 2008 00:06:11 +0000

I would think it would work from 4-pin to 6-pin. I have seen 4-pin 1394 connectors on some laptops. I have also seen 4-pin to 6-pin adapters that you can buy in case you only have a 6-pin to 6-pin cable.

By: jim blanford

jim blanford — Wed, 07 May 2008 23:22:20 +0000

Will this work with a 4 pin to 6 pin IEEE 1394 cable?

By: Tom

Tom — Thu, 01 May 2008 23:37:43 +0000

Thanks for the comment Tyler. I found something similar that was done in the past for OS X called "FireStarter". This hack would apparently overwrite the memory of another Mac connected by FireWire. I believe this was fixed in newer versions of OS X from what I have read.

There was also another hack where you could connect a Mac to a FreeBSB box w/FireWire and do some interesting things. Looks like both of these hacks are really old (2004 and earlier).

http://blogs.23.nu/RedTeam/...

By: Tyler

Tyler — Thu, 01 May 2008 10:52:34 +0000

Hey baby, wanna see my firewire?

Great entry! Given that firewire requires direct access to memory of a computer in order to work, do you think this hack could be performed on other OS’? Using different attacks scripts of course.