<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.5730.11" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN class=913331418-03122007>Hey
list,</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=913331418-03122007></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=913331418-03122007>I wrote a little
blog posting over on OpenRCE.org on how you can compromise client machines that
connect to a terminal services server when they enable disk sharing. It's
nothing overly groundbreaking, but I hadn't read anything on it before so I
thought I would share some observations.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=913331418-03122007></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=913331418-03122007><A
href="http://www.openrce.org/blog/view/981/Build_Your_Own_Botnet_with_RDP">http://www.openrce.org/blog/view/981/Build_Your_Own_Botnet_with_RDP</A></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=913331418-03122007></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=913331418-03122007>Again if there is
any prior art on this please let me know, I just couldn't find anything for the
life of me.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=913331418-03122007></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=913331418-03122007>JS</SPAN></FONT></DIV></BODY></HTML>