Null Sessions, MSRPC, and Windows 2000

Explore the intricacies of Windows security vulnerabilities in this 39-minute Black Hat conference talk by Todd Sabin. Delve into the world of Null Sessions, MSRPC, and Windows 2000 security issues. Learn about Browser Lists, Password Policy, Local Security Authority, and Active Directory. Understand the implications of Null Sessions and MSRPC, including protocol sequences, CNN HTTP, Endpoint Mapper, Property Management Interface, and Endpoints Interfaces. Discover the significance of these vulnerabilities and explore potential solutions through configuration and ACLs. Gain valuable insights into Windows 2000 security challenges and how to address them effectively.

Introduction
Presentation Outline
What is a Null Session
Browser Lists
Password Policy
Local Security Authority
Active Directory
Null Sessions
MSRPC
Protocol sequences
CNN HTTP
Endpoint Mapper
Property Management Interface
Endpoints Interfaces
What does this mean for Null Sessions
How to solve Null Sessions
Configuration
ACLs
Summary
Questions