...the SATAN of Netware...
What is Pandora?
Pandora is a set of tools for hacking, intruding, and testing the security and insecurity
of Novell Netware. It works on versions 4 and 5. Pandora consists of two distinct sets
of programs -- an "online" version and an"offline" version. Pandora Online is intended to
be used for direct attack against a live Netware 4 or 5 server. Pandora Offline is
intended to be used for password cracking after you have obtained copies of NDS.
Pandora Status
Jitsu-Disk and Simple Nomad have completed Pandora v4.0 Beta 2.1. General features include:
- Freeware.
- Windows 95/98/NT GUI, for point and click Netware hacking fun.
- Offline (password cracking) and online (server attacking) executables.
- Netware 5 support for both offline and online programs.
- Uses the ever-cool Pandora Toolkit API.
- Full source code.
- Did we mention it is free?
- 100% built with freeware compilers and libraries, as a statement for and in support
of open source software solutions. See the bottom of this page for a list of
programming resources.
Offline features:
- A true password auditing tool for Netware 4 and 5.
- Importing and sorting of password data from different sources, including BACKUP.DS, BACKUP.NDS, and DSREPAIR.DIB files for Netware 4 and 5.
- Limited extraction of password material from damaged NDS files.
- Multiple simultaneous cracking of passwords for different accounts.
- All configuration, password, and restore files compatible between the Windows and
Linux versions. No dependence on that damned registry.
- Roll your own key space.
- Built in NDS browser for viewing all objects within the NDS tree.
- Includes a C port of The Ruiner's Remote Console Decryption algorithm.
Online features:
- Attach to server with password hashes extracted from Offline program.
- Search for target servers.
- Attach to a server and grab user accounts without logging in.
- Dictionary attack against user account.
- Multiple Denial of Service attacks.
- Improved spoofing and hijacking by using realtime sniffing.
- Works against Netware 4 and 5 (depending on patch revision).
- Silently snarf files as they are downloaded from server to client.
- Improved packet drivers for Windows 95/98/NT.
Open Issues/To Do List with Pandora v4.0 Beta 2.1
- Pandora Online for Linux bugs have been ironed out (the ones we know
about). The problems with the spoof/sniff attacks not working properly have
been fixed, as well as a threads problem. Let us know if you have problems.
- Reports of Windows 98 problems, from crashes with the new driver to
MFileSelection (part of MGui) not working under Win98 with option pack or
Win98SR2. We're working with Vincenzo Morello (the MGui maintainer) on
this.
- Jitsu added panmount code to Pandora Online for Linux, but it looks
like NW 4.11 SP7 might break some of the bindery attacks. Still testing,
but the NDS attaching stuff still works.
- Jitsu replaced underlying drivers with libnet/libpcap for Pandora
Online for Linux. If we were able to do this under NT, it would
keep the same source code tree for both platforms, so we are considering
porting libnet to NT (although that's not definite, because we anticipate
it flagrantly not working properly because of the way NT handles its
networking code). We actually might do the port to Win2K instead. Unsure
at this point.
Download here.
The entire NMRC team -- Adroit, Gr8Dcvr, Grace, Imnsho, Jim Profit, Jitsu-Disk,
Knobster, and Simple Nomad -- would like to thank the following people for their
assistance and inspiration:
- Greg Miller, Itsme, Al Grant, Denis L, g00ber, Richard P, Rx2, and Thomas Lackner
for their help and suggestions at various points during code development.
- Adrian Cunnelly, Eugene Ilchenko, Igor Gusev, and Sven B Schreiber for NCP ideas.
- John R McCawley III, Cap'n Hardgeus, and Hotwarez LLC for IPX/DOS low level coding ideas we leached.
- Gary Hein and Gabe Nault at Novell for not treating us like Microsoft treated eEye.
- Weld Pond and Mudge for developing L0phtcrack and in a roundabout way got Pandora started, also for code ideas in the Online sniffing code.
- Tan for his support, his opinions, and general c00lness.
- The Netware Hack mailing list and all the folks who sent in bugs and suggestions.
Cool programming resources used in Pandora (useful for those "single source code,
multiple OS target platform projects" you might be working on):
back