Named pipes: Difference between revisions
Jump to navigation
Jump to search
No edit summary (change visibility) |
No edit summary (change visibility) |
||
| (2 intermediate revisions by the same user not shown) | |||
| Line 5: | Line 5: | ||
* http://www.hsc.fr/ressources/articles/win_net_srv/hardcoded_named_pipes.html | * http://www.hsc.fr/ressources/articles/win_net_srv/hardcoded_named_pipes.html | ||
* http://blueteamer.blogspot.be/2015/03/adventures-with-null-sessions-are-they.html | * http://blueteamer.blogspot.be/2015/03/adventures-with-null-sessions-are-they.html | ||
* https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec385226.html | |||
= Well-known MSRPC named pipes = | |||
http://www.hsc.fr/ressources/articles/win_net_srv/well_known_named_pipes.html | |||
= services making legit use of unauthenticated named pipes = | = services making legit use of unauthenticated named pipes = | ||
* Windows DFS -> netlogon | * Windows DFS -> netlogon | ||
* [https://success.trendmicro.com/solution/1059081-error-connecting-to-server-open-pipe-failed-appears-when-connecting-to-serverprotect-for-network Seen trendmicro services] | * [https://success.trendmicro.com/solution/1059081-error-connecting-to-server-open-pipe-failed-appears-when-connecting-to-serverprotect-for-network Seen trendmicro services] | ||
* [ | * [https://support.symantec.com/en_US/article.TECH123400.html netapp connects anonymously]netapp connects anonymously | ||
Latest revision as of 15:21, 23 December 2016
A named pipe is a Windows specific interprocess communication method that allows processes on the same or different systems to communicate with each other. This setting allows you to define exceptions to the "Network Access: Restrict anonymous access to Named Pipes and Shares" setting below. Pipes listed in this setting can still be accessed anonymously (aka Null Session) even if "Network Access: Restrict anonymous access to Named Pipes and Shares" is enabled. This setting is necessary since there are a few components of Windows with name pipes that must allow anonymous access in order to function.
- https://blogs.msdn.microsoft.com/spatdsg/2006/05/15/fyi-changes-to-null-session-pipes-post-2k3-sp1/
- https://www.ultimatewindowssecurity.com/wiki/WindowsSecuritySettings/Network-access-Named-Pipes-that-can-be-accessed-anonymously
- http://www.hsc.fr/ressources/articles/win_net_srv/hardcoded_named_pipes.html
- http://blueteamer.blogspot.be/2015/03/adventures-with-null-sessions-are-they.html
- https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec385226.html
Well-known MSRPC named pipes
http://www.hsc.fr/ressources/articles/win_net_srv/well_known_named_pipes.html
services making legit use of unauthenticated named pipes
- Windows DFS -> netlogon
- Seen trendmicro services
- netapp connects anonymouslynetapp connects anonymously