pen-test
[Top] [All Lists]

[Possibly OT] Adding IPSEC support to WinPE/BartPE

To: "'pen-test'" <pen-test@securityfocus.com>
Subject: [Possibly OT] Adding IPSEC support to WinPE/BartPE
From: "Javier Jarava" <jjarava@gmail.com>
Date: Fri, 9 Mar 2007 13:05:53 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:from:to:subject:date:message-id:mime-version:content-type:content-transfer-encoding:x-mailer:x-mimeole:thread-index; b=gO1lUC6KB6SiV/zTFv2pXGOR+VMfLEMbN/SMOdZdnZwPriXayOWBGxBJ29zEoZmVt6UCs3+O3RSHy7VkfE5V9l2KpKUaD50/ZRzZDP0Z7vhFFXOKV7FDXxLW0egmyvlupI6M8VTmK4c1YUkcti5MEc66zuKAmpM0uIoLnMA9//k=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:from:to:subject:date:message-id:mime-version:content-type:content-transfer-encoding:x-mailer:x-mimeole:thread-index; b=LgGEorY4D8fDFjfaK9la3SM08V2BQRYmK6grNS6TirmWrb/uvn0WCxhUAntImQ0NWiYwv3nC0HIio+5IDivqky2qCjHY2mgXvHfOYevdHiA+zbTe123XiZtsZrqKPd7Xc4x/II7jhlW9FAFAh5irLdLQ0p6WypN1BEFd3gcB0tg=
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
Resent-date: Fri, 9 Mar 2007 14:24:13 -0700 (MST)
Resent-from: pen-test-return-1078483739@securityfocus.com
Resent-message-id: <20070309212413.2872B2432E1@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
Thread-index: AcdiQ0kWyap2QEcvTsm0J/omiERosw==
Hi, list!

I'm not too sure if the topic is really appropriate for the list, but OTOH,
I think this is the more likely forum where I might get an answer that *I*
know.

The issue is the following: I need to be able to use IPSEC on a WinPE /
BartPE based BootCD to establish a secure channel and encrypt
communications.

I have been doing some preliminary testing, and the pre-requisites seem to
be there.

The "IPSEC Services" service (a.k.a. PolicyAgent) is installed, but
(surprisingly?) not running:

SERVICE_NAME: PolicyAgent
DISPLAY_NAME: IPSEC Services
        TYPE               : 20  WIN32_SHARE_PROCESS  
        STATE              : 1  STOPPED 
                                (NOT_STOPPABLE, NOT_PAUSABLE,
IGNORES_SHUTDOWN))
        WIN32_EXIT_CODE    : 126  (0x7e)
        SERVICE_EXIT_CODE  : 126  (0x7e)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

When I try to "net start" it, I get a 126 error:

        The IPSEC Services service could not be started.

        A system error has occurred.

        System error 126 has occurred.

        The specified module could not be found.

The service's dependencies (IPSEC Driver, tcpip and RPCSS) are up and
running, so I'm a bit at a loss as to why, if everything "shows" that it
should be running, it doesn't...

Any help / pointers / ideas are more than welcome. If you know of any other
IPSEC implementation that can be loaded in the CD instead of the native MS
one, that'd be other way of doing it...

Thanks a lot in advance.

        Javier


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>
  • [Possibly OT] Adding IPSEC support to WinPE/BartPE, Javier Jarava <=