Saturday, November 7, 2009

Hacking Windows Firewall

Hacking Windows Firewall
Recently I was presented with a problem,
having been orphaned from the domain (this was intentional as we dont have the
network connectivity where I am) the systems that we are using, now have the
Windows Firewall enabled, this prevents a required application from being able
to scan documents from the scanner to the computer.



?




After various unsuccessful tries at finding
an article on the internet that would show me how to add items to the firewall
I decided that it could not be that difficult, and tackled the problem myself.




?




The hack listed below should work if you
are able to get into the registry. Please note that this is not designed to
assist you in bypassing a legitimate block on the firewall, it is intended to
help you if there are defined business reasons for wanting to get through the
firewall.




?




?




?




PART 1:? Warnings



lang=EN-CA style='font-size:9.0pt;font-family:Tahoma;color:black'> style='text-decoration:none'>?



lang=EN-CA style='font-size:9.0pt;font-family:Tahoma;color:black'>1.style='font:7.0pt "Times New Roman"'>????????????
As always when editing the Registry it is prudent to make a backup
before making any changes. If you do not know how to make a backup then you
should not be making any changes.








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma;color:black'>2.style='font:7.0pt "Times New Roman"'>????????????
Creating exceptions in the Firewall could put your system at risk,
make sure that the changes you make are permitted in the environment the system
resides.








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma;color:black'>3.style='font:7.0pt "Times New Roman"'>????????????
Lastly ? if you do this and somehow wreck the system, don?t blame
me J




?




lang=EN-CA style='font-size:9.0pt;font-family:Tahoma;color:black'> style='text-decoration:none'>?



?




PART 2:? Application/Hardware Configuration



?




?




lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>1.????????????
Click Start>Run, type Regedit, press Enter
(if you did not know how to do this, then maybe you should reconsider doing
this.








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>2.????????????
Click
File>Export, make sure to select All, type in a file name to
an appropriate location and click Save.








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>3.????????????
Browse
to: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>4.????????????
From
here browse to: DomainProfile\AutorizedApplications\List








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>5.????????????
This
is where you are going to make the first entry. You should already see some in
there, and this is where you will have to have an understanding of what you are
reading.




lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>a.??????
Create
a new String Value by right clicking on List and selecting New>String Value




lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>b.??????
Change
the Name of the String Value to point to the executable that you wish to have
allowed, as you will notice from the others listed, it is advisable to use
expressions such as %programfiles%, or %windir% as this will help to allow the
exceptions if the folder in which they are installed is not the default.




lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>c.??????
After
the path you need to insert the follow, leave no spaces. :*:ENABLED:,
where is the name that you want to see in the actual
firewall settings.




lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>d.??????
Double
Click this String and add this as the Value Data for that string.








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>6.????????????
You
now need to make the same entry in the StandardProfile\List key.








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>7.????????????
Close
the Registry








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>8.????????????
Reboot
the Computer








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>9.????????????
Go to
the Control Panel and open the Windows Firewall.








lang=EN-CA style='font-size:9.0pt;font-family:Tahoma'>10.style='font:7.0pt "Times New Roman"'>????????
You
should see the entries under the Exceptions tab.




?

1 comment:

chinchin said...

good articles here..nice to read