Patriot

This proof-of-concept software exposes several security vulnerabilities in all desktop and server versions of Microsoft Windows 2000, 2003, and Windows XP. Patriot allows any unauthorized user to capture user names and passwords regardless of length or complexity. PATRIOT effectively defeats the Graphical Identification and Authentication ("GINA") security model without modifying GINA in any way. Stealthy yet effective, Patriot creates sub-processes which inherit all security privileges of NT Authority defeating Group Policy. Patriot's binaries and registry modifications can infect another workstation or domain controller in less than 250 milliseconds using rudimentary Ethernet 100Mbps peer-to-peer system tests. I contacted Microsoft's Dr. Mark Russinovich (2008) providing a detailed report and functional copy Patriot illustrating the problem. At that time, Mark Russinovich was a Technical Fellow in the Platform and Services Division at Microsoft. Microsoft's Security Response Center's defensive response cited Law #6 of their "10 Immutable Laws of Security" stating "A computer is only as secure as the administrator is trustworthy..." Moreover, the Patriot vulnerability remains unpublished and fully functional and remains uncorrected unto this day. I am the registered copyright holder of this software. It is provided for demonstration and analysis purposes only. Please adhere to the license agreement as I am not responsible for any use other than for demonstration and assessment.