Developer's Guide to Web Application Security

Notes from the Underground…

Don’t Be Fooled by the Name

Even though BO2K is named “Back Orifice 2000,” don’t think that it’s out-of-date

software. BO2K continues to be developed, with new features being added reg-

ularly. Back Orifice gets its name as a disparaging reference to Microsoft’s Back

Office. The original version of Back Orifice came out in August 1998, but only

worked on Windows 95 and 98. Back Orifice 2000 was released to work on

newer versions of the Windows operating system, inclusive to Windows NT, 2000,

and XP. Even though BO2K’s name hasn’t changed in recent years, there are

numerous improvements since its initial design. Copies of the source ...