Re: [Full-disclosure] elevating privileges from Admin to SYSTEM

2006-03-08 Thread Yorn
Regarding... >It's been a while since I played on a Windows box, but I believe you can also create a service which launches > a useful process (e.g.: "explorer.exe", "cmd.exe") as "Local System". Furthermore, I believe that you can do > this as a "Power User" too. & >Must check a bit that se

Re: Re[2]: [Full-disclosure] elevating privileges from Admin to SYSTEM

2006-03-07 Thread Ill will
make sure ya clean up :) C:\>net stop "Task Scheduler" C:\>del %SystemRoot%\SchedLgU.Txt C:\>net start "Task Scheduler" - illwill ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored

Re[2]: [Full-disclosure] elevating privileges from Admin to SYSTEM

2006-03-07 Thread Thierry Zoller
Dear Thierry Zoller, >using *only* >default Windows tools Oops didn't see that one, sorry. -- http://secdev.zoller.lu Thierry Zoller Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7 ___ Full-Disclosure - We believe in it. Charter: http

Re: [Full-disclosure] elevating privileges from Admin to SYSTEM

2006-03-07 Thread Thierry Zoller
Dear NULL, >from Administrator to SYSTEM level - Task sheduler at xx:xx cmd.exe - CreateRemoteThread & LoadLibrary Thread injection (lsass etc.) http://www.codeproject.com/threads/winspy.asp - The CreateRemoteThread & WriteProcessMemory Technique (lsass etc.) http://win32.mvps.org/processes

Re: [Full-disclosure] elevating privileges from Admin to SYSTEM

2006-03-07 Thread /dev/null
Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp. C:\>whoami XP\Administrator C:\>at 23:45 /interactive cmd Added a new job with job ID = 1 [ @23:45 new cmd window pops-up ] Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp. C:\WINDOWS

Re: [Full-disclosure] elevating privileges from Admin to SYSTEM

2006-03-07 Thread Nick Withers
On Tue, 7 Mar 2006 23:27:10 +0100 "Knud Erik Højgaard" <[EMAIL PROTECTED]> wrote: > > does anybody know if/how is possible to elevate privileges from > > Administrator > > to SYSTEM level in Windows XP SP2 (and Windows in general) using *only* > > default Windows tools or at last Resource Kit uti

Re: [Full-disclosure] elevating privileges from Admin to SYSTEM

2006-03-07 Thread Knud Erik Højgaard
> does anybody know if/how is possible to elevate privileges from Administrator > to SYSTEM level in Windows XP SP2 (and Windows in general) using *only* > default Windows tools or at last Resource Kit utilities. I've heard this is > possible with Task Scheduler... have tried but I didn't work. Any

[Full-disclosure] elevating privileges from Admin to SYSTEM

2006-03-07 Thread /dev/null
Hi list, does anybody know if/how is possible to elevate privileges from Administrator to SYSTEM level in Windows XP SP2 (and Windows in general) using *only* default Windows tools or at last Resource Kit utilities. I've heard this is possible with Task Scheduler... have tried but I didn't work