Regarding...
It's been a while since I played on a Windows box, but I believe you
can also create a service which launches
a useful process (e.g.: explorer.exe, cmd.exe) as Local System.
Furthermore, I believe that you can do
this as a Power User too.
Must check a bit that service
Hi list,
does anybody know if/how is possible to elevate privileges from Administrator
to SYSTEM level in Windows XP SP2 (and Windows in general) using *only*
default Windows tools or at last Resource Kit utilities. I've heard this is
possible with Task Scheduler... have tried but I didn't
does anybody know if/how is possible to elevate privileges from Administrator
to SYSTEM level in Windows XP SP2 (and Windows in general) using *only*
default Windows tools or at last Resource Kit utilities. I've heard this is
possible with Task Scheduler... have tried but I didn't work. Any
On Tue, 7 Mar 2006 23:27:10 +0100
Knud Erik Højgaard [EMAIL PROTECTED] wrote:
does anybody know if/how is possible to elevate privileges from
Administrator
to SYSTEM level in Windows XP SP2 (and Windows in general) using *only*
default Windows tools or at last Resource Kit utilities.
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\whoami
XP\Administrator
C:\at 23:45 /interactive cmd
Added a new job with job ID = 1
[ @23:45 new cmd window pops-up ]
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
Dear NULL,
from Administrator to SYSTEM level
- Task sheduler
at xx:xx cmd.exe
- CreateRemoteThread LoadLibrary Thread injection (lsass etc.)
http://www.codeproject.com/threads/winspy.asp
- The CreateRemoteThread WriteProcessMemory Technique (lsass etc.)
Dear Thierry Zoller,
using *only*
default Windows tools
Oops didn't see that one, sorry.
--
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7
___
Full-Disclosure - We believe in it.
Charter:
make sure ya clean up :)
C:\net stop Task Scheduler
C:\del %SystemRoot%\SchedLgU.Txt
C:\net start Task Scheduler
- illwill
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by
