Re: [Full-Disclosure] Re: getting administrator rights on win2003 machine?

From: darren windham (elcamino74ss_at_gmail.com)
Date: 10/28/04

  • Next message: Thierry Carrez: "[ GLSA 200410-28 ] rssh: Format string vulnerability" 
    To: Kenneth Ng <kenneth.d.ng@gmail.com>
Date: Thu, 28 Oct 2004 16:37:28 -0500

    If you can't find the tool on your own that can reset the local admin
    account you need help. I carry it in floppy and cd form with me
    incase I ever have a server I'm working on that no one knows the
    passwords to.

    Learn to use search engines before you start making yourself look silly.

    On Thu, 28 Oct 2004 16:29:36 -0400, Kenneth Ng <kenneth.d.ng@gmail.com> wrote:
    > It gets a bit harder when you have a lot of KVM switches in a big data
    > center. It gets even harder when the KVM's are IP accessible
    > throughout the firm because the twits who put it in didn't believe in
    > IP access lists.
    >
    > On Thu, 28 Oct 2004 13:22:41 -0400, valdis.kletnieks@vt.edu
    >
    >
    > <valdis.kletnieks@vt.edu> wrote:
    > > On Thu, 28 Oct 2004 16:49:44 +0200, Honza Vlach said:
    > > >
    > > > --9Ek0hoCL9XbhcSqy
    > > > Content-Type: text/plain; charset=iso-8859-2
    > > > Content-Disposition: inline
    > > > Content-Transfer-Encoding: quoted-printable
    > > >
    > > > > use knoppix to boot from, mount the ntfs filesystem, and search the net for
    > > > > which keys in registry you have to change. there may be other files too that
    > > > > you have to change
    > > > > there even are special bootcd's that are made only for the purpose of changing
    > > > > the admin pass etc...
    > > >
    > > > I thought that real blackhats don't teach lamers who can't even do their
    > > > homework properly =^)
    > >
    > > The part that nobody's going to tell him:
    > >
    > > 1) It's *easy* to whomp a server with a Knoppix boot if you have physical access.
    > >
    > > 2) It's *HARD* to do so without anybody noticing that the server is down and
    > > you're sitting there in front of it, typing away as fast as you can. And even
    > > the most midget-brained user can figure out that if the server is down, and
    > > you're still typing, and you're *not* the sysadmin, you probably have something
    > > to do with why it's down...
    > >
    > > :)
    > >
    > >
    > >
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    >

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Thierry Carrez: "[ GLSA 200410-28 ] rssh: Format string vulnerability"

    Relevant Pages

    • RE: Password disappears
      ... account password will be reset to empty automatic. ... SBS infected by Trojan horse. ... Configure account lockout policy. ...
      (microsoft.public.windows.server.sbs)
    • RE: Quick question on resetting computer accounts in AD
      ... and recreating the account. ... Is it okay to use the reset account function? ... SBS Server Management console does not have "Reset Account" command to ... In fact, the SBS Server Management console has already integrated ADUC, you ...
      (microsoft.public.windows.server.sbs)
    • Re: Domain Profiles Borked - Cant Grant Admin Rights - HELP!!!
      ... > status of their account. ... local Admin rights were given to ... > afflicted machine and give them local Admin rights, ... the SID of your users is no longer the same as it was. ...
      (microsoft.public.windowsxp.setup_deployment)
    • RE: local admin account password
      ... Do you think if someone wanted to break the local admin account they ... more recovery console and don't think cached logins will work. ... 5)My main idea/plan is to store all the passwords on a central SQL server. ...
      (Focus-Microsoft)
    • Re: Problems installing SQL Server 2005 in two node cluster
      ... the SQL Server service account does not need to be a local admin. ... > -> Purging the setup files from the registry with the Windows Install ...
      (microsoft.public.sqlserver.clustering)
    • Quantcast