Re: problems to start a task with at.exe

From: Windex King (WindexKing@mor-lan-d.com)
Date: 11/15/01 

Message-ID: <3BF35791.9C816A4C@mor-lan-d.com>
Date: Thu, 15 Nov 2001 00:50:09 -0500
From: Windex King <WindexKing@mor-lan-d.com>
To: pen-test@securityfocus.com
Subject: Re: problems to start a task with at.exe

Hi,

I think Mike Brentlinger is on the right track but I
think a bit more clarification should help.

By default, the schedule service starts as LocalSystem.

So, if you fire up an interactive LocalSystem cmd.exe
session and do some testing you should see:

C:\>id
uid=1(SYSTEM) gid=1(SYSTEM) groups=2(Administrators),3(Everyone)

C:\>pwdump
pwdump: You must be running as user Administrator to run this program

C:\>

On my W2K box, the new pwdump2 worked fine via a LocalSystem shell.

W K

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Relevant Pages

  • Re: faster scans? (nmap)
    ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: pen test help please asap
    ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: CFM SQL injection
    ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: ettercap help
    ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)