RE: priviledge escalation techniques

From: BSK (bishan4u_at_yahoo.co.uk)
Date: 01/24/05

  • Next message: Marc Heuse: "DIMVA 2005 - Final Call for Papers"
    Date: Mon, 24 Jan 2005 08:47:58 +0000 (GMT)
    To: pen-test@securityfocus.com
    
    

    > prefetch stores. If you look in the
    > C:\WINDOWS\Prefetch directory you
    > will see all the recently loaded executable files
    > stored in a prefetch
    > format.

    well surprisingly there is no Prefetch directory
    anywhere in my windows 2000 proff. and server

    > If you open a dos prompt and (make a backup of the
    > sethc.exe file
    > warning here) copy cmd.exe to sethc.exe, answering
    > that yes, you do want
    > to overwrite the original, you will see the new
    > sethc.exe in an explorer
    > window with a cmd.exe icon. Now, if you delete
    > that, windows will
    > restore sethc.exe but with a cmd.exe icon (note the
    > file sizes). When
    > done this way, pressing shift 5 times will indeed
    > open a cmd prompt.

    Yes, windows replaces the file as u mentioned but
    still doesn't open anything on 'shift' 5 times :(

            
            
                    
    ___________________________________________________________
    ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com


  • Next message: Marc Heuse: "DIMVA 2005 - Final Call for Papers"

    Relevant Pages

    • Re: winword.exe starts automatically at boot up, uses large % and
      ... MS-MVP Windows Shell/User ... Prefetch needs the Task Scheduler service ... Prefetching boot files and applications decreases the ... Optimizing Startup Times by Using Defragmentation Tools ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: winword.exe starts automatically at boot up, uses large % and
      ... MS-MVP Windows Shell/User ... Prefetch needs the Task Scheduler service ... Prefetching boot files and applications decreases the ... Optimizing Startup Times by Using Defragmentation Tools ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: winword.exe starts automatically at boot up, uses large % and
      ... "Wesley Vogel" wrote: ... MS-MVP Windows Shell/User ... Prefetch needs the Task Scheduler service ... Optimizing Startup Times by Using Defragmentation Tools ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: winword.exe starts automatically at boot up, uses large % and
      ... MS-MVP Windows Shell/User ... Windows XP Professional can prefetch them. ... Prefetching boot files and applications decreases the ... Optimizing Startup Times by Using Defragmentation Tools ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: Indexing Service..
      ... Prefetch files are essentially a resource list. ... the application doesn't already have an associated prefetch file, Windows XP ... might hear the hard disk being accessed when optimization occurs. ... BTW, Adobe extension will end with PDF not PF, the spyware would like ...
      (microsoft.public.windowsxp.basics)

  • Quantcast