Re: Re: Microsoft RDP Priv. Escalation
- From: Yousif@xxxxxxxxxxxx
- Date: 9 Apr 2008 02:39:59 -0000
Mark Owen - Say for example you've downloaded an executable on a computer that you have access to. Also, say the account you have access to WILL NOT allow you to run THAT executable. With the "alternateshell" option, you COULD run that executable. CMD.EXE Was simply an example as it is commonly disabled on typical user accounts.
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
- Prev by Date: [Tool Update] SSA version 1.6 beta 1 released
- Next by Date: Re: Tool or Scirpt for DHCP Pool Exhaust Attack
- Previous by thread: RE: Microsoft RDP Priv. Escalation
- Next by thread: Re: RE: Microsoft RDP Priv. Escalation
- Index(es):
Relevant Pages
|
