Re: Re: Security issue??

From: Brad Pears (donotreply_at_notreal.com)
Date: 09/07/05 

Date: Wed, 7 Sep 2005 10:28:58 -0400

Could you give me an actual example of how this could have been done , using
an actual running service?? I'm just not sure how he could have run
"command" from within the service in order to run the managment console to
give himself admin rights...

My guess is he must have hacked the password but you never know...

"Sparda" <DoNotEmail@WindowsForumz.com> wrote in message
news:3_1395525_4ed3de00a473127f99428391a02d5f08@windowsforumz.com...
> "Sparda" wrote:
> > Well, he could have used a clever service (that runs as system
> > which has compleate control) to run cmd, which would give him
> > compleate access to every thing and could run the user
> > management thing and then give him self admin rights, not
> > exacly hard.
>
> You ask how he could run a program via a service? well, he could have
> found a service exe that he can change stuff, and replace the exe. If
> this is not the case, it can be a bit more tricky, he would have had
> to find a way to run a program as system with out going though a
> service.
>
> Posted Via Usenet.com Premium Usenet Newsgroup Services
> ----------------------------------------------------------
> ** SPEED ** RETENTION ** COMPLETION ** ANONYMITY **
> ----------------------------------------------------------
> http://www.usenet.com

Relevant Pages

  • Re: Security issue??
    ... >> which has compleate control) to run cmd, ... > found a service exe that he can change stuff, ... hashes & brute force them to get the password (takes a LONG time if a ... he could have logged into the admin account in safe mode.... ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Re: Security issue??
    ... > which has compleate control) to run cmd, ... > compleate access to every thing and could run the user ... > management thing and then give him self admin rights, ... found a service exe that he can change stuff, ...
    (microsoft.public.windowsxp.security_admin)
Quantcast