mailing list archives
Re: Abusing Windows 7 Recovery Process
From: Cool Hand Luke <coolhandluke () coolhandluke org>
Date: Sat, 29 Jun 2013 20:51:32 +0000
-----BEGIN PGP SIGNED MESSAGE-----
On 06/29, Grandma Eubanks wrote:
However, I think this is still interesting. It's been a while since I've
played with Windows boxes and won't have access to one for a couple days,
but isn't this triggering off of vendor supplied recovery partitions? This
is a regular Windows 7 sole partition box you tried this one?
from a first look, i don't think a vendor-supplied recovery partition is
necessary. it appears that it would also be possible if the "system
restore" setting was enabled (but don't quote me on that).
i'm not sure how likely that is in your average large, corporate
environment. the ones i've seen have system restore disabled and opt to
reimage systems instead when issues occur. i'm sure there are some
environments where this could be useful, however.
cool hand luke
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
-----END PGP SIGNATURE-----
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/