Re: [PEN-TEST] Expand right under Win2K

Hi all

> The only things that are possible are:
>
> 1) There is a known privilege escalation vulnerability that can be
> exploited with local unprivileged access. The attacker can download and
> run that code to gain Administrator access.
>
> 2) Brute force attack against accounts with local Administrator
> privilege.
>
> 3) Look for vulnerabilities in other systems that the web server can
> talk to. Some of those may expose Domain accounts with Administrator
> privilege on the web server or other systems that are trusted by the web
> server.

A possibility is to schedule the start of an application (netcat) per AT
command. Even under win2k it will be run as SYSTEM.

Regards,
Pascal.
Received on Jan 10 2001