Penetration Testing: RE: win2k pentest - what can i do?

[Jeff Seely <JSeely () riptech com>]

Since you have admin privs, you can use a tool like Dameware to install a
remote control agent remotely, then get access to the machine in a "PC
Anywhere" style. Just an idea....

http://www.dameware.com

-----Original Message-----
From: Matt Andreko [mailto:mandreko () ori net] 
Sent: Friday, July 06, 2001 6:54 AM
To: pen-test () securityfocus com
Subject: win2k pentest - what can i do?


I normally do not do pen tests on the win2k operating system.  However I am
doing one at the moment.  I have successfully got Administrator privelages,
but only at a pseudo-dos-prompt...  Is there anything i can do to get
graphical abillities, since windows is basically useless without just
graphics.  I have used the "net user" command to create a new user, and
added it to the Administrators group, but I do not have physical access to
this machine.

Any help would be appreciated.

--
Matt Andreko
On-Ramp Indiana
(317)774-2100


----------------------------------------------------------------------------
----------

This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service For more information on SecurityFocus' SIA service which
automatically alerts you to 
the latest security vulnerabilities please see:

https://alerts.securityfocus.com/

--------------------------------------------------------------------------------------

This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service
For more information on SecurityFocus' SIA service which automatically alerts you to 
the latest security vulnerabilities please see:

https://alerts.securityfocus.com/